Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/929c8eef-5fb4-3046-9fb4-95e1c00e5037.roa
File:                     929c8eef-5fb4-3046-9fb4-95e1c00e5037.roa (raw, json)
Hash identifier:          aXGI7ieu9A7U8iAYdlA5vzQCDDpuaoaqgVNx3iFiT4Q=
Subject key identifier:   64:17:FB:59:A4:F4:D1:95:CD:B0:E0:51:5B:FF:AD:35:D2:FF:0A:77
Certificate issuer:       /CN=28cbed49-e939-45fa-95d9-3bb13f35a47e
Certificate serial:       010D0C9F43285840A37B7D1B1889C527A0819680
Authority key identifier: 1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/929c8eef-5fb4-3046-9fb4-95e1c00e5037.roa
Signing time:             Wed 16 Feb 2022 15:37:41 +0000
ROA not before:           Wed 16 Feb 2022 15:37:41 +0000
ROA not after:            Thu 24 Apr 2025 04:00:00 +0000
asID:                     31786
IP address blocks:        208.99.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 May 2023 16:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a3:7b:7d:1b:18:89:c5:27:a0:81:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28cbed49-e939-45fa-95d9-3bb13f35a47e
        Validity
            Not Before: Feb 16 15:37:41 2022 GMT
            Not After : Apr 24 04:00:00 2025 GMT
        Subject: CN=c97c0ca8-2657-4e88-924f-d2b359735efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:8a:6a:3a:b2:6f:a7:ec:db:5e:61:1a:c5:
                    b0:54:c3:c9:9a:27:5e:57:07:53:d3:d5:01:15:f8:
                    57:92:c9:71:a9:43:cd:cb:e1:1d:0b:2b:11:59:6f:
                    7d:9c:57:a9:76:4a:74:63:b4:4e:7a:fc:9c:d8:0b:
                    de:f7:92:99:e3:4b:9d:50:ab:31:5d:bb:61:a1:9d:
                    f3:f2:cb:0c:33:1f:bd:2e:86:da:2d:90:d0:83:f7:
                    64:60:c3:c2:db:6d:36:57:f1:a3:c7:6d:ba:d0:6b:
                    f2:be:0a:c6:c6:11:61:87:d6:e4:fd:7d:13:f4:20:
                    ea:19:1e:2a:2e:08:27:a0:b2:93:81:96:25:c7:f1:
                    9a:c9:df:4f:dd:ea:7e:03:67:88:db:fb:e0:c3:8c:
                    1a:15:6f:47:e5:f1:8d:be:a6:38:79:c0:16:b2:b8:
                    2b:6a:83:83:6c:3d:19:28:88:70:48:c5:ed:1b:0e:
                    7c:28:e1:99:6e:e1:18:57:11:bd:50:4f:cf:5d:3f:
                    eb:15:c3:48:57:7a:fa:06:00:01:f0:29:e4:01:56:
                    b1:1d:81:ea:69:bf:8a:f5:e8:02:90:28:d8:4a:03:
                    11:77:bc:c0:5c:11:e5:a1:4d:17:b2:5f:5b:6e:4e:
                    f7:46:0d:49:87:46:f5:e0:77:14:0b:ad:b8:f1:ee:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:FB:59:A4:F4:D1:95:CD:B0:E0:51:5B:FF:AD:35:D2:FF:0A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/929c8eef-5fb4-3046-9fb4-95e1c00e5037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/28cbed49-e939-45fa-95d9-3bb13f35a47e.crl

            X509v3 Authority Key Identifier:
                keyid:1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:af:7d:5c:49:7c:15:f6:da:a5:fd:c4:be:88:a7:4e:61:
         71:32:4b:74:6d:e7:12:c6:32:07:c6:d7:5b:f8:3e:d7:1b:af:
         c4:04:f6:5b:d7:83:c0:37:fe:c1:32:1b:46:3a:73:c6:d3:2d:
         10:33:0b:1d:36:79:97:cd:a3:1a:7c:42:16:b9:87:f2:c1:17:
         39:28:09:93:1e:46:e4:81:b8:e9:73:3d:83:07:6f:13:45:29:
         cf:33:54:c5:43:20:d0:62:b3:26:5b:62:3b:fe:d7:86:e1:94:
         5f:d4:df:8d:69:32:e0:7e:97:d3:f7:b3:4a:b4:f0:81:3d:5e:
         60:53:d9:f6:0d:ca:d3:71:af:1f:ef:6f:79:9f:c2:ef:47:ff:
         7f:6b:2e:c8:66:d8:27:3a:80:76:37:dd:b2:d7:4a:9e:6f:23:
         34:1a:96:2d:e9:9a:0c:2f:73:76:0a:60:54:d5:6b:a8:fa:48:
         88:f7:91:e3:80:52:9e:da:73:ca:3c:59:14:65:50:fb:d8:1a:
         83:3a:8f:72:bd:23:a4:a8:7d:37:d4:33:37:5e:ab:f1:08:d0:
         d7:99:87:58:79:00:44:0c:20:9f:78:9f:90:c2:a0:9f:6d:44:
         b3:b0:4c:a9:0c:ef:0e:9d:f4:73:e8:98:7c:0b:70:55:cf:83:
         19:b4:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----