Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/63f08337-c0d1-3e84-9d87-806dd5a76af3.roa
File:                     63f08337-c0d1-3e84-9d87-806dd5a76af3.roa (raw, json)
Hash identifier:          ENdtkfi2eg3Q1PqxjIFF70pVWQ4OEQSziSEnpjSdtn8=
Subject key identifier:   BB:D8:FD:2C:43:0B:49:CA:FF:AF:B5:B2:49:58:E1:95:30:90:AA:B4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847DC64B08245A4EDAD88FB4000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/63f08337-c0d1-3e84-9d87-806dd5a76af3.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     9009
IP address blocks:        172.111.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 10:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:b0:82:45:a4:ed:ad:88:fb:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=bd85f805-305f-47c0-91d7-d04b0402beb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:38:45:9c:fa:73:6d:66:8b:39:92:f9:47:10:
                    5f:20:c2:cd:60:3a:e3:ff:1c:c1:54:74:65:e7:ca:
                    cd:b4:4b:fb:7b:e1:53:de:5b:80:95:34:74:78:3a:
                    e6:1a:ee:8c:9b:9e:1f:55:df:5e:9d:36:c5:58:b2:
                    41:f4:23:17:f2:7d:81:08:13:51:7b:98:c9:a7:b5:
                    86:6b:e7:cb:ef:8b:79:fa:05:fc:43:10:7e:ea:09:
                    bc:0f:c4:04:c4:70:45:db:fa:28:6c:ba:8a:43:9c:
                    44:30:33:a9:6d:4c:c5:07:17:3f:08:1b:34:bb:93:
                    0a:da:09:3a:c6:7b:ca:0a:b2:c4:95:8c:98:68:7b:
                    0a:e8:1c:75:0c:d2:25:2d:0a:7f:13:c6:f3:d5:da:
                    b2:63:aa:2b:33:87:f2:ae:c4:d1:b8:1d:b9:27:37:
                    32:cc:a7:91:9b:d9:4c:2d:c5:19:26:94:c6:af:ea:
                    27:52:1c:1b:be:0c:fd:af:67:65:51:c2:fc:c1:82:
                    6c:59:0e:3c:24:a1:d3:51:63:cb:de:00:39:69:c2:
                    8b:91:2f:a7:de:66:09:cd:03:5d:1b:2d:51:47:62:
                    74:3a:a0:1b:d2:20:47:2c:93:45:ad:9e:4b:99:a5:
                    e9:2d:1d:2b:d1:b8:57:f1:d6:79:f4:2d:19:6a:03:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D8:FD:2C:43:0B:49:CA:FF:AF:B5:B2:49:58:E1:95:30:90:AA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/63f08337-c0d1-3e84-9d87-806dd5a76af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:8f:ac:e6:eb:7c:15:bc:ae:d6:f7:32:8f:9c:e3:3f:b7:
         46:9e:6e:e8:d4:a7:7e:c2:50:a6:37:e5:bd:c9:8c:09:61:95:
         51:a1:8d:a2:76:31:79:22:ad:62:cf:c0:70:ea:c9:63:72:fc:
         fe:ec:88:d6:6b:c0:a2:f7:e6:5c:22:83:d9:69:c1:65:90:65:
         9f:35:d4:14:bd:12:df:b7:9f:d0:05:26:cf:d0:fb:e4:70:c2:
         f8:e7:0d:66:28:50:91:33:67:1f:60:73:46:22:51:71:de:50:
         a1:b8:f5:5f:70:c2:fd:05:08:67:58:91:40:d4:a3:9c:40:7b:
         b8:ef:51:25:e2:a0:f4:dd:99:8f:53:de:c9:0a:8b:65:ba:3e:
         7e:62:81:4e:7f:62:89:aa:e6:c4:35:87:75:b1:3d:ac:66:b1:
         fc:68:0b:8d:92:3e:05:cb:82:37:61:dd:c6:b0:6f:86:5c:2c:
         6f:05:68:43:49:0c:f7:bc:57:e1:31:18:c2:3e:07:ce:35:3c:
         b5:9b:e6:c5:dc:b3:6f:b3:bc:5e:cb:77:80:eb:a1:84:33:38:
         e9:cb:8e:b4:df:c6:49:34:45:48:4c:32:27:c7:d1:c3:13:db:
         78:d8:b9:4d:e5:13:19:99:2c:74:85:5b:98:ea:74:ec:3f:c6:
         06:a4:55:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZLCCRaTtrYj7QAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
YmQ4NWY4MDUtMzA1Zi00N2MwLTkxZDctZDA0YjA0MDJiZWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzhFnPpzbWaLOZL5RxBfIMLNYDrj/xzBVHRl
58rNtEv7e+FT3luAlTR0eDrmGu6Mm54fVd9enTbFWLJB9CMX8n2BCBNRe5jJp7WG
a+fL74t5+gX8QxB+6gm8D8QExHBF2/oobLqKQ5xEMDOpbUzFBxc/CBs0u5MK2gk6
xnvKCrLElYyYaHsK6Bx1DNIlLQp/E8bz1dqyY6orM4fyrsTRuB25JzcyzKeRm9lM
LcUZJpTGr+onUhwbvgz9r2dlUcL8wYJsWQ48JKHTUWPL3gA5acKLkS+n3mYJzQNd
Gy1RR2J0OqAb0iBHLJNFrZ5LmaXpLR0r0bhX8dZ59C0ZagN47wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLvY/SxDC0nK/6+1sklY4ZUwkKq0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjNmMDgzMzctYzBkMS0z
ZTg0LTlkODctODA2ZGQ1YTc2YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1Uj6zm63wVvK7W9zKPnOM/t0aebujUp37CUKY35b3JjAlhlVGhjaJ2
MXkirWLPwHDqyWNy/P7siNZrwKL35lwig9lpwWWQZZ811BS9Et+3n9AFJs/Q++Rw
wvjnDWYoUJEzZx9gc0YiUXHeUKG49V9wwv0FCGdYkUDUo5xAe7jvUSXioPTdmY9T
3skKi2W6Pn5igU5/Yomq5sQ1h3WxPaxmsfxoC42SPgXLgjdh3cawb4ZcLG8FaENJ
DPe8V+ExGMI+B841PLWb5sXcs2+zvF7Ld4DroYQzOOnLjrTfxkk0RUhMMifH0cMT
23jYuU3lExmZLHSFW5jqdOw/xgakVeM=
-----END CERTIFICATE-----