Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd457c3f-cb42-34c1-b568-b2022678745f.roa
File:                     cd457c3f-cb42-34c1-b568-b2022678745f.roa (raw, json)
Hash identifier:          6kUNhATk1VCD9y6LtP9vHZP0N/tmU/CF1W+xxe5cFtA=
Subject key identifier:   33:60:DF:8D:98:1C:66:6E:B5:77:17:0D:07:92:E3:70:1F:DB:F8:D2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858476B363E2EA6F18D2DAC65AD00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd457c3f-cb42-34c1-b568-b2022678745f.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        45.74.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 08:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:3e:2e:a6:f1:8d:2d:ac:65:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=4472ffc0-6594-4cfc-a927-808c19ab19d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:1a:5f:72:e6:a7:99:d8:58:36:98:86:65:
                    03:cb:80:20:65:85:54:aa:bd:d6:b8:12:1f:4f:6d:
                    9a:0b:73:09:cc:a9:9b:81:b8:5d:a2:2d:a0:55:a6:
                    49:5e:d4:3e:27:cc:d8:61:cf:fb:c0:de:00:b7:02:
                    2c:9f:a7:ab:ca:2d:ae:4e:29:27:88:0f:76:a5:a5:
                    01:d9:75:10:f5:71:5c:6d:e9:a8:01:0c:44:66:95:
                    fc:48:2f:d1:2f:3a:da:dd:fd:5e:01:a9:89:b0:bb:
                    96:e2:62:27:7e:4a:af:15:eb:c8:9f:c1:7d:be:4f:
                    9b:3c:ba:ca:79:37:bd:1e:31:8e:09:37:02:e2:4e:
                    b2:14:a6:0b:e6:85:5f:12:ad:c4:02:a3:9f:90:11:
                    57:14:c0:8f:ab:83:95:87:37:47:81:cf:03:c3:7b:
                    ba:63:d3:0a:97:df:e4:9c:f2:2b:7b:e1:ea:99:3b:
                    33:67:5f:65:96:9e:47:ae:50:34:2b:ba:1d:39:fb:
                    d7:13:df:ba:fa:6b:50:19:f5:e4:4e:44:bb:46:1f:
                    b6:ff:1d:5e:4f:c1:a5:6a:04:6b:60:f2:02:d4:46:
                    e1:b7:6e:70:45:c2:0e:25:74:54:83:89:fd:2f:fc:
                    f5:51:06:b5:1d:97:bb:a0:7c:ed:b8:77:c8:28:a2:
                    5e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:DF:8D:98:1C:66:6E:B5:77:17:0D:07:92:E3:70:1F:DB:F8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd457c3f-cb42-34c1-b568-b2022678745f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:90:2d:5b:9b:ba:22:f9:ce:a1:cb:8f:99:c3:85:96:86:
         31:36:18:4e:14:71:5e:3e:14:60:ee:a8:67:61:5f:55:2b:ec:
         d8:7a:16:82:99:ef:30:56:46:1f:4c:97:39:03:e3:c6:1d:3b:
         72:96:84:5f:b4:bc:07:a7:0d:28:e7:9b:55:b4:1f:07:06:7e:
         f6:c0:78:9a:f7:b7:29:6e:14:a5:a6:97:29:c0:12:a9:82:21:
         a2:e0:cf:4b:24:05:94:6c:5f:1a:65:f3:0e:6f:eb:8d:f1:10:
         64:68:26:cc:a9:a0:b5:45:5f:89:26:a2:c5:65:fa:7b:af:46:
         6d:2e:26:a7:a2:1e:9f:e9:e8:4f:bf:0d:22:d7:1a:26:f5:f3:
         2d:80:02:90:23:a9:5d:64:34:83:34:20:ca:a5:38:f1:fd:e2:
         a8:a5:da:62:7a:45:89:e2:e1:cc:56:a5:18:2b:b1:32:39:3f:
         ee:19:85:ed:14:3d:07:61:8c:4a:c1:d0:9a:27:33:81:39:e1:
         67:60:52:1c:36:ea:d3:05:61:c6:1f:76:6b:3d:39:5a:17:bc:
         5a:91:6e:49:fc:9a:ee:4e:d7:dc:04:1e:ad:20:06:31:33:7c:
         a1:83:99:d6:10:7e:e2:33:f7:56:30:e1:a5:3a:d7:a2:b0:25:
         f8:ee:bb:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNj4upvGNLaxlrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk
NDQ3MmZmYzAtNjU5NC00Y2ZjLWE5MjctODA4YzE5YWIxOWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3EaX3Lmp5nYWDaYhmUDy4AgZYVUqr3WuBIf
T22aC3MJzKmbgbhdoi2gVaZJXtQ+J8zYYc/7wN4AtwIsn6eryi2uTikniA92paUB
2XUQ9XFcbemoAQxEZpX8SC/RLzra3f1eAamJsLuW4mInfkqvFevIn8F9vk+bPLrK
eTe9HjGOCTcC4k6yFKYL5oVfEq3EAqOfkBFXFMCPq4OVhzdHgc8Dw3u6Y9MKl9/k
nPIre+HqmTszZ19llp5HrlA0K7odOfvXE9+6+mtQGfXkTkS7Rh+2/x1eT8GlagRr
YPIC1Ebht25wRcIOJXRUg4n9L/z1UQa1HZe7oHztuHfIKKJeTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNg342YHGZutXcXDQeS43Af2/jSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2Q0NTdjM2YtY2I0Mi0z
NGMxLWI1NjgtYjIwMjI2Nzg3NDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4UkC1bm7oi+c6hy4+Zw4WWhjE2GE4UcV4+FGDuqGdhX1Ur7Nh6FoKZ
7zBWRh9MlzkD48YdO3KWhF+0vAenDSjnm1W0HwcGfvbAeJr3tyluFKWmlynAEqmC
IaLgz0skBZRsXxpl8w5v643xEGRoJsypoLVFX4kmosVl+nuvRm0uJqeiHp/p6E+/
DSLXGib18y2AApAjqV1kNIM0IMqlOPH94qil2mJ6RYni4cxWpRgrsTI5P+4Zhe0U
PQdhjErB0JonM4E54WdgUhw26tMFYcYfdms9OVoXvFqRbkn8mu5O19wEHq0gBjEz
fKGDmdYQfuIz91Yw4aU616KwJfjuu6k=
-----END CERTIFICATE-----