Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5bf71c8-c877-3a3d-a853-41cbbb79823c.roa
File:                     f5bf71c8-c877-3a3d-a853-41cbbb79823c.roa (raw, json)
Hash identifier:          Tp+ddgFVG0gZ+UnPsILGCxC0J4ieZiFsIkiWNCT20iQ=
Subject key identifier:   DC:62:05:D6:D7:D2:85:E7:2C:00:A7:29:04:47:9A:2B:72:9B:2D:72
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845CE08F3AD48F8B850FB3D2D00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5bf71c8-c877-3a3d-a853-41cbbb79823c.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     203020
IP address blocks:        104.250.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 May 2024 11:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f3:ad:48:f8:b8:50:fb:3d:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=0d05ae5c-f3fb-4a26-a587-6057a1aa7cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:8e:b6:dd:f2:d2:15:02:71:bd:f6:d5:1c:
                    8c:05:36:a2:ab:69:77:94:2f:3d:aa:93:cc:c3:a3:
                    78:fa:63:c3:bf:f1:85:47:8e:b6:56:8e:0c:26:fe:
                    e6:51:8b:8a:15:1c:23:77:33:3d:9c:ef:a9:55:5b:
                    05:ce:10:9c:82:b5:48:3f:61:86:3a:ab:ec:a1:31:
                    e9:83:1c:c9:25:30:d5:8d:88:61:d9:90:ff:7e:b5:
                    9a:da:0b:ee:63:d4:76:9a:aa:f8:29:2b:db:9f:d9:
                    6b:8a:8e:e4:3d:2b:98:2a:bd:16:26:f8:43:b3:39:
                    79:31:0c:0b:08:ca:d9:45:d8:04:cb:c6:c9:4c:27:
                    f1:51:e5:c7:17:39:1a:bb:88:ee:7f:8e:ec:bb:8a:
                    ff:db:fb:90:85:8b:07:d0:ef:1d:cb:13:85:f8:5e:
                    51:7e:62:35:d9:a9:4f:63:72:f1:14:04:74:fa:99:
                    0a:57:24:73:17:04:a0:17:41:70:ea:ba:03:78:af:
                    dd:fb:fa:b9:24:4e:f1:f8:5c:19:54:7c:ce:63:23:
                    9d:4d:0d:d7:0e:da:90:20:43:23:79:70:f9:5c:55:
                    2e:cb:c2:b2:30:4a:d9:5c:3b:c4:55:23:d6:00:13:
                    60:2a:59:86:85:3d:54:68:e5:de:69:35:09:ad:9e:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:62:05:D6:D7:D2:85:E7:2C:00:A7:29:04:47:9A:2B:72:9B:2D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5bf71c8-c877-3a3d-a853-41cbbb79823c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:a7:fc:e7:d4:e1:f7:2e:83:b2:fb:93:dc:6d:9e:21:58:
         76:a1:4a:0b:f8:1a:b1:c7:ec:d0:ea:e5:3b:da:92:24:f5:17:
         dd:b5:de:10:1b:5f:40:65:3c:76:ba:29:c9:14:71:60:91:7b:
         ba:9e:77:53:e8:98:33:47:ec:2b:6f:c1:0b:99:3f:99:bb:f1:
         00:06:a0:c9:0a:99:c9:f3:af:7e:59:78:01:23:b9:6b:02:23:
         3a:ea:8d:c6:6f:8c:d5:d6:2c:14:c3:08:29:1c:87:54:35:96:
         35:d9:17:e9:2b:b5:f2:74:33:33:ee:79:72:01:23:79:d7:62:
         96:36:f1:b9:d4:d5:63:1c:9e:82:0e:be:71:e4:6d:38:c1:c9:
         bb:89:3f:87:77:67:61:3e:35:95:6d:44:7d:16:65:92:1d:b8:
         99:52:2d:f5:0d:85:fa:ed:52:06:8b:53:06:ff:76:b9:ed:b7:
         6a:06:78:82:8c:17:0e:99:3e:2f:c7:5c:ec:99:3c:9b:b1:e9:
         3b:49:33:1d:5d:74:d0:ef:0b:ed:98:9f:44:db:6c:9a:68:a9:
         3e:2e:b3:04:94:df:e8:bf:aa:1b:5a:2e:5a:77:35:05:31:b7:
         b1:70:a3:56:37:55:9e:79:5d:e3:94:5f:91:27:fa:33:50:3c:
         36:f0:69:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPOtSPi4UPs9LQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
MGQwNWFlNWMtZjNmYi00YTI2LWE1ODctNjA1N2ExYWE3Y2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisSOtt3y0hUCcb321RyMBTaiq2l3lC89qpPM
w6N4+mPDv/GFR462Vo4MJv7mUYuKFRwjdzM9nO+pVVsFzhCcgrVIP2GGOqvsoTHp
gxzJJTDVjYhh2ZD/frWa2gvuY9R2mqr4KSvbn9lrio7kPSuYKr0WJvhDszl5MQwL
CMrZRdgEy8bJTCfxUeXHFzkau4juf47su4r/2/uQhYsH0O8dyxOF+F5RfmI12alP
Y3LxFAR0+pkKVyRzFwSgF0Fw6roDeK/d+/q5JE7x+FwZVHzOYyOdTQ3XDtqQIEMj
eXD5XFUuy8KyMErZXDvEVSPWABNgKlmGhT1UaOXeaTUJrZ5ZmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxiBdbX0oXnLACnKQRHmitymy1yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjViZjcxYzgtYzg3Ny0z
YTNkLWE4NTMtNDFjYmJiNzk4MjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIep/zn1OH3LoOy+5PcbZ4hWHahSgv4GrHH7NDq5TvakiT1F9213hAb
X0BlPHa6KckUcWCRe7qed1PomDNH7CtvwQuZP5m78QAGoMkKmcnzr35ZeAEjuWsC
IzrqjcZvjNXWLBTDCCkch1Q1ljXZF+krtfJ0MzPueXIBI3nXYpY28bnU1WMcnoIO
vnHkbTjBybuJP4d3Z2E+NZVtRH0WZZIduJlSLfUNhfrtUgaLUwb/drntt2oGeIKM
Fw6ZPi/HXOyZPJux6TtJMx1ddNDvC+2Yn0TbbJpoqT4uswSU3+i/qhtaLlp3NQUx
t7Fwo1Y3VZ55XeOUX5En+jNQPDbwaSM=
-----END CERTIFICATE-----