Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f987a7fc-6929-300f-9497-7eb052e15e6e.roa
File:                     f987a7fc-6929-300f-9497-7eb052e15e6e.roa (raw, json)
Hash identifier:          ZCSMQh0lhOlh5PNHQz/6q7ZurkBmD5Re0KkwtHrEo/E=
Subject key identifier:   7F:12:63:70:7E:0D:4B:E6:2A:57:48:CC:1E:E3:E8:15:A0:1A:D9:A5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858461C342E38E9592EEB0F0CC100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f987a7fc-6929-300f-9497-7eb052e15e6e.roa
Signing time:             Wed 05 Jun 2024 13:00:33 +0000
ROA not before:           Wed 05 Jun 2024 13:00:33 +0000
ROA not after:            Tue 03 Sep 2024 13:00:33 +0000
asID:                     212238
IP address blocks:        45.74.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 07:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:34:2e:38:e9:59:2e:eb:0f:0c:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  5 13:00:33 2024 GMT
            Not After : Sep  3 13:00:33 2024 GMT
        Subject: CN=f34a9dc6-2e94-43d2-b161-d4aa0d77c87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:62:09:a2:3a:7a:48:29:0a:4b:41:10:f8:
                    01:32:b1:f7:e0:20:1b:8f:07:34:ef:3c:0f:89:63:
                    89:fc:d0:cf:33:99:a3:24:61:c4:3e:e7:fd:23:36:
                    6e:0e:9f:10:02:16:7c:86:c1:74:46:98:bb:a5:07:
                    ad:3c:68:73:b1:ee:d9:39:ff:1b:69:f0:58:64:35:
                    46:80:a6:c7:80:a2:01:2f:92:f5:a4:92:5e:78:68:
                    27:da:82:d8:e2:38:79:c9:b8:d8:97:61:e5:7c:81:
                    8a:81:93:91:86:06:a1:00:33:5b:be:65:35:56:6f:
                    86:4d:5d:9b:53:65:38:3f:0a:45:15:84:08:e6:fa:
                    4b:b8:3f:38:ad:c6:51:f5:b7:55:5f:b8:46:04:1d:
                    db:7b:7a:b4:0c:c3:2b:38:f4:6b:35:11:55:08:ca:
                    a5:93:34:81:35:ee:87:5d:72:b0:1b:f2:7d:77:a8:
                    c3:3f:cc:14:ca:ee:29:18:d7:63:09:06:82:dc:93:
                    d0:ff:99:60:54:28:c3:78:86:d7:f2:70:ef:37:a8:
                    fc:5a:64:41:98:9f:ce:d1:de:10:17:e8:82:f3:62:
                    7d:45:c1:f6:97:e4:dd:fc:e6:63:8b:d9:b7:ba:b2:
                    9d:e3:e9:8e:b9:dc:d2:cd:6a:d4:f7:35:25:7a:05:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:63:70:7E:0D:4B:E6:2A:57:48:CC:1E:E3:E8:15:A0:1A:D9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f987a7fc-6929-300f-9497-7eb052e15e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:3d:10:15:1a:83:15:20:7d:4b:9a:3c:4d:02:ae:3b:e8:
         af:14:94:76:b8:63:7d:71:bb:18:9b:e1:d0:73:34:cc:4b:31:
         97:26:1e:89:b0:6c:bd:4b:c8:dd:74:dd:66:25:2e:fd:b7:6e:
         89:ee:b1:2b:a0:20:9a:f0:a1:7d:35:e1:32:b2:c7:e4:39:b0:
         da:86:8e:2e:01:e2:c0:ea:14:23:e7:3a:6b:c4:de:56:a5:6c:
         91:43:dc:55:0a:63:7f:13:e5:aa:ae:e2:59:58:d4:23:e5:44:
         00:c3:5c:c3:a1:fc:81:58:65:23:b4:e5:a4:79:7d:34:28:8c:
         a7:1d:eb:36:62:8d:1c:36:0a:ff:ff:d1:12:56:69:6c:ac:c5:
         09:5a:fe:30:e5:ad:69:24:5c:1f:4c:49:c8:5a:5c:d9:92:de:
         f4:87:ef:99:26:a7:66:62:61:59:3a:af:37:30:b3:9f:fb:84:
         57:52:d8:73:45:02:3c:e6:8c:2b:ba:9e:e0:9d:94:59:1b:f7:
         31:35:a7:f0:5a:81:e0:4f:51:18:1f:bc:96:6f:07:bf:71:24:
         a0:1c:f5:24:4b:9e:9e:82:93:a8:7d:4c:d6:71:fe:81:ad:db:
         54:ab:31:65:5c:dc:fa:5b:e8:09:bb:a4:ee:6e:a7:ca:57:47:
         5e:9c:fe:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYcNC446Vku6w8MwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDYwNTEzMDAzM1oXDTI0MDkwMzEzMDAzM1owLzEtMCsGA1UEAxMk
ZjM0YTlkYzYtMmU5NC00M2QyLWIxNjEtZDRhYTBkNzdjODdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUJiCaI6ekgpCktBEPgBMrH34CAbjwc07zwP
iWOJ/NDPM5mjJGHEPuf9IzZuDp8QAhZ8hsF0Rpi7pQetPGhzse7ZOf8bafBYZDVG
gKbHgKIBL5L1pJJeeGgn2oLY4jh5ybjYl2HlfIGKgZORhgahADNbvmU1Vm+GTV2b
U2U4PwpFFYQI5vpLuD84rcZR9bdVX7hGBB3be3q0DMMrOPRrNRFVCMqlkzSBNe6H
XXKwG/J9d6jDP8wUyu4pGNdjCQaC3JPQ/5lgVCjDeIbX8nDvN6j8WmRBmJ/O0d4Q
F+iC82J9RcH2l+Td/OZji9m3urKd4+mOudzSzWrU9zUlegUrLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8SY3B+DUvmKldIzB7j6BWgGtmlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjk4N2E3ZmMtNjkyOS0z
MDBmLTk0OTctN2ViMDUyZTE1ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHB7PRAVGoMVIH1LmjxNAq476K8UlHa4Y31xuxib4dBzNMxLMZcmHomw
bL1LyN103WYlLv23bonusSugIJrwoX014TKyx+Q5sNqGji4B4sDqFCPnOmvE3lal
bJFD3FUKY38T5aqu4llY1CPlRADDXMOh/IFYZSO05aR5fTQojKcd6zZijRw2Cv//
0RJWaWysxQla/jDlrWkkXB9MSchaXNmS3vSH75kmp2ZiYVk6rzcws5/7hFdS2HNF
AjzmjCu6nuCdlFkb9zE1p/BageBPURgfvJZvB79xJKAc9SRLnp6Ck6h9TNZx/oGt
21SrMWVc3Ppb6Am7pO5up8pXR16c/tg=
-----END CERTIFICATE-----