Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/1159380f-48d7-3ed2-9940-65fff85d6ff5.roa
File:                     1159380f-48d7-3ed2-9940-65fff85d6ff5.roa (raw, json)
Hash identifier:          c4YU/wIuf6ecIQghE3tQrX6NCQ71rCQtps4SYjhZ4SQ=
Subject key identifier:   A0:EE:27:8B:7C:C6:24:9A:6F:CC:71:66:B5:B2:49:CE:51:92:E8:64
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285845347D4DD6AD62962A3A3D38F0
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/1159380f-48d7-3ed2-9940-65fff85d6ff5.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     212238
IP address blocks:        64.113.0.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 May 2024 16:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4d:d6:ad:62:96:2a:3a:3d:38:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=97203560-59fe-4e96-983b-488b9dddc9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:86:a2:3e:af:9d:dc:a1:40:f9:34:eb:64:
                    c3:96:a0:bb:14:07:74:4d:d2:4c:d8:10:63:5c:c3:
                    3f:b7:d8:10:9c:36:ff:eb:81:54:2c:6c:77:53:af:
                    10:1e:33:b0:79:e4:8d:55:73:9e:99:bd:b4:58:c6:
                    11:9f:0f:2f:d6:ab:09:1d:ec:3d:75:49:68:c8:90:
                    5d:a9:ad:ce:14:92:8d:df:b2:8d:b0:b5:d7:b4:da:
                    30:06:d6:79:c3:15:e1:e0:fa:39:74:d8:1d:ea:c7:
                    7d:ed:3f:ae:16:2f:25:7a:b1:b7:56:25:d1:56:ed:
                    09:7b:77:d9:a6:20:ac:c9:98:16:fd:9a:cb:b3:2e:
                    ac:2c:af:9a:7c:15:6c:19:d9:a6:94:bc:3c:16:75:
                    f4:bc:57:eb:ed:22:f8:a4:7d:05:b0:45:a8:3c:b8:
                    20:8f:a8:4d:c2:ac:58:95:24:fa:43:ef:a2:9a:b0:
                    3e:36:eb:87:ba:40:be:3b:97:48:9c:d8:7e:c5:a8:
                    ea:a8:ad:41:ef:4f:79:1b:ff:7a:ce:ac:52:aa:8e:
                    56:72:95:db:b0:28:98:b7:5f:90:45:ee:b7:12:ac:
                    0c:4f:73:b9:f2:3b:e4:d1:98:d3:d9:cd:26:f5:42:
                    0f:2b:c5:e3:43:af:d9:75:ac:5d:28:6a:fc:c1:09:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:27:8B:7C:C6:24:9A:6F:CC:71:66:B5:B2:49:CE:51:92:E8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/1159380f-48d7-3ed2-9940-65fff85d6ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:a1:1a:ab:49:58:1d:e3:d7:2b:ae:f3:dc:d1:fb:a5:a9:
         32:74:32:10:aa:40:b7:e6:13:d0:7b:da:79:ac:38:ed:45:cb:
         17:05:d4:b9:ba:60:e7:d7:8b:32:27:40:15:44:36:52:f1:69:
         46:56:b7:c0:fa:c0:92:65:14:c2:f0:ab:bf:86:69:d6:78:c1:
         ce:f9:26:9f:b6:d9:42:11:f7:3b:43:44:5a:90:4c:12:d2:cf:
         0c:60:50:ec:d8:0c:10:f6:fc:c1:9e:fc:88:c4:df:fc:d6:54:
         02:9a:98:26:8f:99:55:89:b9:2e:db:01:b7:af:be:84:f0:9b:
         ac:aa:cc:8c:fb:54:45:98:12:38:66:fc:58:83:cc:81:d2:28:
         96:fb:b7:54:b9:67:00:e0:9a:24:70:1b:04:fd:79:ad:d5:0a:
         54:7d:f3:53:cb:68:77:96:ea:f6:07:04:ee:5a:5d:61:ce:70:
         b6:b2:f4:06:eb:ca:c3:c0:7a:f0:e2:f4:8f:ec:b0:2c:ca:8f:
         13:94:d2:2f:31:66:7f:11:b4:09:d9:02:77:67:bd:9b:1b:68:
         7d:98:99:22:9d:1f:87:b8:08:ed:db:1c:d0:b1:db:37:ec:c8:
         91:36:a3:8c:6c:b5:f7:84:3c:0a:c1:bb:ad:f0:2f:95:bd:78:
         5d:26:b7:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU0fU3WrWKWKjo9OPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx
NDllMB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
OTcyMDM1NjAtNTlmZS00ZTk2LTk4M2ItNDg4YjlkZGRjOWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5+Goj6vndyhQPk062TDlqC7FAd0TdJM2BBj
XMM/t9gQnDb/64FULGx3U68QHjOweeSNVXOemb20WMYRnw8v1qsJHew9dUloyJBd
qa3OFJKN37KNsLXXtNowBtZ5wxXh4Po5dNgd6sd97T+uFi8lerG3ViXRVu0Je3fZ
piCsyZgW/ZrLsy6sLK+afBVsGdmmlLw8FnX0vFfr7SL4pH0FsEWoPLggj6hNwqxY
lST6Q++imrA+NuuHukC+O5dInNh+xajqqK1B7095G/96zqxSqo5WcpXbsCiYt1+Q
Re63EqwMT3O58jvk0ZjT2c0m9UIPK8XjQ6/ZdaxdKGr8wQlmswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKDuJ4t8xiSab8xxZrWySc5RkuhkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm
NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvMTE1OTM4MGYtNDhkNy0z
ZWQyLTk5NDAtNjVmZmY4NWQ2ZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4
MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2
MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0
NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkNoRqrSVgd49crrvPc0fulqTJ0MhCqQLfmE9B72nmsOO1FyxcF1Lm6
YOfXizInQBVENlLxaUZWt8D6wJJlFMLwq7+GadZ4wc75Jp+22UIR9ztDRFqQTBLS
zwxgUOzYDBD2/MGe/IjE3/zWVAKamCaPmVWJuS7bAbevvoTwm6yqzIz7VEWYEjhm
/FiDzIHSKJb7t1S5ZwDgmiRwGwT9ea3VClR981PLaHeW6vYHBO5aXWHOcLay9Abr
ysPAevDi9I/ssCzKjxOU0i8xZn8RtAnZAndnvZsbaH2YmSKdH4e4CO3bHNCx2zfs
yJE2o4xstfeEPArBu63wL5W9eF0mt90=
-----END CERTIFICATE-----