Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/95aa7ca1-cda3-3d33-8a65-990cebc2811b.roa
File:                     95aa7ca1-cda3-3d33-8a65-990cebc2811b.roa (raw, json)
Hash identifier:          CZ5NDh/jOQ1xhhod/+9mfq2Dq9BkjMqsK/v8AEOnUuI=
Subject key identifier:   9E:D4:D6:07:C6:78:D0:5A:EE:BE:54:18:98:09:CF:D3:CA:80:DA:CE
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285846828A99473EA1E8F3E460C410
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/95aa7ca1-cda3-3d33-8a65-990cebc2811b.roa
Signing time:             Fri 12 Jul 2024 04:47:21 +0000
ROA not before:           Fri 12 Jul 2024 04:47:21 +0000
ROA not after:            Thu 10 Oct 2024 04:47:21 +0000
asID:                     134365
IP address blocks:        69.165.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 09:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:82:8a:99:47:3e:a1:e8:f3:e4:60:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jul 12 04:47:21 2024 GMT
            Not After : Oct 10 04:47:21 2024 GMT
        Subject: CN=605c86a9-81da-4b6a-8375-95d64eec3dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:11:06:fe:ae:8c:b8:76:d6:07:40:07:ca:
                    19:7d:cd:3d:93:cb:ce:69:a3:60:a9:14:bf:32:22:
                    4e:10:dc:af:35:36:1e:31:33:c1:9b:2b:f7:1b:00:
                    bf:f4:3b:fc:07:60:a2:ac:d4:53:bb:89:53:28:e3:
                    42:81:d7:04:87:57:65:0b:20:ec:01:71:ae:54:b5:
                    bb:82:17:f6:21:ca:79:73:d7:96:87:f3:20:33:13:
                    29:02:09:2f:28:e6:57:6f:03:3b:52:fd:a8:fe:5c:
                    32:09:66:e8:59:10:76:f5:75:27:5a:07:ac:90:d2:
                    de:9a:81:d8:1b:04:e6:b9:4b:0e:7b:d8:4c:0b:33:
                    9d:f0:be:c1:96:af:7e:5a:2c:7b:f0:6f:70:f7:a1:
                    b2:86:97:1c:7c:4e:c8:f9:ce:25:4b:e1:bb:77:25:
                    38:2a:55:25:cd:0d:d1:06:b5:b5:36:1d:41:76:f9:
                    e1:f4:06:d3:52:25:bf:0d:cf:d6:9f:29:c6:23:0b:
                    ce:e1:41:18:a9:ba:5d:ca:fe:eb:2a:15:8d:9a:36:
                    7d:b9:94:b8:2b:6d:ea:26:70:c1:29:44:3f:18:0c:
                    62:86:a8:36:82:e2:b7:6e:c4:1d:91:e4:50:3e:98:
                    dc:e9:52:44:df:78:6e:89:5b:53:8e:32:82:de:ba:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D4:D6:07:C6:78:D0:5A:EE:BE:54:18:98:09:CF:D3:CA:80:DA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/95aa7ca1-cda3-3d33-8a65-990cebc2811b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:86:56:b6:1b:2d:2b:6e:1f:d4:f7:6a:77:8d:bf:6b:68:
         8e:b3:a6:ce:30:1f:45:6b:a0:15:a6:ff:b4:f9:05:9b:51:66:
         b2:7b:7c:69:6e:34:8b:b5:a0:b8:45:00:68:b1:a8:66:f0:cc:
         46:06:91:40:66:74:53:85:1d:55:06:d1:38:86:24:1f:93:f9:
         b7:d7:b6:43:38:cc:77:ab:7e:38:66:fd:25:05:52:6a:a3:f9:
         c7:1d:c2:11:4d:f8:f0:c9:d9:f4:93:64:a9:71:b5:d2:ca:e4:
         71:42:9c:d5:85:12:08:f5:45:f3:a7:c7:5b:d1:c0:c4:0a:30:
         4f:97:b0:67:63:b8:cb:19:a1:5c:2c:72:2e:48:4f:ec:69:03:
         25:f1:1a:4b:7d:e6:22:50:83:88:ec:da:99:9f:de:2a:3b:9f:
         75:8d:66:f7:54:7b:72:09:72:d9:7b:c4:7e:34:61:1f:e3:bf:
         73:a1:0e:4d:d9:0f:97:04:2c:0d:96:99:34:63:fd:cb:2f:35:
         5f:e8:3b:c9:38:fb:43:f9:74:8c:4e:ff:4e:07:c1:97:ea:c0:
         7a:a8:22:b8:04:b6:97:c2:bc:21:d2:bf:b8:4f:cf:7c:ef:80:
         f4:01:f2:1e:f7:30:b5:31:ae:7c:14:7e:75:d5:f7:33:ba:46:
         0f:2b:23:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaCiplHPqHo8+RgxBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MDcxMjA0NDcyMVoXDTI0MTAxMDA0NDcyMVowLzEtMCsGA1UEAxMk
NjA1Yzg2YTktODFkYS00YjZhLTgzNzUtOTVkNjRlZWMzZGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssgRBv6ujLh21gdAB8oZfc09k8vOaaNgqRS/
MiJOENyvNTYeMTPBmyv3GwC/9Dv8B2CirNRTu4lTKONCgdcEh1dlCyDsAXGuVLW7
ghf2Icp5c9eWh/MgMxMpAgkvKOZXbwM7Uv2o/lwyCWboWRB29XUnWgeskNLemoHY
GwTmuUsOe9hMCzOd8L7Blq9+Wix78G9w96GyhpccfE7I+c4lS+G7dyU4KlUlzQ3R
BrW1Nh1Bdvnh9AbTUiW/Dc/WnynGIwvO4UEYqbpdyv7rKhWNmjZ9uZS4K23qJnDB
KUQ/GAxihqg2guK3bsQdkeRQPpjc6VJE33huiVtTjjKC3roc1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7U1gfGeNBa7r5UGJgJz9PKgNrOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvOTVhYTdjYTEtY2RhMy0z
ZDMzLThhNjUtOTkwY2ViYzI4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaVMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJschla2Gy0rbh/U92p3jb9raI6zps4wH0VroBWm/7T5BZtRZrJ7fGlu
NIu1oLhFAGixqGbwzEYGkUBmdFOFHVUG0TiGJB+T+bfXtkM4zHerfjhm/SUFUmqj
+ccdwhFN+PDJ2fSTZKlxtdLK5HFCnNWFEgj1RfOnx1vRwMQKME+XsGdjuMsZoVws
ci5IT+xpAyXxGkt95iJQg4js2pmf3io7n3WNZvdUe3IJctl7xH40YR/jv3OhDk3Z
D5cELA2WmTRj/csvNV/oO8k4+0P5dIxO/04HwZfqwHqoIrgEtpfCvCHSv7hPz3zv
gPQB8h73MLUxrnwUfnXV9zO6Rg8rI4Q=
-----END CERTIFICATE-----