Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/6520889e-203d-305e-8a70-254d8001b86e.roa
File:                     6520889e-203d-305e-8a70-254d8001b86e.roa (raw, json)
Hash identifier:          C1tnsI2hBn/rkY+iQoqHuBzZTLd9arUxqxqNIe+/pEA=
Subject key identifier:   C5:EC:4D:85:85:8D:22:98:F1:78:3C:DF:A9:2B:28:87:3F:B4:55:C7
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F432858421F217212D7DC289166CC4A00
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/6520889e-203d-305e-8a70-254d8001b86e.roa
Signing time:             Mon 05 Jun 2023 19:02:43 +0000
ROA not before:           Mon 05 Jun 2023 19:02:43 +0000
ROA not after:            Sun 03 Sep 2023 19:02:43 +0000
asID:                     1640
IP address blocks:        69.57.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:1f:21:72:12:d7:dc:28:91:66:cc:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Jun  5 19:02:43 2023 GMT
            Not After : Sep  3 19:02:43 2023 GMT
        Subject: CN=e8744b52-8319-4c54-8b3a-00f751898748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:11:3c:20:ad:61:e9:34:76:22:9e:b2:e8:
                    da:73:e9:f4:02:af:12:8a:af:c2:f0:10:b4:d6:ad:
                    d7:37:ae:56:5b:7a:fb:7d:9b:59:bf:0b:a4:bd:34:
                    bc:88:fc:c4:87:1f:de:02:aa:da:04:2d:f0:ce:94:
                    43:7c:77:01:18:3f:d1:41:63:7d:cc:6a:63:a7:32:
                    2d:bc:3b:b5:e6:95:1d:53:05:b8:fb:b9:6c:c6:6b:
                    6f:8d:19:97:e1:15:74:67:23:05:48:35:6b:91:bc:
                    a6:b2:bb:ec:23:f9:b9:6b:de:de:04:56:47:ad:67:
                    2d:42:48:6e:0c:53:69:b3:dc:89:65:77:ca:6d:03:
                    6c:25:7a:28:ea:62:98:8c:42:ed:19:d4:88:00:24:
                    5a:e2:7d:d0:23:98:6d:3e:fe:6a:a7:c2:c7:c1:08:
                    ac:29:32:fd:af:29:56:f2:0d:62:6e:09:32:d5:3d:
                    e0:7b:b0:f3:77:1f:23:8a:2d:72:93:65:f6:60:db:
                    c2:b9:3b:8e:4a:ec:52:8f:ce:cc:d5:40:91:79:78:
                    60:1a:35:5b:99:16:62:6b:e2:1e:06:22:99:4a:14:
                    96:62:1a:c3:00:30:4c:aa:70:d0:c3:c3:07:2e:e5:
                    86:c6:50:18:8b:f5:bb:97:88:36:20:ff:34:d3:0b:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:4D:85:85:8D:22:98:F1:78:3C:DF:A9:2B:28:87:3F:B4:55:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/6520889e-203d-305e-8a70-254d8001b86e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:4f:1d:ca:7f:f3:c7:97:9b:af:15:de:23:49:62:eb:bd:
         9d:2d:79:95:4e:e6:2c:22:39:b8:49:c3:20:3a:77:c9:e3:7d:
         5f:84:83:57:ed:2e:8a:57:ad:ca:44:37:2f:22:b8:18:5e:27:
         8b:db:54:0a:32:3d:3c:f6:d8:79:f2:82:b1:18:6f:e2:40:ea:
         85:69:6c:c1:97:ee:90:3c:98:d8:95:fd:3b:b5:9b:b7:b8:93:
         63:f7:7c:28:43:88:a2:cb:7f:23:54:4c:f2:2d:b0:c7:15:6e:
         13:22:80:0e:a3:49:83:ba:3c:f1:5a:12:67:b1:54:cb:84:44:
         b7:1b:74:cd:86:ba:82:e4:fe:0e:ee:fb:88:c7:68:3e:c3:da:
         87:2e:28:f1:c7:11:72:8d:a3:77:b7:b1:8a:3d:33:c5:15:22:
         10:17:ce:bf:8f:79:19:49:1f:80:a1:9f:4c:72:fd:97:46:08:
         a9:02:f3:ee:75:be:c9:4d:69:f6:41:51:47:d8:b8:26:0e:23:
         5c:e3:fe:7f:6e:ea:8a:5a:d8:2e:87:0a:aa:f3:7c:d3:aa:fb:
         03:c8:a6:1e:a2:2a:8c:39:f0:05:10:b2:cc:07:ba:a2:ee:ce:
         77:f8:d3:d1:65:d1:a3:98:ef:e3:92:be:aa:f6:26:36:d2:39:
         05:52:2b:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIfIXIS19wokWbMSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3
YjUzMB4XDTIzMDYwNTE5MDI0M1oXDTIzMDkwMzE5MDI0M1owLzEtMCsGA1UEAxMk
ZTg3NDRiNTItODMxOS00YzU0LThiM2EtMDBmNzUxODk4NzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5MRPCCtYek0diKesujac+n0Aq8Siq/C8BC0
1q3XN65WW3r7fZtZvwukvTS8iPzEhx/eAqraBC3wzpRDfHcBGD/RQWN9zGpjpzIt
vDu15pUdUwW4+7lsxmtvjRmX4RV0ZyMFSDVrkbymsrvsI/m5a97eBFZHrWctQkhu
DFNps9yJZXfKbQNsJXoo6mKYjELtGdSIACRa4n3QI5htPv5qp8LHwQisKTL9rylW
8g1ibgky1T3ge7Dzdx8jii1yk2X2YNvCuTuOSuxSj87M1UCReXhgGjVbmRZia+Ie
BiKZShSWYhrDADBMqnDQw8MHLuWGxlAYi/W7l4g2IP800wvSjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXsTYWFjSKY8Xg836krKIc/tFXHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4
ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvNjUyMDg4OWUtMjAzZC0z
MDVlLThhNzAtMjU0ZDgwMDFiODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3
ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj
N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4
OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWeTx3Kf/PHl5uvFd4jSWLrvZ0teZVO5iwiObhJwyA6d8njfV+Eg1ft
LopXrcpENy8iuBheJ4vbVAoyPTz22HnygrEYb+JA6oVpbMGX7pA8mNiV/Tu1m7e4
k2P3fChDiKLLfyNUTPItsMcVbhMigA6jSYO6PPFaEmexVMuERLcbdM2GuoLk/g7u
+4jHaD7D2ocuKPHHEXKNo3e3sYo9M8UVIhAXzr+PeRlJH4Chn0xy/ZdGCKkC8+51
vslNafZBUUfYuCYOI1zj/n9u6opa2C6HCqrzfNOq+wPIph6iKow58AUQsswHuqLu
znf409Fl0aOY7+OSvqr2JjbSOQVSK5M=
-----END CERTIFICATE-----