Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/640bf54b-676e-3c79-bd53-af4a413a6164.roa
File:                     640bf54b-676e-3c79-bd53-af4a413a6164.roa (raw, json)
Hash identifier:          8ltE3jbj78/jRNoDDjQ2B/QJIXbYtp0SB4UpfyO+1vM=
Subject key identifier:   A9:F6:67:E8:1C:E3:85:D8:56:23:E6:15:07:A5:15:6F:5A:0A:7E:C3
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F432858462FBEE93500F42B098A3C0840
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/640bf54b-676e-3c79-bd53-af4a413a6164.roa
Signing time:             Wed 12 Jun 2024 13:00:33 +0000
ROA not before:           Wed 12 Jun 2024 13:00:33 +0000
ROA not after:            Tue 10 Sep 2024 13:00:33 +0000
asID:                     198100
IP address blocks:        23.156.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 16:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2f:be:e9:35:00:f4:2b:09:8a:3c:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jun 12 13:00:33 2024 GMT
            Not After : Sep 10 13:00:33 2024 GMT
        Subject: CN=d8d0a79f-f739-4182-bccf-0121164d8b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:db:1d:d9:e2:4b:a0:56:0d:0a:82:52:c5:
                    dd:8a:50:cc:b4:62:b3:36:12:25:53:bc:09:22:10:
                    2b:ef:f8:46:2e:13:15:de:10:74:8e:01:f7:bd:d2:
                    f6:01:60:08:78:b2:04:54:ec:fe:6b:01:e4:80:c4:
                    33:4d:b0:ac:cc:52:67:22:19:bb:a0:cc:59:5c:83:
                    6d:dc:14:61:3d:f4:25:7f:bc:aa:26:fc:3f:04:e3:
                    e2:e6:b7:5f:43:70:d8:4c:97:b7:d3:95:6b:c2:45:
                    15:cc:2e:0a:5b:0c:f2:71:bb:82:88:8c:21:0a:87:
                    29:ba:8c:7d:16:94:4e:65:c5:1a:c3:39:36:17:2b:
                    64:3d:99:45:7a:3c:0a:0c:fc:d2:4f:a1:48:6c:d9:
                    03:18:84:a6:9f:14:f4:ff:ac:ec:4e:3e:71:a3:fa:
                    50:35:4e:a4:f5:fb:81:eb:3c:d6:8d:17:88:9c:08:
                    9b:02:97:9a:81:68:4b:85:98:d9:78:0d:6d:cb:4d:
                    2e:3a:d3:2b:e3:7f:17:9e:32:27:5f:05:cc:18:9a:
                    95:91:60:7d:f3:d0:fd:67:c5:34:9b:5c:37:fb:13:
                    92:7e:b7:67:3e:e6:d2:f0:d5:d9:62:05:90:10:ae:
                    00:b1:8d:bc:78:96:66:15:52:24:b6:a8:ae:a9:bb:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F6:67:E8:1C:E3:85:D8:56:23:E6:15:07:A5:15:6F:5A:0A:7E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/640bf54b-676e-3c79-bd53-af4a413a6164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:4f:f1:f7:2f:36:64:d9:12:5e:c1:e5:df:20:64:ab:de:
         69:1c:bf:00:f6:2c:71:88:70:ac:b6:aa:fe:9f:a0:99:7e:c2:
         51:ce:63:f1:83:b5:bd:eb:92:5f:64:e1:f6:77:75:87:40:55:
         fc:a6:18:54:8d:ce:3c:0a:5c:da:60:a5:ca:05:6b:ca:fb:53:
         f2:3c:2d:79:5f:f2:45:77:a3:3a:3d:91:6a:b3:05:a6:c3:ac:
         a4:78:be:20:8e:09:ce:d0:25:65:24:e9:17:39:7f:10:fb:fa:
         de:51:c9:35:48:86:04:8d:25:0e:99:4b:36:40:51:d6:e2:eb:
         f3:70:f6:4e:a6:52:f5:73:cd:f5:3a:2e:14:7f:54:a9:0e:a4:
         0d:23:cb:3f:ec:61:b2:5b:0e:8e:ab:12:62:3f:b6:69:a7:58:
         6e:c5:c5:68:7a:07:0c:e0:ae:6e:11:db:b4:fe:f7:95:63:dd:
         8a:fa:11:1a:aa:fc:e9:a7:5f:a6:12:fa:74:28:1e:11:8c:c5:
         ba:69:42:54:ed:a6:a9:05:3a:98:09:85:65:0e:19:71:de:6f:
         12:2d:32:2e:7f:2f:37:c3:01:7d:7a:d5:78:d4:dc:bd:5d:51:
         74:db:83:c8:5d:4c:c9:d1:24:ff:41:7f:8f:6c:8e:43:e7:75:
         d0:45:1c:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYvvuk1APQrCYo8CEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm
Yjg0MB4XDTI0MDYxMjEzMDAzM1oXDTI0MDkxMDEzMDAzM1owLzEtMCsGA1UEAxMk
ZDhkMGE3OWYtZjczOS00MTgyLWJjY2YtMDEyMTE2NGQ4YjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApULbHdniS6BWDQqCUsXdilDMtGKzNhIlU7wJ
IhAr7/hGLhMV3hB0jgH3vdL2AWAIeLIEVOz+awHkgMQzTbCszFJnIhm7oMxZXINt
3BRhPfQlf7yqJvw/BOPi5rdfQ3DYTJe305VrwkUVzC4KWwzycbuCiIwhCocpuox9
FpROZcUawzk2FytkPZlFejwKDPzST6FIbNkDGISmnxT0/6zsTj5xo/pQNU6k9fuB
6zzWjReInAibApeagWhLhZjZeA1ty00uOtMr438XnjInXwXMGJqVkWB989D9Z8U0
m1w3+xOSfrdnPubS8NXZYgWQEK4AsY28eJZmFVIktqiuqbvpgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKn2Z+gc44XYViPmFQelFW9aCn7DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx
MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvNjQwYmY1NGItNjc2ZS0z
Yzc5LWJkNTMtYWY0YTQxM2E2MTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi
MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz
ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0
NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbtT/H3LzZk2RJeweXfIGSr3mkcvwD2LHGIcKy2qv6foJl+wlHOY/GD
tb3rkl9k4fZ3dYdAVfymGFSNzjwKXNpgpcoFa8r7U/I8LXlf8kV3ozo9kWqzBabD
rKR4viCOCc7QJWUk6Rc5fxD7+t5RyTVIhgSNJQ6ZSzZAUdbi6/Nw9k6mUvVzzfU6
LhR/VKkOpA0jyz/sYbJbDo6rEmI/tmmnWG7FxWh6Bwzgrm4R27T+95Vj3Yr6ERqq
/OmnX6YS+nQoHhGMxbppQlTtpqkFOpgJhWUOGXHebxItMi5/LzfDAX161XjU3L1d
UXTbg8hdTMnRJP9Bf49sjkPnddBFHBo=
-----END CERTIFICATE-----