Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1403296e-f617-3921-96da-351c6794e835.roa
File:                     1403296e-f617-3921-96da-351c6794e835.roa (raw, json)
Hash identifier:          QiJKzJLP5Ym6V2I9Rl98VMa6XNuzrGhNMzOyxqP5exI=
Subject key identifier:   7E:13:2E:C5:88:42:15:18:2F:C4:70:5C:C2:35:FE:7E:F4:E7:0A:5B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABC01C1DC5845FA907A680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1403296e-f617-3921-96da-351c6794e835.roa
Signing time:             Wed 16 Oct 2024 14:26:36 +0000
ROA not before:           Wed 16 Oct 2024 14:26:36 +0000
ROA not after:            Tue 14 Jan 2025 15:26:36 +0000
asID:                     394165
IP address blocks:        198.85.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:c0:1c:1d:c5:84:5f:a9:07:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:36 2024 GMT
            Not After : Jan 14 15:26:36 2025 GMT
        Subject: CN=5e1ab5fe-41be-4715-8e7f-33b0bd524772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:7a:1b:82:ff:7b:80:a1:55:ca:48:23:45:
                    11:0a:64:b9:4c:f5:91:5d:95:5f:13:eb:51:9a:ef:
                    26:1d:39:0e:21:06:25:cc:b3:c4:24:5f:ef:5b:01:
                    f7:8a:3c:bb:0f:8e:da:c5:0d:72:29:c1:e7:0e:0a:
                    c2:27:a7:b7:d1:bb:d6:c9:d5:36:8f:8d:13:21:70:
                    a2:dd:44:92:a5:84:71:57:74:e8:1c:a9:ed:41:2f:
                    20:fb:4b:5b:72:33:18:d4:90:70:e2:18:9c:3f:e8:
                    95:c1:ad:89:10:67:36:b2:90:65:68:4c:6d:0d:d9:
                    87:c2:61:7d:1b:30:9d:00:86:29:14:26:85:8e:e0:
                    e8:22:07:66:36:ca:26:2e:a6:ee:e1:34:72:70:dc:
                    56:f9:5e:fc:b2:6b:6c:0e:f1:54:ff:af:67:54:c8:
                    2d:de:f4:6c:cd:50:d9:9d:24:a2:9f:6a:c4:39:6b:
                    8c:27:1e:b1:7d:9b:2d:78:1d:39:90:58:43:88:22:
                    1e:fb:2e:22:8e:7c:70:92:36:86:c9:5b:c7:6e:79:
                    d5:10:0f:bc:70:5e:46:50:a6:33:7f:a7:2c:ef:a4:
                    41:62:01:32:d7:60:30:69:9e:86:68:78:26:84:0c:
                    a2:31:09:1b:b4:70:7c:4d:04:c5:33:95:74:02:54:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:13:2E:C5:88:42:15:18:2F:C4:70:5C:C2:35:FE:7E:F4:E7:0A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1403296e-f617-3921-96da-351c6794e835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.85.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:f7:7f:44:b2:a2:13:ef:d2:a1:a5:94:7d:db:c3:13:53:
         6e:8f:53:f0:2e:a6:66:75:2c:bb:ae:db:bd:fd:16:df:86:0f:
         a0:54:55:87:e5:2c:0b:e9:d6:b7:ed:13:27:e4:20:27:11:be:
         84:f0:ab:c2:aa:34:e6:8f:c2:4d:80:fd:b6:f2:0c:0e:5a:03:
         3f:e6:ab:31:1a:35:c0:ee:cc:21:4b:f9:c4:10:27:92:95:1a:
         79:84:4b:35:ae:35:bf:7f:ea:aa:7b:0f:4f:e8:80:8e:18:c8:
         58:d6:54:d2:7a:df:0c:d3:61:04:e2:cb:4a:1d:93:23:a7:f6:
         b9:08:eb:6b:cb:e7:23:86:ff:29:81:00:c7:0c:09:0d:99:0c:
         60:aa:87:38:09:72:0f:be:6c:98:ff:06:e1:31:97:18:b4:58:
         64:c4:78:2b:a3:57:77:29:aa:7b:be:4f:39:3c:83:b2:ea:a7:
         c9:30:03:92:c5:64:63:0e:92:cb:87:39:d4:2b:ac:2b:32:cc:
         f3:fd:38:4b:99:8c:e0:f7:b1:39:d7:f4:09:08:93:2a:80:fb:
         e0:f1:bf:9b:50:f7:37:b3:2a:d1:07:06:8d:68:79:c0:70:8b:
         f0:cd:4f:02:10:58:b8:79:1d:59:9c:d0:cf:61:53:bd:41:1c:
         2a:2f:6b:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq8AcHcWEX6kHpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNloXDTI1MDExNDE1MjYzNlowLzEtMCsGA1UEAxMk
NWUxYWI1ZmUtNDFiZS00NzE1LThlN2YtMzNiMGJkNTI0NzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAZ6G4L/e4ChVcpII0URCmS5TPWRXZVfE+tR
mu8mHTkOIQYlzLPEJF/vWwH3ijy7D47axQ1yKcHnDgrCJ6e30bvWydU2j40TIXCi
3USSpYRxV3ToHKntQS8g+0tbcjMY1JBw4hicP+iVwa2JEGc2spBlaExtDdmHwmF9
GzCdAIYpFCaFjuDoIgdmNsomLqbu4TRycNxW+V78smtsDvFU/69nVMgt3vRszVDZ
nSSin2rEOWuMJx6xfZsteB05kFhDiCIe+y4ijnxwkjaGyVvHbnnVEA+8cF5GUKYz
f6cs76RBYgEy12AwaZ6GaHgmhAyiMQkbtHB8TQTFM5V0AlSCtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4TLsWIQhUYL8RwXMI1/n705wpbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTQwMzI5NmUtZjYxNy0z
OTIxLTk2ZGEtMzUxYzY3OTRlODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqq939EsqIT79KhpZR928MTU26PU/AupmZ1LLuu2739Ft+GD6BUVYfl
LAvp1rftEyfkICcRvoTwq8KqNOaPwk2A/bbyDA5aAz/mqzEaNcDuzCFL+cQQJ5KV
GnmESzWuNb9/6qp7D0/ogI4YyFjWVNJ63wzTYQTiy0odkyOn9rkI62vL5yOG/ymB
AMcMCQ2ZDGCqhzgJcg++bJj/BuExlxi0WGTEeCujV3cpqnu+Tzk8g7Lqp8kwA5LF
ZGMOksuHOdQrrCsyzPP9OEuZjOD3sTnX9AkIkyqA++Dxv5tQ9zezKtEHBo1oecBw
i/DNTwIQWLh5HVmc0M9hU71BHCova5s=
-----END CERTIFICATE-----