Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7500d650-546b-3d08-bf9a-521a73a69458.roa
File:                     7500d650-546b-3d08-bf9a-521a73a69458.roa (raw, json)
Hash identifier:          gxz7Z7aiE5nHcDzSND1IAeJaZmdW6taB8DdPH+yo9sI=
Subject key identifier:   F6:FB:F8:79:D9:E7:E6:2D:9D:33:71:A5:39:46:9F:CC:EB:7F:2A:EC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBEFCC514F4CB1B677CA0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7500d650-546b-3d08-bf9a-521a73a69458.roa
Signing time:             Wed 16 Oct 2024 14:26:35 +0000
ROA not before:           Wed 16 Oct 2024 14:26:35 +0000
ROA not after:            Tue 14 Jan 2025 15:26:35 +0000
asID:                     81
IP address blocks:        152.46.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:be:fc:c5:14:f4:cb:1b:67:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:35 2024 GMT
            Not After : Jan 14 15:26:35 2025 GMT
        Subject: CN=45f714fb-0944-416f-971f-a1137e4611bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:8f:f9:ef:a0:5e:d3:0b:ca:0a:29:3d:83:
                    19:53:c9:92:5b:9e:b1:b9:2f:0b:f5:f6:6c:d0:22:
                    6d:95:8c:53:b7:ca:be:0b:94:fc:61:e4:dd:1c:e5:
                    1c:10:b3:99:30:39:f1:29:ad:ad:bc:c7:3a:a6:f0:
                    d7:9f:65:c6:09:45:f9:18:a9:05:5b:20:29:82:fb:
                    1a:08:d9:82:f3:c5:f9:77:d1:04:d5:7a:ed:98:ca:
                    cc:d2:ff:fd:76:22:88:b7:ae:f7:68:2f:94:f7:cb:
                    97:ba:44:bf:bb:b0:a0:c5:bd:03:99:db:d7:67:42:
                    73:e8:69:e6:98:e1:8f:4a:c2:cf:7c:1a:5d:52:e4:
                    82:c2:43:44:af:22:c3:de:23:c3:42:af:e9:01:14:
                    81:41:ba:f4:0e:10:e9:c4:fe:21:e7:1c:fc:d3:1e:
                    68:38:db:8e:85:69:c7:98:f8:4a:e0:12:5c:fa:f7:
                    05:b4:aa:dc:63:47:83:66:14:8d:89:16:27:8e:9f:
                    e4:08:92:b4:7e:51:69:b8:19:44:38:4d:c6:4e:11:
                    a9:ad:75:94:b9:58:ab:36:93:fd:c5:69:e0:91:d8:
                    e5:64:a6:fb:d4:0f:34:b1:98:6a:fe:df:30:a0:de:
                    69:e7:c0:09:03:dc:86:9f:5f:b7:3b:90:77:2b:5f:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FB:F8:79:D9:E7:E6:2D:9D:33:71:A5:39:46:9F:CC:EB:7F:2A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7500d650-546b-3d08-bf9a-521a73a69458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:ef:e6:25:6b:8d:f3:b4:3e:9c:d9:1b:3d:bd:05:b4:da:
         28:b1:86:57:1d:a8:e3:fc:0d:6e:d2:23:61:44:73:d1:4a:fd:
         ae:18:c2:ec:cd:1a:be:13:05:94:5b:c7:a1:cc:22:09:07:55:
         db:61:81:39:4b:63:81:bd:c5:c9:6c:88:4f:38:51:1c:79:40:
         a9:cf:93:84:0a:4b:69:cd:74:69:d6:a1:ba:7d:1b:83:44:99:
         99:d2:f7:74:44:86:b2:16:e8:29:7d:e8:01:48:be:47:bf:a2:
         b7:9d:d0:dd:67:98:f5:de:34:0b:4a:99:dc:57:d8:d4:6c:21:
         69:eb:44:ee:d6:d6:5f:c7:c8:2a:62:52:13:4b:7b:f8:c3:9e:
         46:8f:7f:ad:b9:e8:ce:01:b0:87:32:d3:bb:28:57:d4:3f:a3:
         8d:6e:dd:54:13:c4:74:ef:52:54:dd:0d:2f:60:46:d7:f8:04:
         ce:8f:71:8d:3c:26:9e:fa:a0:98:a0:6c:34:9b:c6:4d:10:6c:
         1e:10:6a:b1:30:c4:97:72:07:89:98:ff:ea:ed:2a:9a:e7:81:
         34:8c:e0:76:de:03:d0:d2:ad:dc:f4:ea:c7:b9:56:70:e2:40:
         2c:d4:f9:b3:16:57:cf:73:d7:35:09:15:48:06:75:d9:a9:95:
         de:ee:f3:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq778xRT0yxtnfKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNVoXDTI1MDExNDE1MjYzNVowLzEtMCsGA1UEAxMk
NDVmNzE0ZmItMDk0NC00MTZmLTk3MWYtYTExMzdlNDYxMWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWOP+e+gXtMLygopPYMZU8mSW56xuS8L9fZs
0CJtlYxTt8q+C5T8YeTdHOUcELOZMDnxKa2tvMc6pvDXn2XGCUX5GKkFWyApgvsa
CNmC88X5d9EE1XrtmMrM0v/9diKIt673aC+U98uXukS/u7Cgxb0DmdvXZ0Jz6Gnm
mOGPSsLPfBpdUuSCwkNEryLD3iPDQq/pARSBQbr0DhDpxP4h5xz80x5oONuOhWnH
mPhK4BJc+vcFtKrcY0eDZhSNiRYnjp/kCJK0flFpuBlEOE3GThGprXWUuVirNpP9
xWngkdjlZKb71A80sZhq/t8woN5p58AJA9yGn1+3O5B3K19mcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPb7+HnZ5+YtnTNxpTlGn8zrfyrsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNzUwMGQ2NTAtNTQ2Yi0z
ZDA4LWJmOWEtNTIxYTczYTY5NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGO87+Yla43ztD6c2Rs9vQW02iixhlcdqOP8DW7SI2FEc9FK/a4YwuzN
Gr4TBZRbx6HMIgkHVdthgTlLY4G9xclsiE84URx5QKnPk4QKS2nNdGnWobp9G4NE
mZnS93REhrIW6Cl96AFIvke/ored0N1nmPXeNAtKmdxX2NRsIWnrRO7W1l/HyCpi
UhNLe/jDnkaPf6256M4BsIcy07soV9Q/o41u3VQTxHTvUlTdDS9gRtf4BM6PcY08
Jp76oJigbDSbxk0QbB4QarEwxJdyB4mY/+rtKprngTSM4HbeA9DSrdz06se5VnDi
QCzU+bMWV89z1zUJFUgGddmpld7u8w4=
-----END CERTIFICATE-----