Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a0319dbe-8917-3e69-bbf2-5e3976a266fc.roa
File:                     a0319dbe-8917-3e69-bbf2-5e3976a266fc.roa (raw, json)
Hash identifier:          y8yr6JpfHZhRBoAxrzGfW3VBG5Zowg7kG88wnjDTu/4=
Subject key identifier:   3D:BC:99:CF:2D:DE:D5:24:70:C8:C4:86:43:24:37:F0:21:08:0D:36
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABC098C64E9AB69D420A80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a0319dbe-8917-3e69-bbf2-5e3976a266fc.roa
Signing time:             Wed 16 Oct 2024 14:26:36 +0000
ROA not before:           Wed 16 Oct 2024 14:26:36 +0000
ROA not after:            Tue 14 Jan 2025 15:26:36 +0000
asID:                     81
IP address blocks:        198.86.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:c0:98:c6:4e:9a:b6:9d:42:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:36 2024 GMT
            Not After : Jan 14 15:26:36 2025 GMT
        Subject: CN=6965714c-4165-4496-a78e-03516f9b87e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:bc:2e:28:5a:08:ea:df:bd:35:ef:ac:ea:
                    07:02:c8:5b:91:4d:50:34:2f:b0:f4:e6:4a:9b:38:
                    f7:ce:81:67:06:b2:bc:e4:80:66:76:c3:dc:2f:94:
                    6c:6f:e3:d0:db:0a:7e:88:5f:20:1b:e6:87:9b:22:
                    ad:a6:45:2e:54:38:e4:c7:99:e5:3a:53:d5:1f:31:
                    12:0a:69:46:a2:4a:83:28:81:e7:f1:f5:64:cd:bc:
                    03:a9:de:3e:fc:cd:80:c7:44:d7:ab:4f:da:1f:71:
                    dc:7d:af:72:66:1f:29:e8:5c:95:34:07:f2:4b:ee:
                    15:e0:20:61:a1:e5:8d:d7:8f:df:50:fa:23:d3:fe:
                    ad:4f:10:9b:70:1d:73:b6:24:8c:d8:c3:96:7f:1f:
                    c9:e9:fd:21:83:bb:79:cd:66:ea:04:44:ca:82:b8:
                    b5:77:8e:7f:8d:ba:a0:d7:64:ee:52:f9:f0:57:f2:
                    49:91:06:36:d8:cd:35:ef:bd:ed:21:35:e4:dd:21:
                    af:ed:e7:e7:e0:71:ec:39:05:f2:6f:72:48:c4:d8:
                    35:5a:8a:7f:c7:5e:5f:11:b9:72:8c:7b:23:94:dc:
                    77:e8:e8:d6:0f:1f:d2:d6:a7:47:c8:26:ba:3d:5d:
                    2f:e4:23:69:ee:43:ad:9e:ff:72:ab:f5:b5:77:60:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BC:99:CF:2D:DE:D5:24:70:C8:C4:86:43:24:37:F0:21:08:0D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a0319dbe-8917-3e69-bbf2-5e3976a266fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:19:09:c9:86:57:d0:e0:4f:1a:c2:81:54:f2:15:19:df:
         ac:79:c1:c2:9e:99:6c:9b:77:13:10:7d:dc:6c:f9:31:7c:f1:
         25:41:f1:e4:e2:42:34:78:51:8a:d5:72:6b:4a:4e:3c:86:5d:
         d9:43:9e:40:64:f3:1c:b1:df:2b:f6:3a:70:4d:33:59:7d:89:
         d7:33:8c:14:f8:3b:21:ae:15:27:e8:15:01:c0:82:74:a0:40:
         b7:b1:f3:89:f3:9c:66:41:01:26:d0:35:ee:ff:cf:b3:e7:38:
         19:d9:9e:63:f4:2b:2d:be:63:65:c1:51:ac:95:e4:35:62:32:
         8f:4c:83:1a:5d:6b:b9:8c:7a:81:92:a3:0f:9d:8a:9b:8c:2a:
         f4:b2:70:92:9f:ef:83:5d:c6:5b:6e:59:de:7b:1e:ad:0a:bd:
         81:3e:fc:7d:22:a8:93:92:a6:b9:44:c7:f7:7b:27:97:4d:f3:
         09:50:7d:4f:1b:67:06:7b:95:25:a7:ec:0f:41:46:96:49:86:
         22:88:de:0e:1c:52:55:ad:d9:bc:6b:fe:68:3b:e0:83:9e:87:
         89:65:76:20:2f:8c:f2:33:0c:c7:51:ed:a1:57:2b:fc:11:bb:
         8c:7d:48:7f:e0:27:8c:d0:88:1c:bd:f2:f8:69:c7:fb:74:bf:
         0a:52:7f:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq8CYxk6atp1CCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNloXDTI1MDExNDE1MjYzNlowLzEtMCsGA1UEAxMk
Njk2NTcxNGMtNDE2NS00NDk2LWE3OGUtMDM1MTZmOWI4N2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKi8LihaCOrfvTXvrOoHAshbkU1QNC+w9OZK
mzj3zoFnBrK85IBmdsPcL5Rsb+PQ2wp+iF8gG+aHmyKtpkUuVDjkx5nlOlPVHzES
CmlGokqDKIHn8fVkzbwDqd4+/M2Ax0TXq0/aH3Hcfa9yZh8p6FyVNAfyS+4V4CBh
oeWN14/fUPoj0/6tTxCbcB1ztiSM2MOWfx/J6f0hg7t5zWbqBETKgri1d45/jbqg
12TuUvnwV/JJkQY22M01773tITXk3SGv7efn4HHsOQXyb3JIxNg1Wop/x15fEbly
jHsjlNx36OjWDx/S1qdHyCa6PV0v5CNp7kOtnv9yq/W1d2BdAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD28mc8t3tUkcMjEhkMkN/AhCA02MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTAzMTlkYmUtODkxNy0z
ZTY5LWJiZjItNWUzOTc2YTI2NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFV6GQnJhlfQ4E8awoFU8hUZ36x5wcKemWybdxMQfdxs+TF88SVB8eTi
QjR4UYrVcmtKTjyGXdlDnkBk8xyx3yv2OnBNM1l9idczjBT4OyGuFSfoFQHAgnSg
QLex84nznGZBASbQNe7/z7PnOBnZnmP0Ky2+Y2XBUayV5DViMo9Mgxpda7mMeoGS
ow+dipuMKvSycJKf74NdxltuWd57Hq0KvYE+/H0iqJOSprlEx/d7J5dN8wlQfU8b
ZwZ7lSWn7A9BRpZJhiKI3g4cUlWt2bxr/mg74IOeh4lldiAvjPIzDMdR7aFXK/wR
u4x9SH/gJ4zQiBy98vhpx/t0vwpSf7M=
-----END CERTIFICATE-----