Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/3f912243-821e-34fa-bda2-a95b9f39b417.roa
File:                     3f912243-821e-34fa-bda2-a95b9f39b417.roa (raw, json)
Hash identifier:          f6lpytAlP8ysmn2Y9Qckp+apAI+dOxEzAkgFWqOeGF4=
Subject key identifier:   40:06:C1:A1:34:4C:E3:3C:0D:0A:8F:62:03:3C:EF:E3:9F:55:51:1E
Certificate issuer:       /CN=fe27b7e0-b437-4c2e-acb7-0e81eb620166
Certificate serial:       010D0C9F432858472DFAF2E45CF24501EB43C840
Authority key identifier: C6:11:55:CA:B0:EC:F1:3F:31:A1:F5:B6:8B:8A:34:8B:69:5D:21:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/3f912243-821e-34fa-bda2-a95b9f39b417.roa
Signing time:             Wed 11 Sep 2024 14:36:57 +0000
ROA not before:           Wed 11 Sep 2024 14:36:57 +0000
ROA not after:            Tue 10 Dec 2024 15:36:57 +0000
asID:                     65007
IP address blocks:        192.82.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 16:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2d:fa:f2:e4:5c:f2:45:01:eb:43:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe27b7e0-b437-4c2e-acb7-0e81eb620166
        Validity
            Not Before: Sep 11 14:36:57 2024 GMT
            Not After : Dec 10 15:36:57 2024 GMT
        Subject: CN=dc66c63a-0cf6-49ab-9ebd-534cbc72529d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:54:52:ff:6c:dc:cb:d1:17:37:c9:3a:5e:
                    18:1a:69:a6:b9:f0:62:6b:9b:f4:0f:33:78:2f:e0:
                    89:bb:57:23:63:87:b8:fa:6b:40:4d:62:af:f5:af:
                    8d:4c:37:10:f4:b3:f3:1e:0d:da:f6:d2:cc:b7:cc:
                    08:d5:c9:23:a6:05:63:10:0a:17:68:90:31:d2:82:
                    37:bf:bf:ec:9f:1a:c9:b3:b2:ab:99:8d:ce:8b:aa:
                    30:d0:4c:fd:4c:30:4f:18:7e:7b:16:03:07:b7:3e:
                    45:20:0c:6f:2f:35:9e:2b:e0:c5:91:a0:fe:02:84:
                    24:ec:6f:c3:26:2d:c8:35:2b:78:c7:26:7a:6b:2f:
                    cb:77:57:3d:11:95:3a:d1:59:28:ce:e1:36:73:35:
                    82:8b:73:34:0a:c1:c3:e3:30:2e:89:f1:14:85:0a:
                    c1:b6:37:d5:58:8a:36:2d:41:c4:e8:95:54:7b:95:
                    68:4e:0c:37:a7:72:98:76:e1:9c:e6:2a:19:d3:56:
                    71:7a:a2:94:50:1c:91:5c:f3:47:de:8b:36:97:ae:
                    65:de:02:f0:ff:66:16:57:c3:48:44:6d:fd:36:24:
                    2b:74:ea:45:88:85:ae:77:44:f3:82:6f:7d:51:68:
                    90:af:f0:97:f0:0a:47:10:6b:ca:23:2a:e0:aa:86:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:C1:A1:34:4C:E3:3C:0D:0A:8F:62:03:3C:EF:E3:9F:55:51:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/3f912243-821e-34fa-bda2-a95b9f39b417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166/fe27b7e0-b437-4c2e-acb7-0e81eb620166.crl

            X509v3 Authority Key Identifier:
                keyid:C6:11:55:CA:B0:EC:F1:3F:31:A1:F5:B6:8B:8A:34:8B:69:5D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe27b7e0-b437-4c2e-acb7-0e81eb620166.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ee:ec:27:b2:a2:f0:df:24:fc:52:e5:6a:01:b3:ea:7b:ec:
         76:93:aa:22:07:e4:ee:48:32:64:28:e1:ea:30:5a:2a:af:5d:
         1b:4c:c8:ef:0e:c0:09:18:c7:5c:56:7a:a9:5d:be:e2:31:cf:
         3d:64:d2:33:1d:fb:ee:05:ba:12:36:ab:9a:b3:0e:8e:aa:8c:
         2d:a8:d5:54:e6:50:67:e5:61:fa:cd:c2:2f:93:f2:b1:2e:1d:
         4f:c4:0f:ee:a2:bd:5b:59:32:35:61:a1:51:fc:c0:27:bf:d2:
         71:81:e9:cd:01:b7:94:88:91:db:ea:e8:0d:80:33:8c:22:b1:
         7f:1d:83:e4:45:3e:db:8b:10:14:c9:a8:74:bd:11:c9:e4:bb:
         c8:80:f2:9d:80:d6:a1:ce:77:8b:37:9e:06:38:d3:f1:d5:68:
         0b:15:d1:1f:eb:a4:6f:e9:21:ee:f5:b5:c1:e2:96:3c:f6:bb:
         f9:f9:59:5b:2b:02:d9:7b:7a:dc:31:f7:68:21:07:ce:7d:f1:
         df:b0:51:e5:98:4b:7f:b6:21:70:46:af:8a:64:9f:66:30:fa:
         69:c8:7a:30:4f:9f:67:b9:fb:33:63:a0:22:b0:56:35:c9:4e:
         db:dc:eb:d3:d4:27:aa:7a:43:d7:b0:ac:48:e0:d5:87:e8:92:
         28:8e:b6:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEct+vLkXPJFAetDyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmUyN2I3ZTAtYjQzNy00YzJlLWFjYjctMGU4MWViNjIw
MTY2MB4XDTI0MDkxMTE0MzY1N1oXDTI0MTIxMDE1MzY1N1owLzEtMCsGA1UEAxMk
ZGM2NmM2M2EtMGNmNi00OWFiLTllYmQtNTM0Y2JjNzI1MjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMhUUv9s3MvRFzfJOl4YGmmmufBia5v0DzN4
L+CJu1cjY4e4+mtATWKv9a+NTDcQ9LPzHg3a9tLMt8wI1ckjpgVjEAoXaJAx0oI3
v7/snxrJs7KrmY3Oi6ow0Ez9TDBPGH57FgMHtz5FIAxvLzWeK+DFkaD+AoQk7G/D
Ji3INSt4xyZ6ay/Ld1c9EZU60VkozuE2czWCi3M0CsHD4zAuifEUhQrBtjfVWIo2
LUHE6JVUe5VoTgw3p3KYduGc5ioZ01ZxeqKUUByRXPNH3os2l65l3gLw/2YWV8NI
RG39NiQrdOpFiIWud0Tzgm99UWiQr/CX8ApHEGvKIyrgqob50QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAGwaE0TOM8DQqPYgM87+OfVVEeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTI3
YjdlMC1iNDM3LTRjMmUtYWNiNy0wZTgxZWI2MjAxNjYvM2Y5MTIyNDMtODIxZS0z
NGZhLWJkYTItYTk1YjlmMzliNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUyN2I3ZTAtYjQzNy00YzJlLWFj
YjctMGU4MWViNjIwMTY2L2ZlMjdiN2UwLWI0MzctNGMyZS1hY2I3LTBlODFlYjYy
MDE2Ni5jcmwwHwYDVR0jBBgwFoAUxhFVyrDs8T8xofW2i4o0i2ldIV8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTI3YjdlMC1iNDM3LTRjMmUtYWNiNy0wZTgx
ZWI2MjAxNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJru7CeyovDfJPxS5WoBs+p77HaTqiIH5O5IMmQo4eowWiqvXRtMyO8O
wAkYx1xWeqldvuIxzz1k0jMd++4FuhI2q5qzDo6qjC2o1VTmUGflYfrNwi+T8rEu
HU/ED+6ivVtZMjVhoVH8wCe/0nGB6c0Bt5SIkdvq6A2AM4wisX8dg+RFPtuLEBTJ
qHS9Ecnku8iA8p2A1qHOd4s3ngY40/HVaAsV0R/rpG/pIe71tcHiljz2u/n5WVsr
Atl7etwx92ghB8598d+wUeWYS3+2IXBGr4pkn2Yw+mnIejBPn2e5+zNjoCKwVjXJ
Ttvc69PUJ6p6Q9ewrEjg1YfokiiOthE=
-----END CERTIFICATE-----