Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/da1ce579-11eb-377f-bdaa-54c38ae3117e.roa
File:                     da1ce579-11eb-377f-bdaa-54c38ae3117e.roa (raw, json)
Hash identifier:          aMQ4mf++8ZQdRBjHIqb3p+Tl7HxhGztKSdixPqAvB8Q=
Subject key identifier:   D0:93:57:9A:B6:21:9C:06:37:EA:40:6D:9E:A0:85:7E:7D:90:A5:A9
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F43285846A282A8C000F234848D6F1080
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/da1ce579-11eb-377f-bdaa-54c38ae3117e.roa
Signing time:             Tue 23 Jul 2024 15:37:14 +0000
ROA not before:           Tue 23 Jul 2024 15:37:14 +0000
ROA not after:            Mon 21 Oct 2024 15:37:14 +0000
asID:                     4922
IP address blocks:        24.49.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 19:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:82:a8:c0:00:f2:34:84:8d:6f:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 23 15:37:14 2024 GMT
            Not After : Oct 21 15:37:14 2024 GMT
        Subject: CN=f99007a0-9842-465b-aec6-83984a18a8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:fa:f2:f9:8a:6f:43:a4:6c:7c:65:8c:fa:
                    99:b2:ef:2d:bb:c3:af:26:06:cf:e2:5c:b3:75:32:
                    87:13:1c:e8:f3:ee:f9:7f:d2:e7:b1:25:bf:9e:71:
                    1b:e0:af:fa:ab:3e:ff:59:cb:53:64:ee:98:c6:37:
                    ff:66:7c:64:ed:c2:88:9f:42:52:87:53:df:f1:42:
                    e8:f6:71:ba:3d:f2:5c:7f:f8:46:e3:6d:5e:b5:d0:
                    a7:da:2c:88:92:a6:bf:68:41:d8:dc:73:d6:bf:36:
                    e5:ef:0e:7c:8d:cd:cb:41:36:55:05:5c:c5:e5:b8:
                    90:b1:43:1b:e1:e8:b1:a1:8c:e2:88:83:8e:8a:de:
                    8d:00:b7:9c:da:e4:13:ef:ca:49:50:d4:f9:c9:57:
                    47:db:3e:31:f6:76:93:43:2e:a1:e9:48:d8:3b:94:
                    4c:ce:5a:18:c9:77:7d:6d:cb:36:c3:e7:8d:7d:c7:
                    b7:29:dd:bb:1c:27:9a:e0:78:1c:b3:3d:51:b6:80:
                    6d:60:54:87:4d:11:cc:de:f2:7d:4d:47:fd:49:d8:
                    f8:19:e8:59:4b:ff:2f:80:43:27:6e:42:67:c8:8d:
                    66:63:57:fe:f0:d1:7b:87:e2:41:a9:af:11:df:40:
                    fe:47:34:5b:19:b0:71:d7:39:9b:c4:ce:c4:64:c0:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:57:9A:B6:21:9C:06:37:EA:40:6D:9E:A0:85:7E:7D:90:A5:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/da1ce579-11eb-377f-bdaa-54c38ae3117e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.49.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:81:12:91:92:6a:7a:cc:89:d3:88:33:b5:97:1f:a5:77:
         50:8a:9a:cc:0e:e1:15:64:fd:6a:7c:14:02:ba:4f:46:a1:ea:
         03:4b:6b:db:65:c2:c4:7d:36:90:71:38:47:43:1e:75:82:4f:
         a8:51:a0:a3:ba:f6:51:bb:96:1e:23:fa:a0:db:c1:20:21:81:
         a7:42:31:40:c4:81:ca:57:19:2a:79:ab:20:96:ed:56:22:2d:
         13:fb:65:c0:85:1a:d3:a2:f6:28:94:32:2e:4d:22:7f:68:ae:
         66:d4:05:1f:2d:45:f2:10:dc:74:c7:25:9b:7f:83:83:bd:2d:
         4e:26:66:48:9f:86:5a:b5:f6:99:c4:07:64:81:b8:91:5c:ac:
         26:5e:04:ed:1d:37:82:c9:d0:44:7c:49:9e:10:70:b2:e4:53:
         46:86:a3:0f:fd:bc:f1:2b:c4:af:1f:53:23:8f:de:a3:75:61:
         9c:7f:cd:94:e4:df:1e:19:e9:8d:53:ec:98:14:7c:bd:69:14:
         75:71:e6:3a:57:fa:4c:6f:44:98:b8:1a:d1:8b:6a:d8:12:69:
         42:57:aa:8a:42:8e:70:47:2c:a3:11:22:87:01:a1:0a:5a:e5:
         9d:fd:50:b6:e3:0c:db:19:aa:25:e1:c3:79:41:5e:66:a8:89:
         c1:ec:84:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaigqjAAPI0hI1vEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI0MDcyMzE1MzcxNFoXDTI0MTAyMTE1MzcxNFowLzEtMCsGA1UEAxMk
Zjk5MDA3YTAtOTg0Mi00NjViLWFlYzYtODM5ODRhMThhOGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVL68vmKb0OkbHxljPqZsu8tu8OvJgbP4lyz
dTKHExzo8+75f9LnsSW/nnEb4K/6qz7/WctTZO6Yxjf/Znxk7cKIn0JSh1Pf8ULo
9nG6PfJcf/hG421etdCn2iyIkqa/aEHY3HPWvzbl7w58jc3LQTZVBVzF5biQsUMb
4eixoYziiIOOit6NALec2uQT78pJUNT5yVdH2z4x9naTQy6h6UjYO5RMzloYyXd9
bcs2w+eNfce3Kd27HCea4Hgcsz1RtoBtYFSHTRHM3vJ9TUf9Sdj4GehZS/8vgEMn
bkJnyI1mY1f+8NF7h+JBqa8R30D+RzRbGbBx1zmbxM7EZMClWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCTV5q2IZwGN+pAbZ6ghX59kKWpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZGExY2U1NzktMTFlYi0z
NzdmLWJkYWEtNTRjMzhhZTMxMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGDEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDmgRKRkmp6zInTiDO1lx+ld1CKmswO4RVk/Wp8FAK6T0ah6gNLa9tl
wsR9NpBxOEdDHnWCT6hRoKO69lG7lh4j+qDbwSAhgadCMUDEgcpXGSp5qyCW7VYi
LRP7ZcCFGtOi9iiUMi5NIn9ormbUBR8tRfIQ3HTHJZt/g4O9LU4mZkifhlq19pnE
B2SBuJFcrCZeBO0dN4LJ0ER8SZ4QcLLkU0aGow/9vPErxK8fUyOP3qN1YZx/zZTk
3x4Z6Y1T7JgUfL1pFHVx5jpX+kxvRJi4GtGLatgSaUJXqopCjnBHLKMRIocBoQpa
5Z39ULbjDNsZqiXhw3lBXmaoicHshE4=
-----END CERTIFICATE-----