Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/4b320cec-14de-333b-89a2-3694d8f6e94b.roa
File:                     4b320cec-14de-333b-89a2-3694d8f6e94b.roa (raw, json)
Hash identifier:          3qURwM22rqbwlqzTGMyfiXbW2DAUSqFrS0yYxm6zJ7o=
Subject key identifier:   C6:FF:0A:A7:E4:D3:F2:B3:1E:BF:00:36:7D:29:3E:1F:73:DA:07:ED
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F43285846DFC7905F461D81A8042720C0
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/4b320cec-14de-333b-89a2-3694d8f6e94b.roa
Signing time:             Wed 14 Aug 2024 14:20:22 +0000
ROA not before:           Wed 14 Aug 2024 14:20:22 +0000
ROA not after:            Tue 12 Nov 2024 15:20:22 +0000
asID:                     46474
IP address blocks:        74.205.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 20:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:df:c7:90:5f:46:1d:81:a8:04:27:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Aug 14 14:20:22 2024 GMT
            Not After : Nov 12 15:20:22 2024 GMT
        Subject: CN=388eb9d0-9feb-4294-9627-01cd5186de53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:52:36:69:73:f2:24:a1:d8:e4:8c:6c:9d:
                    68:c2:9e:55:ca:85:6a:08:80:25:23:bb:9c:5b:8a:
                    18:df:1c:ac:5c:f1:79:a0:c8:5c:7c:fd:82:e1:bc:
                    ce:28:50:65:4b:e3:03:44:86:0e:8b:90:5a:0c:43:
                    5c:92:43:b2:91:4b:99:d1:25:5b:39:fc:1a:9b:59:
                    b7:0a:54:64:bd:f6:f3:1e:25:37:9e:44:5f:6c:5e:
                    57:a9:b1:50:31:32:9e:e4:e9:b7:20:2a:d7:78:1b:
                    93:16:7a:0d:2d:2a:e9:55:14:c8:23:61:83:39:34:
                    2b:62:e6:5d:1b:ec:eb:95:c5:24:fe:90:57:19:2c:
                    90:80:50:04:0c:cc:0b:c7:fe:65:43:f0:fa:db:2c:
                    99:9c:3d:eb:bc:b6:92:26:71:ab:a2:18:47:08:6d:
                    61:66:d0:b6:fb:12:e9:a2:32:e7:b4:df:89:a0:7c:
                    ee:b7:c2:55:0e:73:68:c3:dd:ec:da:36:e0:2d:36:
                    28:4d:3a:87:24:6a:62:6a:8e:d5:44:fc:c1:4e:ec:
                    85:39:cf:11:b0:f2:c5:0b:6a:fe:7b:25:80:a1:97:
                    8e:55:57:49:ea:3f:b8:df:0f:74:20:7b:e3:4e:98:
                    e6:25:c9:18:7f:ad:64:0e:c8:83:94:99:e6:3e:6f:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FF:0A:A7:E4:D3:F2:B3:1E:BF:00:36:7D:29:3E:1F:73:DA:07:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/4b320cec-14de-333b-89a2-3694d8f6e94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:14:17:1c:a0:20:01:69:ed:ad:5c:a9:68:e7:27:c1:7d:e8:
         f4:8f:5a:7d:e5:b6:85:45:9c:d3:54:f5:85:81:61:25:eb:14:
         73:ec:01:c3:55:9e:cc:0e:87:7e:d5:bf:30:0c:0c:c9:5d:fc:
         19:a8:52:4a:da:c3:45:82:5c:9f:5b:ee:04:95:bc:37:ef:7c:
         f6:a5:8d:92:2d:27:e1:3f:01:82:94:f6:a0:e3:34:cd:db:00:
         25:32:b4:b0:5c:c1:72:9b:52:28:11:76:6f:39:52:f4:8b:e5:
         da:1f:bc:6c:11:2d:9b:c3:f2:06:d2:e8:5d:59:ea:53:3e:e0:
         31:76:b7:a8:5a:a5:78:1a:cd:c3:48:71:2d:01:72:5f:4f:1c:
         22:a5:21:74:28:fa:7e:ae:37:fd:1e:ba:fc:c5:b1:b9:15:d2:
         9e:c9:c5:b9:6c:2c:72:6f:a1:58:db:c0:76:56:31:19:16:4d:
         8a:2b:b2:dd:2e:c2:a6:2f:54:79:f8:1c:c8:23:60:38:00:16:
         ee:7d:2d:47:18:f5:d1:7d:07:25:fd:cc:17:93:80:fa:a2:b5:
         c1:8e:40:79:ad:f4:e5:7c:9d:42:74:83:63:4d:8b:2b:03:8c:
         b5:a9:cc:3a:cb:b8:58:ab:42:4d:41:b7:b7:9f:f0:d0:21:bf:
         5a:93:49:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbfx5BfRh2BqAQnIMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNmNTMyM2YtOGJlYS00OGM2LWFhMDMtOTQ5MjU1ZGQx
OTk3MB4XDTI0MDgxNDE0MjAyMloXDTI0MTExMjE1MjAyMlowLzEtMCsGA1UEAxMk
Mzg4ZWI5ZDAtOWZlYi00Mjk0LTk2MjctMDFjZDUxODZkZTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivFSNmlz8iSh2OSMbJ1owp5VyoVqCIAlI7uc
W4oY3xysXPF5oMhcfP2C4bzOKFBlS+MDRIYOi5BaDENckkOykUuZ0SVbOfwam1m3
ClRkvfbzHiU3nkRfbF5XqbFQMTKe5Om3ICrXeBuTFnoNLSrpVRTII2GDOTQrYuZd
G+zrlcUk/pBXGSyQgFAEDMwLx/5lQ/D62yyZnD3rvLaSJnGrohhHCG1hZtC2+xLp
ojLntN+JoHzut8JVDnNow93s2jbgLTYoTTqHJGpiao7VRPzBTuyFOc8RsPLFC2r+
eyWAoZeOVVdJ6j+43w90IHvjTpjmJckYf61kDsiDlJnmPm/VTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMb/Cqfk0/KzHr8ANn0pPh9z2gftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1
MzIzZi04YmVhLTQ4YzYtYWEwMy05NDkyNTVkZDE5OTcvNGIzMjBjZWMtMTRkZS0z
MzNiLTg5YTItMzY5NGQ4ZjZlOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjNmNTMyM2YtOGJlYS00OGM2LWFh
MDMtOTQ5MjU1ZGQxOTk3L2IzZjUzMjNmLThiZWEtNDhjNi1hYTAzLTk0OTI1NWRk
MTk5Ny5jcmwwHwYDVR0jBBgwFoAUU4ELix9UHi+CHErdwD5wsGKV7F0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1MzIzZi04YmVhLTQ4YzYtYWEwMy05NDky
NTVkZDE5OTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASs3LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsUFxygIAFp7a1cqWjnJ8F96PSPWn3ltoVFnNNU9YWBYSXrFHPsAcNV
nswOh37VvzAMDMld/BmoUkraw0WCXJ9b7gSVvDfvfPaljZItJ+E/AYKU9qDjNM3b
ACUytLBcwXKbUigRdm85UvSL5dofvGwRLZvD8gbS6F1Z6lM+4DF2t6hapXgazcNI
cS0Bcl9PHCKlIXQo+n6uN/0euvzFsbkV0p7JxblsLHJvoVjbwHZWMRkWTYorst0u
wqYvVHn4HMgjYDgAFu59LUcY9dF9ByX9zBeTgPqitcGOQHmt9OV8nUJ0g2NNiysD
jLWpzDrLuFirQk1Bt7ef8NAhv1qTSRk=
-----END CERTIFICATE-----