Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61f8cccf-2b38-3b89-b18a-741403a5cc85.roa
File:                     61f8cccf-2b38-3b89-b18a-741403a5cc85.roa (raw, json)
Hash identifier:          YuIrJYNnpoo0Ak8MiN4DEIGZ6+uFpXSoeSQcXSWQsfc=
Subject key identifier:   4E:96:BF:C7:8B:C0:D0:5C:30:A5:34:FA:C3:86:2E:E2:E3:0E:64:01
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858468A7A29E8C8AE4B09AD083640
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61f8cccf-2b38-3b89-b18a-741403a5cc85.roa
Signing time:             Mon 15 Jul 2024 01:00:24 +0000
ROA not before:           Mon 15 Jul 2024 01:00:24 +0000
ROA not after:            Sun 13 Oct 2024 01:00:24 +0000
asID:                     48031
IP address blocks:        104.253.216.0/24 maxlen: 24
                          104.253.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 12:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8a:7a:29:e8:c8:ae:4b:09:ad:08:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 15 01:00:24 2024 GMT
            Not After : Oct 13 01:00:24 2024 GMT
        Subject: CN=1453b140-a572-42ef-abd5-d529173f2b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:d6:de:d9:23:5e:b4:e1:8c:33:ff:21:84:
                    59:e2:b4:ac:de:ae:26:db:ad:6e:e0:27:37:01:a3:
                    41:e6:52:54:e6:86:ed:68:ea:d8:21:a0:bb:8f:71:
                    b0:15:e8:17:a9:63:f1:15:83:24:cc:ee:dd:77:d7:
                    29:9e:6a:5c:91:ee:51:bd:48:1c:4a:69:7a:f1:58:
                    5c:ac:19:76:ae:56:60:e6:50:c6:30:e5:6c:ca:63:
                    dd:15:0c:4f:43:a4:21:53:6d:95:f4:2e:8d:4f:45:
                    15:4a:ee:45:8e:bb:7e:a3:fa:2a:d1:22:73:55:19:
                    85:bd:2d:39:02:39:16:7e:47:94:34:b4:ca:bd:86:
                    99:08:fc:93:6d:0d:70:19:1b:2f:c3:9b:19:69:5e:
                    24:5d:b5:4c:7c:df:1e:b9:09:d8:48:65:5a:02:e5:
                    b5:ac:ef:60:d4:82:54:32:8f:1d:1d:44:98:ae:de:
                    7d:b9:88:e6:bd:d4:bd:af:b9:8f:45:3e:c9:53:76:
                    b2:c7:c4:22:25:94:39:5c:7d:c2:db:f6:42:de:71:
                    79:e1:6d:2a:b5:1f:79:bd:fa:dc:11:57:c2:4b:10:
                    83:b1:a3:75:83:0c:d6:76:48:33:8c:ae:a7:2b:1e:
                    d7:3b:a3:5c:b0:15:f2:ea:8f:a8:4d:ad:b1:77:f3:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:BF:C7:8B:C0:D0:5C:30:A5:34:FA:C3:86:2E:E2:E3:0E:64:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61f8cccf-2b38-3b89-b18a-741403a5cc85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.216.0/24
                  104.253.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:ea:0f:13:e9:9d:c1:7f:da:25:28:d3:e2:86:5e:1f:91:
         8e:38:40:41:fc:e5:6a:fc:af:c7:44:4e:5d:3c:48:d2:20:56:
         ce:16:13:06:0b:bd:a1:0e:f5:d7:1b:85:2e:0b:4e:d6:9b:c2:
         32:53:63:81:7d:5e:ce:20:00:34:9e:4f:93:69:84:37:86:b8:
         58:d1:43:64:d5:f4:15:42:ae:43:05:a7:5a:f2:33:6c:ad:91:
         12:5d:c7:14:7e:23:6c:6f:63:c3:c6:f2:6a:4c:be:e6:09:aa:
         ea:97:f4:b2:9c:3a:3c:15:4e:fd:3b:bf:91:2a:4f:39:58:61:
         92:5c:c7:ca:7d:9f:a2:40:96:f3:da:af:e1:75:63:3e:70:11:
         4d:e8:d5:0b:9b:83:cb:88:d3:7e:8e:6f:9b:37:01:87:7a:56:
         0d:12:d7:4d:02:17:36:e0:12:91:03:79:b0:fb:2d:8a:a6:90:
         78:65:a6:72:88:fa:e8:5a:b6:a2:a5:34:e7:3c:37:b8:89:f1:
         c5:5a:6b:f6:bd:cf:f1:1d:14:02:e8:42:57:ab:49:8d:42:77:
         3a:04:95:67:12:84:e7:fc:7c:14:5a:58:c6:bd:a2:e0:f8:e1:
         d1:08:10:f1:9a:b6:13:b3:c5:21:ee:6f:9f:d8:75:74:83:8e:
         84:13:0a:c3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEaKeinoyK5LCa0INkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDcxNTAxMDAyNFoXDTI0MTAxMzAxMDAyNFowLzEtMCsGA1UEAxMk
MTQ1M2IxNDAtYTU3Mi00MmVmLWFiZDUtZDUyOTE3M2YyYjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvzW3tkjXrThjDP/IYRZ4rSs3q4m261u4Cc3
AaNB5lJU5obtaOrYIaC7j3GwFegXqWPxFYMkzO7dd9cpnmpcke5RvUgcSml68Vhc
rBl2rlZg5lDGMOVsymPdFQxPQ6QhU22V9C6NT0UVSu5Fjrt+o/oq0SJzVRmFvS05
AjkWfkeUNLTKvYaZCPyTbQ1wGRsvw5sZaV4kXbVMfN8euQnYSGVaAuW1rO9g1IJU
Mo8dHUSYrt59uYjmvdS9r7mPRT7JU3ayx8QiJZQ5XH3C2/ZC3nF54W0qtR95vfrc
EVfCSxCDsaN1gwzWdkgzjK6nKx7XO6NcsBXy6o+oTa2xd/Ne0QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFE6Wv8eLwNBcMKU0+sOGLuLjDmQBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjFmOGNjY2YtMmIzOC0z
Yjg5LWIxOGEtNzQxNDAzYTVjYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaP3YAwQA
aP3aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACid6g8T6Z3Bf9olKNPihl4fkY44QEH85Wr8r8dETl08SNIg
Vs4WEwYLvaEO9dcbhS4LTtabwjJTY4F9Xs4gADSeT5NphDeGuFjRQ2TV9BVCrkMF
p1ryM2ytkRJdxxR+I2xvY8PG8mpMvuYJquqX9LKcOjwVTv07v5EqTzlYYZJcx8p9
n6JAlvPar+F1Yz5wEU3o1Qubg8uI036Ob5s3AYd6Vg0S100CFzbgEpEDebD7LYqm
kHhlpnKI+uhatqKlNOc8N7iJ8cVaa/a9z/EdFALoQlerSY1CdzoElWcShOf8fBRa
WMa9ouD44dEIEPGathOzxSHub5/YdXSDjoQTCsM=
-----END CERTIFICATE-----