Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6859f845-d9b1-3a70-a193-29a9260dd722.roa
File:                     6859f845-d9b1-3a70-a193-29a9260dd722.roa (raw, json)
Hash identifier:          /SO0fvTHn3fru/KQcirBYlV6JA6jqTpxRapQ+XgpVSQ=
Subject key identifier:   24:21:E0:FA:5F:ED:FB:CA:AF:06:6E:FF:27:2B:63:F2:BB:31:65:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584536EF1D4E1F7E08DFF36F0680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6859f845-d9b1-3a70-a193-29a9260dd722.roa
Signing time:             Fri 15 Mar 2024 10:01:31 +0000
ROA not before:           Fri 15 Mar 2024 10:01:31 +0000
ROA not after:            Thu 13 Jun 2024 10:01:31 +0000
asID:                     18779
IP address blocks:        104.164.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 12:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:36:ef:1d:4e:1f:7e:08:df:f3:6f:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 15 10:01:31 2024 GMT
            Not After : Jun 13 10:01:31 2024 GMT
        Subject: CN=bb038e25-88a1-4902-be3f-4087c8b3417d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:d5:87:d8:22:c8:54:c3:1c:ad:16:cc:e3:
                    c1:94:fc:90:d2:6e:10:2d:ec:f2:85:20:f4:03:fb:
                    f2:69:46:55:b0:a7:86:c2:33:5b:45:47:6c:9e:38:
                    50:07:11:38:67:e9:42:d6:53:9f:ef:d3:f4:6d:53:
                    57:3a:fc:6c:f1:21:53:0c:7c:69:10:c6:85:9f:cc:
                    40:10:4a:28:9b:c5:5d:63:af:d5:b6:f6:9a:42:22:
                    99:b9:3d:2c:74:cf:b5:1d:0e:2e:bb:37:cb:dd:a1:
                    7a:62:0b:60:c7:84:35:41:c1:dc:52:1a:d9:25:97:
                    a9:84:bb:50:87:76:04:b0:3d:ad:26:0b:a3:dd:a0:
                    20:80:21:e8:8f:7f:81:06:29:70:b4:de:f0:48:b7:
                    5e:92:0d:6b:df:ab:fe:a0:6e:ff:c6:22:94:64:30:
                    8d:7a:66:56:8d:3c:40:17:1a:db:58:b8:b7:64:f2:
                    6f:79:f8:1a:68:2e:7e:cb:f2:9c:85:57:a7:35:f1:
                    3a:a3:8c:f1:09:ad:b4:d3:be:7c:ea:2c:2f:1e:4f:
                    56:2e:82:a2:99:e2:d3:12:c9:eb:cb:92:75:ef:f1:
                    1d:f4:e2:55:44:36:ae:73:49:18:b9:93:8d:f2:e8:
                    3e:46:b6:1d:0d:92:e1:34:2a:36:4c:e9:fa:7b:3e:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:E0:FA:5F:ED:FB:CA:AF:06:6E:FF:27:2B:63:F2:BB:31:65:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6859f845-d9b1-3a70-a193-29a9260dd722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:db:5f:ed:ed:b1:ac:66:90:3b:56:f5:9f:7f:a3:ae:35:38:
         f1:4a:51:ec:aa:af:9c:be:bd:b6:a0:f2:57:92:c1:b5:34:19:
         67:5e:f7:3e:e4:2f:92:22:30:63:0f:14:50:73:28:49:57:78:
         6f:e3:25:fe:c0:d2:1e:d0:16:5a:0a:ad:50:e1:e8:7e:71:6f:
         11:1c:27:c2:78:b7:5e:04:39:dc:4a:70:43:0b:a0:21:8b:b3:
         18:6a:29:e0:fd:6e:62:86:31:bb:7f:92:da:0c:66:0f:e8:a2:
         92:72:e8:c7:96:4d:c3:81:9e:08:a2:28:29:db:d6:78:9d:ec:
         5c:5e:2c:28:04:0a:3e:43:98:03:37:95:7a:fe:17:14:d5:50:
         ee:29:d6:61:d1:e9:d3:c1:40:21:f7:fd:a8:3b:75:11:0b:07:
         98:de:68:50:a2:a1:4d:26:5e:ae:f5:d4:f1:12:0c:34:4a:44:
         9f:a5:d3:b2:37:03:00:44:f4:e5:8f:b9:67:a8:76:25:e3:dd:
         5d:71:42:f9:26:d9:b0:53:5a:6a:25:65:81:c7:61:22:94:45:
         8d:e6:34:a8:30:b6:ea:e7:4f:d3:d7:ee:19:52:f4:e8:ff:28:
         f9:fc:c8:d0:1b:a6:83:9a:fe:f9:33:fb:6f:1e:ee:7b:66:eb:
         25:3f:40:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU27x1OH34I3/NvBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDMxNTEwMDEzMVoXDTI0MDYxMzEwMDEzMVowLzEtMCsGA1UEAxMk
YmIwMzhlMjUtODhhMS00OTAyLWJlM2YtNDA4N2M4YjM0MTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx7Vh9giyFTDHK0WzOPBlPyQ0m4QLezyhSD0
A/vyaUZVsKeGwjNbRUdsnjhQBxE4Z+lC1lOf79P0bVNXOvxs8SFTDHxpEMaFn8xA
EEoom8VdY6/VtvaaQiKZuT0sdM+1HQ4uuzfL3aF6Ygtgx4Q1QcHcUhrZJZephLtQ
h3YEsD2tJguj3aAggCHoj3+BBilwtN7wSLdekg1r36v+oG7/xiKUZDCNemZWjTxA
FxrbWLi3ZPJvefgaaC5+y/KchVenNfE6o4zxCa2007586iwvHk9WLoKimeLTEsnr
y5J17/Ed9OJVRDauc0kYuZON8ug+RrYdDZLhNCo2TOn6ez4kCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQh4Ppf7fvKrwZu/ycrY/K7MWViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjg1OWY4NDUtZDliMS0z
YTcwLWExOTMtMjlhOTI2MGRkNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPbX+3tsaxmkDtW9Z9/o641OPFKUeyqr5y+vbag8leSwbU0GWde9z7k
L5IiMGMPFFBzKElXeG/jJf7A0h7QFloKrVDh6H5xbxEcJ8J4t14EOdxKcEMLoCGL
sxhqKeD9bmKGMbt/ktoMZg/oopJy6MeWTcOBngiiKCnb1nid7FxeLCgECj5DmAM3
lXr+FxTVUO4p1mHR6dPBQCH3/ag7dRELB5jeaFCioU0mXq711PESDDRKRJ+l07I3
AwBE9OWPuWeodiXj3V1xQvkm2bBTWmolZYHHYSKURY3mNKgwturnT9PX7hlS9Oj/
KPn8yNAbpoOa/vkz+28e7ntm6yU/QPM=
-----END CERTIFICATE-----