Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa
File:                     6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa (raw, json)
Hash identifier:          pNJTC9r7sSRYcFzG8M1oNXgoopUWg2XUa+mF/sK0xIs=
Subject key identifier:   C4:FE:B3:BF:FB:B8:EA:0A:B1:AD:F7:E3:70:F9:EE:E0:E4:AD:F6:7D
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F43285845D933AF2D7D8651ABC7C9A580
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     203098
IP address blocks:        208.70.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 28 May 2024 16:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:af:2d:7d:86:51:ab:c7:c9:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=f2538edf-361e-4ae1-b196-2d7aff7cef95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ca:62:ff:61:89:bb:61:19:11:4e:60:17:55:
                    88:c6:ab:32:95:0b:be:30:63:0f:7b:7b:90:79:4e:
                    6f:d8:52:c6:a2:c2:ba:7e:a1:46:9f:6f:4b:20:1b:
                    3e:77:8e:0b:0c:eb:a4:29:45:91:6a:72:bb:97:05:
                    58:cd:8f:15:b0:e7:53:06:4a:b5:0f:8b:f7:c9:f6:
                    92:48:94:73:98:53:2c:d0:8e:dd:ab:53:18:17:89:
                    7b:0b:7b:38:e8:f7:46:f6:fa:b3:3c:a3:7c:06:9c:
                    0f:a1:5f:f1:af:c5:7b:ac:f5:e9:dc:ea:f4:45:7b:
                    64:7f:18:ac:af:f0:81:5e:dd:b5:60:cf:05:c6:5f:
                    ca:bf:b3:76:02:f7:65:71:0f:9b:58:2e:16:8b:ca:
                    cf:66:ee:2f:17:82:2a:85:6f:3d:c7:64:cb:84:29:
                    d0:26:71:4d:9e:6e:29:b8:8e:f0:5d:30:1b:e6:6c:
                    91:24:39:69:81:ea:3a:64:c0:b8:02:eb:21:28:b4:
                    7c:dc:f3:0f:bd:f1:ee:40:eb:83:9e:32:c9:45:2c:
                    78:b3:08:49:47:07:9b:47:a8:32:41:9f:94:d8:a6:
                    00:e2:13:e2:60:91:b4:44:d6:de:39:2f:fa:07:00:
                    a5:52:bb:32:38:44:60:60:30:09:a1:43:20:74:e4:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:B3:BF:FB:B8:EA:0A:B1:AD:F7:E3:70:F9:EE:E0:E4:AD:F6:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:62:cf:a6:9b:f8:24:9e:dc:ab:a8:f4:c6:55:9d:d6:a2:74:
         9e:19:89:bb:4a:e2:18:5e:fe:15:ed:05:d9:36:2d:4a:25:68:
         a9:f3:f6:15:06:37:e9:ee:f0:d8:d8:ef:cb:1a:ae:7e:01:c0:
         cd:0d:ba:d9:95:64:b3:80:d9:39:0b:d9:a1:11:9f:9f:f6:97:
         ad:2b:cd:88:62:33:6f:f7:9b:b5:27:24:82:2d:5e:87:6d:5f:
         98:ea:19:21:a7:d1:73:0d:bb:02:8b:af:bc:24:31:aa:e3:ae:
         0a:d2:80:18:19:ce:4b:c8:f6:d4:23:9b:56:1a:4f:c4:ff:21:
         18:32:40:ef:9d:5f:80:5e:26:b6:dc:88:1e:f4:34:68:44:c7:
         f6:c0:49:2f:b5:f8:76:81:22:aa:34:9b:c8:81:8f:10:1b:bf:
         b8:21:f1:ea:42:32:76:51:d2:23:89:e3:a7:2d:9c:a9:7a:a4:
         a7:e7:74:9d:38:a0:67:ce:d2:ee:e7:fb:64:33:cb:58:9e:8e:
         7f:54:a7:dd:6d:a6:45:06:1a:d9:eb:2b:f9:47:8a:74:ac:12:
         66:c7:02:9b:c0:79:4b:ff:df:78:0a:33:16:ba:fc:75:18:ae:
         df:1d:21:00:47:cb:fd:eb:68:62:a8:ad:55:31:d4:39:f3:8c:
         2c:fd:f1:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM68tfYZRq8fJpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy
NzExMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
ZjI1MzhlZGYtMzYxZS00YWUxLWIxOTYtMmQ3YWZmN2NlZjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMpi/2GJu2EZEU5gF1WIxqsylQu+MGMPe3uQ
eU5v2FLGosK6fqFGn29LIBs+d44LDOukKUWRanK7lwVYzY8VsOdTBkq1D4v3yfaS
SJRzmFMs0I7dq1MYF4l7C3s46PdG9vqzPKN8BpwPoV/xr8V7rPXp3Or0RXtkfxis
r/CBXt21YM8Fxl/Kv7N2AvdlcQ+bWC4Wi8rPZu4vF4IqhW89x2TLhCnQJnFNnm4p
uI7wXTAb5myRJDlpgeo6ZMC4AushKLR83PMPvfHuQOuDnjLJRSx4swhJRwebR6gy
QZ+U2KYA4hPiYJG0RNbeOS/6BwClUrsyOERgYDAJoUMgdOQD3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMT+s7/7uOoKsa3343D57uDkrfZ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll
MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNmVmMTU4NWEtYmNkYi0z
YjNmLTkxMTQtZDIwZTZlZWZiZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli
ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx
MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk
ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZiz6ab+CSe3Kuo9MZVndaidJ4ZibtK4hhe/hXtBdk2LUolaKnz9hUG
N+nu8NjY78sarn4BwM0NutmVZLOA2TkL2aERn5/2l60rzYhiM2/3m7UnJIItXodt
X5jqGSGn0XMNuwKLr7wkMarjrgrSgBgZzkvI9tQjm1YaT8T/IRgyQO+dX4BeJrbc
iB70NGhEx/bASS+1+HaBIqo0m8iBjxAbv7gh8epCMnZR0iOJ46ctnKl6pKfndJ04
oGfO0u7n+2Qzy1iejn9Up91tpkUGGtnrK/lHinSsEmbHApvAeUv/33gKMxa6/HUY
rt8dIQBHy/3raGKorVUx1DnzjCz98Rk=
-----END CERTIFICATE-----