Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/95a8a16f-df2d-333d-8bb2-a90a497d7a8f.roa
File:                     95a8a16f-df2d-333d-8bb2-a90a497d7a8f.roa (raw, json)
Hash identifier:          +h84wxz+IEMwZv5KeFqBiyPUgiafOHXVnvrXDsdk87M=
Subject key identifier:   63:8F:E3:B1:78:A6:32:23:18:E6:7B:6A:DE:23:5B:FB:A8:12:3C:1F
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F43285841E6E810BE54BB1B5525729440
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/95a8a16f-df2d-333d-8bb2-a90a497d7a8f.roa
Signing time:             Tue 16 May 2023 15:41:50 +0000
ROA not before:           Tue 16 May 2023 15:41:50 +0000
ROA not after:            Mon 14 Aug 2023 15:41:50 +0000
asID:                     212448
IP address blocks:        172.96.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e6:e8:10:be:54:bb:1b:55:25:72:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: May 16 15:41:50 2023 GMT
            Not After : Aug 14 15:41:50 2023 GMT
        Subject: CN=21c25bf0-c1b7-4950-aa02-1e6dd1aeb20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:8e:46:fd:d6:e0:57:4f:1f:54:41:5b:b4:
                    be:18:ab:01:ea:a7:e6:86:18:1d:49:86:58:c1:23:
                    64:5c:46:3f:07:40:df:a2:31:0f:ae:6e:fd:e6:fe:
                    c7:4e:97:11:fc:17:57:27:47:7d:75:42:09:00:11:
                    25:c0:ec:ca:23:e4:1c:e5:13:5c:2c:2d:05:45:94:
                    a4:c1:35:f2:2e:33:c6:a4:b0:4e:48:8a:ce:d7:d0:
                    af:f5:ee:99:b7:8b:c6:53:b7:e7:6b:70:3f:f9:6d:
                    fa:77:a6:8d:cb:6c:eb:fe:e8:03:f6:8a:60:a8:54:
                    b9:b5:cc:36:72:39:33:e1:8a:3b:a4:8b:2c:bf:f6:
                    49:be:05:4c:4e:50:3e:fa:cc:d4:3e:aa:b7:0d:8e:
                    5e:20:bc:6f:e3:6a:39:9c:2a:09:87:2e:3c:33:70:
                    a3:52:47:2f:58:c8:b2:10:e5:44:97:3f:e7:2a:76:
                    40:52:0c:ce:b0:24:d3:92:0a:52:3a:1d:1b:31:5d:
                    c8:e9:0c:1e:b1:03:c5:d5:7e:6d:13:2a:0e:e5:89:
                    8f:88:31:30:93:d6:0a:21:40:a6:a1:39:5b:07:02:
                    a9:aa:a7:83:32:b2:63:f9:fc:09:22:59:9c:3c:4b:
                    15:51:f2:27:b9:05:16:86:63:44:ba:c6:38:85:ec:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:E3:B1:78:A6:32:23:18:E6:7B:6A:DE:23:5B:FB:A8:12:3C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/95a8a16f-df2d-333d-8bb2-a90a497d7a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:51:74:06:66:a0:18:fe:04:93:27:ee:23:af:22:32:48:15:
         68:b1:05:03:6a:87:e4:e4:ac:c5:fb:12:45:61:6b:78:bd:ad:
         0a:ab:40:ca:f9:c6:7a:ea:59:43:2a:74:0f:b3:6c:34:2f:14:
         ed:c5:13:bd:91:ba:80:d5:1d:0e:6a:95:59:c8:00:d2:a8:a1:
         ff:24:0c:95:8d:b9:25:1e:59:6d:55:f7:7a:e4:a9:41:1a:70:
         d0:fe:5b:2c:1b:09:68:89:a5:4f:18:73:08:e7:da:7f:6d:01:
         3a:2c:13:62:a3:95:d1:37:a5:e8:e3:49:46:c9:f8:c5:be:99:
         76:38:6c:71:12:7f:a9:5a:ff:2e:a7:e5:a3:65:9d:02:29:23:
         b7:e0:12:3b:f1:13:3f:d4:ea:45:5c:9f:5c:4b:da:62:c0:68:
         d2:6f:6b:fe:a1:ed:81:1a:ae:95:d1:08:bf:e7:b5:38:06:72:
         04:64:70:99:6d:34:6f:d3:53:d3:52:7d:64:6d:53:44:34:55:
         dc:ff:e5:81:a1:5b:8f:09:0f:c1:0b:d9:35:57:82:87:bd:f1:
         59:06:3d:1a:ae:8e:db:6a:ac:02:43:94:2f:b0:e5:72:0a:88:
         78:b2:c3:ff:aa:aa:b9:ce:e8:66:0a:a2:d5:e5:ab:4f:e7:82:
         8f:f8:4b:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHm6BC+VLsbVSVylEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTIzMDUxNjE1NDE1MFoXDTIzMDgxNDE1NDE1MFowLzEtMCsGA1UEAxMk
MjFjMjViZjAtYzFiNy00OTUwLWFhMDItMWU2ZGQxYWViMjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUGORv3W4FdPH1RBW7S+GKsB6qfmhhgdSYZY
wSNkXEY/B0DfojEPrm795v7HTpcR/BdXJ0d9dUIJABElwOzKI+Qc5RNcLC0FRZSk
wTXyLjPGpLBOSIrO19Cv9e6Zt4vGU7fna3A/+W36d6aNy2zr/ugD9opgqFS5tcw2
cjkz4Yo7pIssv/ZJvgVMTlA++szUPqq3DY5eILxv42o5nCoJhy48M3CjUkcvWMiy
EOVElz/nKnZAUgzOsCTTkgpSOh0bMV3I6QwesQPF1X5tEyoO5YmPiDEwk9YKIUCm
oTlbBwKpqqeDMrJj+fwJIlmcPEsVUfInuQUWhmNEusY4hex7bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOP47F4pjIjGOZ7at4jW/uoEjwfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvOTVhOGExNmYtZGYyZC0z
MzNkLThiYjItYTkwYTQ5N2Q3YThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMVRdAZmoBj+BJMn7iOvIjJIFWixBQNqh+TkrMX7EkVha3i9rQqrQMr5
xnrqWUMqdA+zbDQvFO3FE72RuoDVHQ5qlVnIANKoof8kDJWNuSUeWW1V93rkqUEa
cND+WywbCWiJpU8Ycwjn2n9tATosE2KjldE3pejjSUbJ+MW+mXY4bHESf6la/y6n
5aNlnQIpI7fgEjvxEz/U6kVcn1xL2mLAaNJva/6h7YEarpXRCL/ntTgGcgRkcJlt
NG/TU9NSfWRtU0Q0Vdz/5YGhW48JD8EL2TVXgoe98VkGPRqujttqrAJDlC+w5XIK
iHiyw/+qqrnO6GYKotXlq0/ngo/4S/0=
-----END CERTIFICATE-----