Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/24abbf0a-9f92-3c66-938f-2c4d530df5f5.roa
File:                     24abbf0a-9f92-3c66-938f-2c4d530df5f5.roa (raw, json)
Hash identifier:          xuj8PYMJF9QNS/Hf4FjhMfqFK9i+xMQW60NdY2fWuAk=
Subject key identifier:   A7:A3:CD:16:00:87:17:D8:10:7A:28:37:FF:DA:75:FC:ED:63:72:7B
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A19905788AC108EDBA77BC0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/24abbf0a-9f92-3c66-938f-2c4d530df5f5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:19:90:57:88:ac:10:8e:db:a7:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f7f6bbd3-474a-4b60-964c-6c5de11fbb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:58:91:0d:f3:28:d6:b3:03:02:4e:5e:20:60:
                    00:74:09:1a:67:9d:31:ad:e5:2f:fe:4d:7b:21:3e:
                    32:3f:b9:a5:0a:d9:24:01:f4:17:40:0c:f8:ce:ce:
                    62:cc:9e:57:35:10:d7:7d:7d:a8:87:d6:3e:93:11:
                    b9:32:53:77:c0:98:2a:36:4d:6c:33:3d:55:9a:54:
                    d4:8f:9b:7d:5a:33:f7:91:cd:6f:0b:17:be:4b:04:
                    1d:8b:7c:84:a6:a4:ec:75:c7:32:9c:bd:61:09:31:
                    ad:97:18:6e:7b:bb:d8:33:5b:60:18:6a:58:fb:68:
                    29:4d:47:36:9b:fb:0b:7e:9b:b8:8d:66:da:4e:d8:
                    0a:51:b9:79:ad:cf:86:3d:14:51:a3:ff:7d:91:38:
                    08:b7:4e:96:8d:bd:a1:74:e4:7b:7b:4a:bc:1b:90:
                    9a:6a:f5:e3:59:08:d1:63:b2:64:3e:9d:b8:5f:0b:
                    43:2e:8b:29:2f:c2:fd:ca:39:b7:59:fa:a1:f3:54:
                    82:85:1d:87:5b:da:35:40:9c:de:46:5e:a8:10:ee:
                    b5:00:22:37:cd:fa:f0:da:07:fd:db:24:7b:73:f7:
                    a0:8a:42:45:9c:01:88:b0:56:ef:bd:74:06:cf:37:
                    67:16:2e:8a:46:36:9c:d5:88:a2:ee:dc:45:ed:f5:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A3:CD:16:00:87:17:D8:10:7A:28:37:FF:DA:75:FC:ED:63:72:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/24abbf0a-9f92-3c66-938f-2c4d530df5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:86:93:55:ef:81:fe:88:8e:fe:e6:14:12:8e:36:fe:b1:13:
         8d:74:af:f2:51:ea:3e:4f:2f:bd:1b:f6:37:fc:87:ee:c7:42:
         07:11:cf:9c:7f:1f:d6:e3:a1:b1:2f:0b:a7:e7:b2:e5:61:3a:
         ea:fa:2b:ff:39:c7:65:99:67:7f:d3:24:ee:eb:98:4d:e7:6e:
         b6:12:cb:1e:c6:9d:da:e9:55:c3:d2:ae:7a:17:5c:7f:d3:f4:
         62:5c:5f:d5:e0:81:eb:e5:04:8e:21:57:fb:21:1d:41:55:d2:
         63:63:ee:db:cc:35:3a:e4:d2:17:0b:64:1e:1d:a3:6e:9a:ca:
         d7:b2:cc:84:ec:46:b4:85:5c:f6:41:73:5b:79:b9:97:ae:bc:
         b0:b1:fc:14:8c:80:00:f8:af:ee:9a:41:5c:fc:97:af:5e:96:
         3e:f0:34:30:ae:ba:b6:74:2f:6c:74:0a:2b:9d:3f:9a:c3:62:
         2e:37:7d:8c:f8:70:c7:31:2b:23:5c:59:0b:40:b2:57:8d:53:
         0f:fe:e4:33:a6:cf:cb:0e:f6:a8:92:e7:76:59:af:5d:6e:c3:
         a5:83:4e:dc:09:6a:7b:50:4d:53:33:16:11:74:a4:68:b7:91:
         50:bc:e3:5e:4a:c5:eb:8a:d1:04:a1:d6:22:f0:ea:a7:aa:9c:
         ca:07:78:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGZBXiKwQjtune8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjdmNmJiZDMtNDc0YS00YjYwLTk2NGMtNmM1ZGUxMWZiYjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1iRDfMo1rMDAk5eIGAAdAkaZ50xreUv/k17
IT4yP7mlCtkkAfQXQAz4zs5izJ5XNRDXfX2oh9Y+kxG5MlN3wJgqNk1sMz1VmlTU
j5t9WjP3kc1vCxe+SwQdi3yEpqTsdccynL1hCTGtlxhue7vYM1tgGGpY+2gpTUc2
m/sLfpu4jWbaTtgKUbl5rc+GPRRRo/99kTgIt06Wjb2hdOR7e0q8G5CaavXjWQjR
Y7JkPp24XwtDLospL8L9yjm3Wfqh81SChR2HW9o1QJzeRl6oEO61ACI3zfrw2gf9
2yR7c/egikJFnAGIsFbvvXQGzzdnFi6KRjac1Yii7txF7fXBmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKejzRYAhxfYEHooN//adfztY3J7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMjRhYmJmMGEtOWY5Mi0z
YzY2LTkzOGYtMmM0ZDUzMGRmNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaO2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKGk1Xvgf6Ijv7mFBKONv6xE410r/JR6j5PL70b9jf8h+7HQgcRz5x/
H9bjobEvC6fnsuVhOur6K/85x2WZZ3/TJO7rmE3nbrYSyx7GndrpVcPSrnoXXH/T
9GJcX9XggevlBI4hV/shHUFV0mNj7tvMNTrk0hcLZB4do26ayteyzITsRrSFXPZB
c1t5uZeuvLCx/BSMgAD4r+6aQVz8l69elj7wNDCuurZ0L2x0CiudP5rDYi43fYz4
cMcxKyNcWQtAsleNUw/+5DOmz8sO9qiS53ZZr11uw6WDTtwJantQTVMzFhF0pGi3
kVC8415KxeuK0QSh1iLw6qeqnMoHeM4=
-----END CERTIFICATE-----