Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b345d99a-515b-30ad-b3ea-7dd999cdc2ec.roa
File:                     b345d99a-515b-30ad-b3ea-7dd999cdc2ec.roa (raw, json)
Hash identifier:          iVV2Vx7kQLD071vaAdrJRm7gmrQVijNYcPo4Z4/TBG8=
Subject key identifier:   3D:FB:F4:2D:01:7B:8C:3A:E1:67:81:48:4C:CB:42:D8:B7:EE:46:16
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309EEF9BADE2E654D60848B80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b345d99a-515b-30ad-b3ea-7dd999cdc2ec.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:f9:ba:de:2e:65:4d:60:84:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d3df2ab5-5bf0-4bb4-9eac-70cce5996a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:5c:78:4f:d7:1f:27:04:d8:f8:d6:d8:db:
                    4d:02:75:85:8c:72:1c:cc:4f:b6:ee:98:c3:5a:8e:
                    99:86:e6:30:8d:08:57:b7:7f:21:cc:76:2d:f6:4c:
                    7c:39:50:71:83:85:3c:ee:7a:2e:7e:76:a6:11:34:
                    1f:c4:0b:1b:7d:8a:ec:0e:9f:3a:75:f8:8f:af:1a:
                    17:58:47:42:f2:00:22:c3:6f:12:06:43:94:3b:c3:
                    ae:fe:b0:af:c5:ab:cb:c2:36:0d:8d:7f:8c:9d:04:
                    38:27:8d:e0:6f:09:a1:42:e7:8f:45:ee:07:d5:9d:
                    53:f1:d0:02:a1:01:3a:19:3a:f4:d2:22:c2:d7:db:
                    ed:bb:1b:84:03:4c:cd:c5:40:98:44:bd:2d:f1:60:
                    0e:2d:0b:67:d3:23:f1:07:d7:9b:0e:17:f5:1c:a3:
                    f0:89:7e:2f:49:cd:d4:d8:14:97:61:60:16:e2:93:
                    ab:2f:19:7f:1d:85:54:48:f0:b3:5f:3b:b2:36:07:
                    e4:79:aa:d6:cd:f0:3e:ab:23:20:91:d7:be:c3:bd:
                    a8:2d:e5:22:99:f3:5e:6c:83:ab:6a:e6:23:36:6a:
                    8c:c3:10:f4:80:95:68:5e:f6:2e:90:67:8d:2e:97:
                    27:3a:1f:0f:eb:c5:93:58:b4:00:c5:e7:dd:1e:df:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FB:F4:2D:01:7B:8C:3A:E1:67:81:48:4C:CB:42:D8:B7:EE:46:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b345d99a-515b-30ad-b3ea-7dd999cdc2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:95:6d:a7:4a:ee:9b:d1:18:1a:01:9b:02:e7:6d:30:76:33:
         75:c6:10:fc:64:2c:10:46:e3:7c:3e:27:9d:eb:e6:68:55:2f:
         f2:3b:40:5a:77:e8:bb:fd:2a:e8:da:64:94:54:0c:a0:cb:b9:
         cf:3f:8b:4b:d0:8a:a1:b5:35:54:46:18:97:8c:9d:3e:4f:25:
         a0:50:f4:36:32:0b:7d:e5:71:4a:04:6b:6d:37:17:52:b1:6a:
         46:9f:07:65:1d:32:91:5c:80:8d:f6:a2:aa:de:c9:23:15:47:
         6a:e8:d5:76:e5:c6:76:09:57:20:42:d3:c8:d9:d0:f2:22:8c:
         6f:76:8b:ae:ef:33:fe:68:90:6c:6d:69:c5:a4:ba:04:ee:f8:
         ed:2f:d0:91:47:50:de:46:01:c1:d4:58:19:d2:e7:16:75:be:
         c3:bc:17:18:5a:78:94:38:2a:a5:33:14:47:55:7e:0d:d1:34:
         e4:05:66:d9:b0:71:63:d4:f6:06:6d:b6:3b:c4:9d:84:d0:a7:
         69:8b:f3:24:5d:3a:51:09:ed:bc:b1:0f:c0:84:a3:8b:b9:ef:
         a0:6d:21:b9:65:5a:61:09:97:58:d8:9b:e0:99:06:78:19:71:
         12:3d:e1:2f:b7:7f:b5:7e:27:8d:9e:43:b8:7c:31:09:4b:ab:
         16:37:5e:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7vm63i5lTWCEi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDNkZjJhYjUtNWJmMC00YmI0LTllYWMtNzBjY2U1OTk2YTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/1ceE/XHycE2PjW2NtNAnWFjHIczE+27pjD
Wo6ZhuYwjQhXt38hzHYt9kx8OVBxg4U87noufnamETQfxAsbfYrsDp86dfiPrxoX
WEdC8gAiw28SBkOUO8Ou/rCvxavLwjYNjX+MnQQ4J43gbwmhQuePRe4H1Z1T8dAC
oQE6GTr00iLC19vtuxuEA0zNxUCYRL0t8WAOLQtn0yPxB9ebDhf1HKPwiX4vSc3U
2BSXYWAW4pOrLxl/HYVUSPCzXzuyNgfkearWzfA+qyMgkde+w72oLeUimfNebIOr
auYjNmqMwxD0gJVoXvYukGeNLpcnOh8P68WTWLQAxefdHt9E2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD379C0Be4w64WeBSEzLQti37kYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYjM0NWQ5OWEtNTE1Yi0z
MGFkLWIzZWEtN2RkOTk5Y2RjMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0HXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICVbadK7pvRGBoBmwLnbTB2M3XGEPxkLBBG43w+J53r5mhVL/I7QFp3
6Lv9KujaZJRUDKDLuc8/i0vQiqG1NVRGGJeMnT5PJaBQ9DYyC33lcUoEa203F1Kx
akafB2UdMpFcgI32oqreySMVR2ro1XblxnYJVyBC08jZ0PIijG92i67vM/5okGxt
acWkugTu+O0v0JFHUN5GAcHUWBnS5xZ1vsO8FxhaeJQ4KqUzFEdVfg3RNOQFZtmw
cWPU9gZttjvEnYTQp2mL8yRdOlEJ7byxD8CEo4u576BtIbllWmEJl1jYm+CZBngZ
cRI94S+3f7V+J42eQ7h8MQlLqxY3XmY=
-----END CERTIFICATE-----