Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2645966a-046e-312f-9547-36a0a25541e2.roa
File:                     2645966a-046e-312f-9547-36a0a25541e2.roa (raw, json)
Hash identifier:          iyEwAoXaFx+oufem98Z2vJsCoaR+x57RCRW6uDdxmb8=
Subject key identifier:   0C:DE:87:91:61:EC:EE:80:96:C1:45:BA:FF:A6:93:8E:42:C4:FE:6B
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858455E1594C3F4A9B93E6B8CFC30
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2645966a-046e-312f-9547-36a0a25541e2.roa
Signing time:             Fri 29 Mar 2024 10:35:33 +0000
ROA not before:           Fri 29 Mar 2024 10:35:33 +0000
ROA not after:            Thu 27 Jun 2024 10:35:33 +0000
asID:                     834
IP address blocks:        204.19.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 10:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:15:94:c3:f4:a9:b9:3e:6b:8c:fc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 29 10:35:33 2024 GMT
            Not After : Jun 27 10:35:33 2024 GMT
        Subject: CN=6b1fe91e-bcf7-4fed-b653-7ec8066309f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:81:fc:8d:d3:7d:3c:bd:4a:49:82:b7:44:
                    cf:b5:4c:9a:cd:02:ee:6b:d6:ce:2d:40:45:0e:cd:
                    77:b3:83:13:10:89:89:15:9e:95:de:87:08:d4:25:
                    47:fa:be:ab:38:15:ab:1b:97:fd:80:d4:26:7c:36:
                    e1:95:af:52:ac:e0:5d:89:4d:b9:1c:04:28:3f:5d:
                    09:53:8e:90:17:45:ab:81:e2:b8:72:78:62:8d:1e:
                    98:ff:d7:77:00:bb:2a:95:34:09:7f:b5:c6:09:27:
                    56:b5:9d:69:a7:3e:55:cf:c1:ab:a8:ec:f3:e6:ab:
                    06:77:ce:16:21:1c:ad:72:e4:02:a5:9e:13:8f:7f:
                    3d:00:59:2a:50:59:04:08:b7:7f:62:e3:23:1f:2c:
                    aa:6d:eb:66:b5:09:38:e9:2f:c0:ff:18:b6:02:b1:
                    63:a5:ae:96:9a:99:cf:f3:e8:e6:69:f8:02:ad:bb:
                    e9:0a:e2:e1:dc:11:64:4b:db:e4:18:40:13:24:3c:
                    0f:8b:72:a3:ca:b9:98:25:dc:54:2b:ff:bb:6f:e4:
                    b2:e7:f6:b9:8e:89:06:de:da:28:93:e3:12:ea:05:
                    fc:b4:fa:ca:5e:3b:9b:0f:4b:13:d0:b3:ae:fc:08:
                    d3:6c:ee:02:cf:67:27:6b:0f:fb:3c:25:0e:93:29:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DE:87:91:61:EC:EE:80:96:C1:45:BA:FF:A6:93:8E:42:C4:FE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2645966a-046e-312f-9547-36a0a25541e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:44:ab:db:3d:e1:11:21:b2:09:ae:b4:a8:b0:c7:e7:50:a8:
         7f:e5:96:03:2e:f4:fe:89:4e:7d:b4:38:73:e7:61:56:82:1d:
         e9:e6:57:35:4c:e7:29:d0:5a:34:1e:72:b0:8b:8f:e2:09:56:
         5e:7e:4e:39:20:d5:5f:47:bd:c1:b4:4d:c7:1d:44:51:83:75:
         26:59:91:d7:c6:c9:c2:9a:77:8b:18:35:5b:52:e5:ab:7b:b6:
         3e:5d:1a:75:63:cf:b1:6a:eb:59:31:87:73:9e:8d:ca:27:9d:
         06:63:72:7b:cc:2b:a1:f3:c3:4d:4e:c4:da:a7:63:44:7f:7b:
         f6:03:86:98:8e:a4:10:4b:38:83:b8:2d:f6:55:14:69:31:27:
         97:b7:ab:30:c5:7f:1a:c6:f6:71:84:f8:55:8d:d2:4d:2b:ac:
         55:65:7d:d4:22:93:27:51:4f:66:f8:ab:64:00:1e:b0:11:73:
         db:cf:5a:7f:ee:e2:79:00:8d:34:ee:db:67:fe:0b:b6:78:6f:
         d3:80:85:62:a1:25:4a:2a:fb:75:d0:5c:cf:7b:9e:5f:1c:a0:
         f3:00:f2:49:d5:3c:02:8f:69:51:b8:56:8b:e3:4d:b3:61:b8:
         cb:fc:11:cd:a2:2b:97:20:fb:4f:8e:c3:75:05:01:f9:81:08:
         3e:de:a2:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeFZTD9Km5PmuM/DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI0MDMyOTEwMzUzM1oXDTI0MDYyNzEwMzUzM1owLzEtMCsGA1UEAxMk
NmIxZmU5MWUtYmNmNy00ZmVkLWI2NTMtN2VjODA2NjMwOWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4OB/I3TfTy9SkmCt0TPtUyazQLua9bOLUBF
Ds13s4MTEImJFZ6V3ocI1CVH+r6rOBWrG5f9gNQmfDbhla9SrOBdiU25HAQoP10J
U46QF0WrgeK4cnhijR6Y/9d3ALsqlTQJf7XGCSdWtZ1ppz5Vz8GrqOzz5qsGd84W
IRytcuQCpZ4Tj389AFkqUFkECLd/YuMjHyyqbetmtQk46S/A/xi2ArFjpa6WmpnP
8+jmafgCrbvpCuLh3BFkS9vkGEATJDwPi3KjyrmYJdxUK/+7b+Sy5/a5jokG3too
k+MS6gX8tPrKXjubD0sT0LOu/AjTbO4Cz2cnaw/7PCUOkymB6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzeh5Fh7O6AlsFFuv+mk45CxP5rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMjY0NTk2NmEtMDQ2ZS0z
MTJmLTk1NDctMzZhMGEyNTU0MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBPvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxEq9s94REhsgmutKiwx+dQqH/llgMu9P6JTn20OHPnYVaCHenmVzVM
5ynQWjQecrCLj+IJVl5+Tjkg1V9HvcG0TccdRFGDdSZZkdfGycKad4sYNVtS5at7
tj5dGnVjz7Fq61kxh3OejconnQZjcnvMK6Hzw01OxNqnY0R/e/YDhpiOpBBLOIO4
LfZVFGkxJ5e3qzDFfxrG9nGE+FWN0k0rrFVlfdQikydRT2b4q2QAHrARc9vPWn/u
4nkAjTTu22f+C7Z4b9OAhWKhJUoq+3XQXM97nl8coPMA8knVPAKPaVG4VovjTbNh
uMv8Ec2iK5cg+0+Ow3UFAfmBCD7eooo=
-----END CERTIFICATE-----