Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/518b7fd4-7d3a-3022-bf7f-329066f59caf.roa
File:                     518b7fd4-7d3a-3022-bf7f-329066f59caf.roa (raw, json)
Hash identifier:          Pu6yeKbSFunhWeGwnCdmpOUhNTbwyckWosQrfmSyo9Q=
Subject key identifier:   A7:23:66:86:6E:F2:03:2D:B9:7D:24:7B:74:44:6F:C5:9C:E4:CD:1C
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848F4F69EF55D916F82261C8200
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/518b7fd4-7d3a-3022-bf7f-329066f59caf.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     54548
IP address blocks:        198.251.67.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Wed 05 Mar 2025 11:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9e:f5:5d:91:6f:82:26:1c:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a1b422d4-c1a9-4acd-acfc-8157a44e3dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:e4:58:0a:4a:6d:99:42:ce:2a:83:8f:4e:
                    fd:9f:cf:54:18:12:78:50:e0:16:b0:a8:c5:e3:dc:
                    95:58:33:7b:d9:7b:4d:da:4d:3b:e0:fb:99:97:b7:
                    8a:ae:93:cf:fb:86:6e:74:45:99:c4:86:73:b4:b9:
                    b5:9d:7e:0f:bd:84:c2:d8:fe:ad:ff:0a:4a:a1:c4:
                    13:ef:4a:7b:f9:1c:61:b7:7f:c5:41:c3:3c:94:f9:
                    de:c2:a2:85:b4:27:b2:95:05:0b:89:15:a2:77:79:
                    3b:5d:7d:0d:31:42:d3:ec:e5:9a:a0:f8:da:d1:17:
                    75:f5:93:98:d8:e0:08:96:05:02:ff:67:f9:19:4f:
                    7d:9d:ff:e3:e3:64:25:17:16:19:7d:bc:18:ef:11:
                    68:34:2c:69:17:11:d1:c4:51:6c:d1:b9:3f:61:3e:
                    ef:11:dc:6e:73:c4:4a:71:55:38:7e:bf:76:5f:76:
                    84:12:1b:12:61:8c:bc:47:fd:d3:86:ba:1f:d1:eb:
                    40:05:49:ec:c4:57:75:e9:9e:49:c1:76:dc:d3:5f:
                    3c:b1:db:89:58:c1:1b:e5:7e:75:06:7f:fb:01:a8:
                    b9:7d:da:e2:d3:2e:28:73:96:fb:97:05:66:02:2a:
                    d4:a7:f7:49:a9:10:df:a7:d0:bd:86:d3:75:fe:41:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:23:66:86:6E:F2:03:2D:B9:7D:24:7B:74:44:6F:C5:9C:E4:CD:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/518b7fd4-7d3a-3022-bf7f-329066f59caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:75:52:dc:60:a0:23:f1:eb:5e:10:44:78:9b:3b:28:05:
         73:bf:1b:4c:00:c5:43:a6:ff:05:73:bd:ed:18:ac:a0:dd:77:
         04:f1:7a:8b:94:f2:25:39:63:ba:0b:3b:fb:11:37:81:77:62:
         68:4f:94:a5:25:59:0b:84:11:fa:2e:79:7a:33:d4:88:a2:73:
         85:e5:75:24:4b:7f:d2:27:3b:a9:dc:35:92:6f:f8:e7:8b:61:
         b7:0c:49:08:39:30:ff:66:b0:3c:05:e1:13:56:1c:77:c0:bf:
         c8:ed:6d:ab:44:94:2b:21:67:bd:15:a3:a3:22:2b:dd:8f:55:
         ff:37:2d:28:62:7a:d1:65:72:eb:fd:1b:e8:31:cd:01:92:0e:
         ae:94:9f:f3:36:5e:72:18:a9:bc:56:a5:74:3a:cb:60:61:63:
         ad:7a:2e:01:59:c4:4f:6a:8b:62:ad:51:78:ec:86:be:95:55:
         1a:7a:f1:80:06:0c:67:c8:7d:76:ad:3e:8c:3a:30:ea:a3:64:
         17:f4:2a:f6:d1:84:12:21:8d:dd:9c:4e:e1:89:f5:d5:61:d5:
         e5:d9:4c:f8:ac:5d:0a:db:69:89:50:01:b7:12:49:66:b0:92:
         9e:7c:7c:91:dd:cd:9d:f0:df:4f:c8:e0:25:98:48:d5:1a:3f:
         ee:48:78:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09p71XZFvgiYcggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YTFiNDIyZDQtYzFhOS00YWNkLWFjZmMtODE1N2E0NGUzZGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy3kWApKbZlCziqDj079n89UGBJ4UOAWsKjF
49yVWDN72XtN2k074PuZl7eKrpPP+4ZudEWZxIZztLm1nX4PvYTC2P6t/wpKocQT
70p7+Rxht3/FQcM8lPnewqKFtCeylQULiRWid3k7XX0NMULT7OWaoPja0Rd19ZOY
2OAIlgUC/2f5GU99nf/j42QlFxYZfbwY7xFoNCxpFxHRxFFs0bk/YT7vEdxuc8RK
cVU4fr92X3aEEhsSYYy8R/3Throf0etABUnsxFd16Z5JwXbc0188sduJWMEb5X51
Bn/7Aai5fdri0y4oc5b7lwVmAirUp/dJqRDfp9C9htN1/kGHfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKcjZoZu8gMtuX0ke3REb8Wc5M0cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvNTE4YjdmZDQtN2QzYS0z
MDIyLWJmN2YtMzI5MDY2ZjU5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvtDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9MdVLcYKAj8eteEER4mzsoBXO/G0wAxUOm/wVzve0YrKDddwTxeouU
8iU5Y7oLO/sRN4F3YmhPlKUlWQuEEfoueXoz1Iiic4XldSRLf9InO6ncNZJv+OeL
YbcMSQg5MP9msDwF4RNWHHfAv8jtbatElCshZ70Vo6MiK92PVf83LShietFlcuv9
G+gxzQGSDq6Un/M2XnIYqbxWpXQ6y2BhY616LgFZxE9qi2KtUXjshr6VVRp68YAG
DGfIfXatPow6MOqjZBf0KvbRhBIhjd2cTuGJ9dVh1eXZTPisXQrbaYlQAbcSSWaw
kp58fJHdzZ3w30/I4CWYSNUaP+5IeI0=
-----END CERTIFICATE-----