Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/fd91454a-d30c-3aeb-b0fb-9f1a87ae78fb.roa
File:                     fd91454a-d30c-3aeb-b0fb-9f1a87ae78fb.roa (raw, json)
Hash identifier:          ij5nOsehdOmusYnthVwH/MBR0di1T7n9DgnaB7uVTh4=
Subject key identifier:   1D:49:11:F5:75:30:FD:BA:BC:41:1A:CD:79:6A:04:0E:92:15:67:F4
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583B400D625AF08A801546FDFE80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/fd91454a-d30c-3aeb-b0fb-9f1a87ae78fb.roa
Signing time:             Sun 12 Sep 2021 04:00:00 +0000
ROA not before:           Sun 12 Sep 2021 04:00:00 +0000
ROA not after:            Fri 13 Sep 2030 04:00:00 +0000
asID:                     1239
IP address blocks:        216.24.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Mar 2022 18:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:40:0d:62:5a:f0:8a:80:15:46:fd:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 12 04:00:00 2021 GMT
            Not After : Sep 13 04:00:00 2030 GMT
        Subject: CN=a5bcf436-0c15-46af-bae4-00c30fbaf59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:68:46:72:d1:84:e9:fd:8d:fa:26:cd:9c:
                    3f:be:bd:c4:45:a3:2c:32:c7:69:a5:9a:a6:18:95:
                    9f:c2:4a:bd:ed:21:29:95:44:b7:56:12:23:b4:44:
                    2e:45:9c:26:bc:4c:b6:f8:2b:f1:1a:06:24:cd:c5:
                    f2:76:0a:97:07:03:dc:6c:7e:04:01:c6:87:b1:01:
                    b5:4a:f5:3f:9b:e3:27:3d:50:c1:21:f7:f8:cf:6b:
                    06:63:4a:24:4c:8b:d5:b8:c4:4e:95:67:15:cd:8e:
                    bf:8a:c7:af:27:92:6c:1e:28:74:da:da:f6:45:7c:
                    8e:8a:3a:70:9d:7a:10:a5:ee:25:55:07:3d:66:38:
                    26:ce:62:0b:7e:ae:21:04:dd:ab:c8:5b:eb:75:49:
                    b6:94:b7:bd:5e:e5:12:5d:8e:10:c7:67:fb:42:8f:
                    86:39:73:42:7a:ff:6c:3a:03:23:57:7f:cf:cd:85:
                    8a:60:a6:94:52:89:ba:a3:b0:aa:60:1b:54:33:e8:
                    14:0f:f9:b6:94:2d:83:5a:70:80:f5:b4:5e:59:0e:
                    e7:6a:17:86:77:6f:f7:24:5b:f2:d6:75:cf:df:c1:
                    93:e3:77:86:b9:a6:14:51:7b:ae:74:ed:10:54:c3:
                    64:0c:b6:58:20:2a:a3:b6:1b:16:3e:f0:68:bb:32:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:49:11:F5:75:30:FD:BA:BC:41:1A:CD:79:6A:04:0E:92:15:67:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/fd91454a-d30c-3aeb-b0fb-9f1a87ae78fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:11:fa:d3:56:54:4e:ea:3b:44:15:93:f9:61:7d:10:96:
         53:d3:f3:2e:3c:e8:e7:ad:5b:8c:c1:10:37:17:a2:b9:91:7a:
         53:aa:3f:b6:60:d9:81:24:a0:b0:1a:53:8a:a0:62:4d:ff:7c:
         84:8e:8a:73:9d:60:a9:b6:41:d1:95:29:1d:cf:f0:f0:5f:d5:
         fe:46:3d:2d:e4:b4:7f:cc:12:93:ca:7c:f0:b9:3a:d4:fd:39:
         00:88:07:31:af:e6:4c:0f:92:fc:b5:e2:71:24:8b:65:d5:c1:
         57:6e:be:9a:84:02:6f:8f:c1:bf:1b:7c:67:c0:e0:76:d9:82:
         e5:b9:09:17:d1:3a:57:7a:52:fb:fb:7c:65:51:83:c1:95:07:
         32:9f:91:e2:95:18:b2:64:bb:2a:54:fa:60:12:f7:01:d4:7c:
         5f:59:b1:1e:ec:ee:d3:da:e2:36:1c:b3:0f:c2:66:79:75:82:
         4a:a1:ef:89:fc:ae:d1:9d:cb:04:c5:26:ef:59:00:36:85:8e:
         29:1a:e4:44:46:17:7e:af:c3:75:c8:93:6e:d8:8d:5e:db:27:
         b0:b4:85:e7:d6:b6:4f:be:9b:c1:67:84:20:05:ef:32:35:14:
         18:64:1f:d7:c6:5e:78:3e:10:45:c5:7c:fa:d2:91:38:19:53:
         e1:4a:55:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDtADWJa8IqAFUb9/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIxMDkxMjA0MDAwMFoXDTMwMDkxMzA0MDAwMFowLzEtMCsGA1UEAxMk
YTViY2Y0MzYtMGMxNS00NmFmLWJhZTQtMDBjMzBmYmFmNTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnBoRnLRhOn9jfomzZw/vr3ERaMsMsdppZqm
GJWfwkq97SEplUS3VhIjtEQuRZwmvEy2+CvxGgYkzcXydgqXBwPcbH4EAcaHsQG1
SvU/m+MnPVDBIff4z2sGY0okTIvVuMROlWcVzY6/isevJ5JsHih02tr2RXyOijpw
nXoQpe4lVQc9ZjgmzmILfq4hBN2ryFvrdUm2lLe9XuUSXY4Qx2f7Qo+GOXNCev9s
OgMjV3/PzYWKYKaUUom6o7CqYBtUM+gUD/m2lC2DWnCA9bReWQ7naheGd2/3JFvy
1nXP38GT43eGuaYUUXuudO0QVMNkDLZYICqjthsWPvBouzIE3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1JEfV1MP26vEEazXlqBA6SFWf0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZmQ5MTQ1NGEtZDMwYy0z
YWViLWIwZmItOWYxYTg3YWU3OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfKEfrTVlRO6jtEFZP5YX0QllPT8y486OetW4zBEDcXormRelOqP7Zg
2YEkoLAaU4qgYk3/fISOinOdYKm2QdGVKR3P8PBf1f5GPS3ktH/MEpPKfPC5OtT9
OQCIBzGv5kwPkvy14nEki2XVwVduvpqEAm+Pwb8bfGfA4HbZguW5CRfROld6Uvv7
fGVRg8GVBzKfkeKVGLJkuypU+mAS9wHUfF9ZsR7s7tPa4jYcsw/CZnl1gkqh74n8
rtGdywTFJu9ZADaFjika5ERGF36vw3XIk27YjV7bJ7C0hefWtk++m8FnhCAF7zI1
FBhkH9fGXng+EEXFfPrSkTgZU+FKVdQ=
-----END CERTIFICATE-----