Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/12e39ee1-4669-3d8e-b6c0-7398b49ef522.roa
File:                     12e39ee1-4669-3d8e-b6c0-7398b49ef522.roa (raw, json)
Hash identifier:          zi6psK4md4Bc7Ge8v4n77SojWmpRsqMvu6AZgUKaPog=
Subject key identifier:   ED:F4:39:D5:BE:8B:4C:BA:CF:DB:41:BD:8B:14:DF:3F:89:60:9D:56
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F43285847B101544A3E1B5065B7E6E100
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/12e39ee1-4669-3d8e-b6c0-7398b49ef522.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        74.117.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 18:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:54:4a:3e:1b:50:65:b7:e6:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=8d68fdca-e713-474b-97d5-3270bad5bb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:0f:b4:e7:33:10:fb:d7:e6:9b:f3:86:1d:
                    52:2d:2f:1b:49:f2:91:3d:df:a5:1d:6c:7a:ae:a9:
                    46:18:67:4c:f5:7b:f5:7b:44:6f:3f:67:5d:26:d4:
                    00:e0:96:1a:40:d7:1c:87:73:2e:08:81:17:aa:13:
                    0f:be:14:99:57:33:45:b9:81:b1:01:05:39:07:40:
                    e2:00:30:93:7b:55:a9:15:f2:fd:0b:c0:d1:79:4a:
                    7e:1c:52:24:0c:a5:73:86:c8:d5:9b:07:45:4a:65:
                    82:66:ce:08:bf:31:14:06:5c:90:50:de:e6:aa:4d:
                    55:9a:d2:3c:a1:d5:cb:3b:62:66:c5:77:70:54:ee:
                    fe:d2:d0:79:ee:7f:0b:c5:52:4a:34:d0:13:d8:57:
                    2a:c3:f1:5f:4d:f6:3d:1c:a8:02:32:7a:a4:b4:75:
                    6b:52:90:4b:02:52:4a:89:64:89:58:28:a0:d0:95:
                    b3:4b:c1:57:74:ec:9c:34:87:51:e7:a1:ab:d2:97:
                    9e:64:98:9a:e4:0a:19:0c:0a:a8:35:9f:8c:93:d6:
                    1d:f2:26:7e:e8:d4:d1:70:12:eb:e4:e9:30:4e:e3:
                    90:c2:12:90:f5:43:8a:18:e3:17:43:fd:c1:f0:07:
                    45:a1:8c:ed:ca:58:67:d7:ed:79:a2:66:db:df:e3:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F4:39:D5:BE:8B:4C:BA:CF:DB:41:BD:8B:14:DF:3F:89:60:9D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/12e39ee1-4669-3d8e-b6c0-7398b49ef522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f5:50:5c:90:ba:dd:0a:f8:a5:4b:41:85:f1:43:18:9c:df:
         04:fa:a8:f0:3b:2e:3f:9b:f2:97:cf:87:43:37:3e:93:a1:53:
         60:a6:e3:14:be:c2:74:7b:c9:78:54:a1:7f:0a:90:ce:ab:d5:
         49:1c:37:71:dd:b4:9a:37:42:6b:59:22:d9:af:af:e4:cd:b7:
         6b:2e:f9:56:7a:e2:c7:2b:b7:f6:da:7d:6a:97:e5:ef:76:57:
         b1:3a:ac:e8:94:31:63:3a:66:29:ec:2a:cc:71:ae:fd:6e:ed:
         ad:d0:3d:28:42:c9:bd:fd:0c:8e:66:69:a7:3b:67:92:57:3e:
         9a:95:07:3b:8f:22:8e:35:ff:41:4f:fe:d7:b6:10:b4:d4:78:
         84:b9:3c:8b:0c:1d:e0:f3:e5:e1:26:7c:5a:76:86:e8:b4:7a:
         bf:a1:38:cd:83:66:66:ea:53:c9:98:36:10:0f:da:72:d1:84:
         ab:12:44:1b:3a:83:e3:ba:0e:67:98:ae:74:a3:2e:88:66:e2:
         4b:04:c8:38:d1:4c:ec:28:50:85:b7:dd:ae:10:79:87:9a:c7:
         15:49:aa:8f:d2:9e:f7:fd:34:e8:5c:53:63:9c:1c:d8:97:d4:
         42:75:de:c2:85:a4:0b:99:63:c9:a1:09:e4:d7:06:5c:16:b4:
         ec:ba:0a:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAVRKPhtQZbfm4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzUxODhlMjAtMTI5Ny00YjYxLWE0OTQtMWNhMDAzNjc3
N2YyMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
OGQ2OGZkY2EtZTcxMy00NzRiLTk3ZDUtMzI3MGJhZDViYjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWUPtOczEPvX5pvzhh1SLS8bSfKRPd+lHWx6
rqlGGGdM9Xv1e0RvP2ddJtQA4JYaQNcch3MuCIEXqhMPvhSZVzNFuYGxAQU5B0Di
ADCTe1WpFfL9C8DReUp+HFIkDKVzhsjVmwdFSmWCZs4IvzEUBlyQUN7mqk1VmtI8
odXLO2JmxXdwVO7+0tB57n8LxVJKNNAT2Fcqw/FfTfY9HKgCMnqktHVrUpBLAlJK
iWSJWCig0JWzS8FXdOycNIdR56Gr0peeZJia5AoZDAqoNZ+Mk9Yd8iZ+6NTRcBLr
5OkwTuOQwhKQ9UOKGOMXQ/3B8AdFoYztylhn1+15ombb3+MEXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO30OdW+i0y6z9tBvYsU3z+JYJ1WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4
OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2EwMDM2Nzc3ZjIvMTJlMzllZTEtNDY2OS0z
ZDhlLWI2YzAtNzM5OGI0OWVmNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzUxODhlMjAtMTI5Ny00YjYxLWE0
OTQtMWNhMDAzNjc3N2YyL2M1MTg4ZTIwLTEyOTctNGI2MS1hNDk0LTFjYTAwMzY3
NzdmMi5jcmwwHwYDVR0jBBgwFoAUuYyjHfkVx9gVEusrJXXT5sRul7YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2Ew
MDM2Nzc3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnUTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEL1UFyQut0K+KVLQYXxQxic3wT6qPA7Lj+b8pfPh0M3PpOhU2Cm4xS+
wnR7yXhUoX8KkM6r1UkcN3HdtJo3QmtZItmvr+TNt2su+VZ64scrt/bafWqX5e92
V7E6rOiUMWM6ZinsKsxxrv1u7a3QPShCyb39DI5maac7Z5JXPpqVBzuPIo41/0FP
/te2ELTUeIS5PIsMHeDz5eEmfFp2hui0er+hOM2DZmbqU8mYNhAP2nLRhKsSRBs6
g+O6DmeYrnSjLohm4ksEyDjRTOwoUIW33a4QeYeaxxVJqo/Snvf9NOhcU2OcHNiX
1EJ13sKFpAuZY8mhCeTXBlwWtOy6ClE=
-----END CERTIFICATE-----