Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a785dc76-5cdc-37b6-ae8e-526a253aeb5b.roa
File:                     a785dc76-5cdc-37b6-ae8e-526a253aeb5b.roa (raw, json)
Hash identifier:          4BQ5ZRFmelnJRMewfBzgCQUpVTWmxhSAgMjku7wO3JA=
Subject key identifier:   71:98:B6:CB:5E:0F:4F:9A:20:DE:11:BB:00:EB:59:6F:2F:66:61:84
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584730E4EE608D2BDF36AF01E400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a785dc76-5cdc-37b6-ae8e-526a253aeb5b.roa
Signing time:             Thu 12 Sep 2024 15:40:01 +0000
ROA not before:           Thu 12 Sep 2024 15:40:01 +0000
ROA not after:            Wed 11 Dec 2024 16:40:01 +0000
asID:                     204770
IP address blocks:        184.174.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:e4:ee:60:8d:2b:df:36:af:01:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 12 15:40:01 2024 GMT
            Not After : Dec 11 16:40:01 2024 GMT
        Subject: CN=f47109b4-fb7c-444a-8007-cc6748b37e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:71:f4:59:63:0a:41:d3:0c:95:7f:b7:1b:
                    f2:67:77:9c:5c:77:78:6a:f0:70:82:01:3b:02:61:
                    8d:f5:21:de:14:d4:78:ae:8b:15:0c:0c:95:bf:16:
                    8a:e2:57:a5:9d:6f:da:1d:02:29:4e:e1:2e:89:36:
                    64:41:d6:52:5f:64:f8:23:45:7e:3f:e4:c1:e6:4e:
                    b2:f1:46:26:99:92:49:4f:33:21:9b:c2:ab:46:de:
                    c1:8b:9a:8b:bb:5c:4a:f7:dd:e3:82:6b:79:c7:6d:
                    96:6b:ea:c0:bf:24:0a:e6:9a:31:50:d0:66:6d:93:
                    32:07:c7:f3:18:39:5a:72:67:d2:74:b2:2a:0a:36:
                    90:d0:b2:25:a4:24:19:34:4d:08:34:74:3f:0d:5e:
                    3c:be:b0:32:35:2f:df:7c:a3:73:8b:88:49:f9:a6:
                    3e:54:67:58:c8:d5:2a:4f:17:9d:7b:0c:35:5b:5d:
                    41:d2:d3:98:7e:3d:85:a4:f0:46:db:00:83:07:6b:
                    49:44:7c:76:5d:30:70:0f:fd:8f:4d:6e:f6:7f:eb:
                    fe:73:5e:bb:fc:5d:aa:b4:c2:ad:04:1e:7f:69:7e:
                    5e:e7:af:9b:0e:0e:c7:4b:42:82:26:e9:23:03:a6:
                    5a:4a:05:56:32:20:8b:fa:08:89:22:65:2c:77:e5:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:98:B6:CB:5E:0F:4F:9A:20:DE:11:BB:00:EB:59:6F:2F:66:61:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a785dc76-5cdc-37b6-ae8e-526a253aeb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:67:1f:f6:ad:84:ba:db:03:bd:37:35:ce:be:04:8c:a8:9f:
         bc:ab:3b:9a:a9:a5:d5:2b:03:4c:8e:3a:98:0e:cf:09:83:97:
         5c:92:02:95:fd:6e:d0:85:bf:eb:a2:88:84:37:1d:56:5a:1c:
         84:b8:ae:b1:4d:8a:58:51:1f:58:ba:2e:43:16:47:ca:3a:77:
         be:b0:71:d7:63:4b:d3:9a:8a:ce:89:a4:c5:ac:70:2e:74:ed:
         9a:b8:4d:47:8e:01:64:bc:1b:3d:92:4d:0b:0a:97:26:1f:71:
         66:ef:16:4c:2f:a0:bf:d4:f2:d5:bb:50:48:00:d4:bc:8f:76:
         7f:66:ac:fc:f5:e5:83:ce:ee:b8:66:bb:d6:b8:bf:6c:3c:32:
         44:4d:d9:36:19:09:69:b8:b1:ce:74:8e:cb:17:47:70:cd:5d:
         40:2e:75:f9:1e:08:e9:18:55:3f:32:97:08:3d:fa:8a:32:0e:
         3b:d4:52:89:ad:f2:76:58:a8:48:70:f1:19:b7:36:be:8f:08:
         9c:50:36:0b:f2:fe:8d:11:27:bf:d7:60:65:45:f4:31:ed:43:
         68:27:4e:85:3a:c2:d3:67:80:89:3c:f4:7e:bf:03:06:bc:2a:
         88:3a:1a:b4:b2:39:a4:4d:d3:04:6c:e0:48:f9:35:0f:e0:43:
         bd:47:fd:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcw5O5gjSvfNq8B5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDkxMjE1NDAwMVoXDTI0MTIxMTE2NDAwMVowLzEtMCsGA1UEAxMk
ZjQ3MTA5YjQtZmI3Yy00NDRhLTgwMDctY2M2NzQ4YjM3ZTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Bx9FljCkHTDJV/txvyZ3ecXHd4avBwggE7
AmGN9SHeFNR4rosVDAyVvxaK4lelnW/aHQIpTuEuiTZkQdZSX2T4I0V+P+TB5k6y
8UYmmZJJTzMhm8KrRt7Bi5qLu1xK993jgmt5x22Wa+rAvyQK5poxUNBmbZMyB8fz
GDlacmfSdLIqCjaQ0LIlpCQZNE0INHQ/DV48vrAyNS/ffKNzi4hJ+aY+VGdYyNUq
Txedeww1W11B0tOYfj2FpPBG2wCDB2tJRHx2XTBwD/2PTW72f+v+c167/F2qtMKt
BB5/aX5e56+bDg7HS0KCJukjA6ZaSgVWMiCL+giJImUsd+V0UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGYtsteD0+aIN4RuwDrWW8vZmGEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTc4NWRjNzYtNWNkYy0z
N2I2LWFlOGUtNTI2YTI1M2FlYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK4tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVnH/athLrbA703Nc6+BIyon7yrO5qppdUrA0yOOpgOzwmDl1ySApX9
btCFv+uiiIQ3HVZaHIS4rrFNilhRH1i6LkMWR8o6d76wcddjS9Oais6JpMWscC50
7Zq4TUeOAWS8Gz2STQsKlyYfcWbvFkwvoL/U8tW7UEgA1LyPdn9mrPz15YPO7rhm
u9a4v2w8MkRN2TYZCWm4sc50jssXR3DNXUAudfkeCOkYVT8ylwg9+ooyDjvUUomt
8nZYqEhw8Rm3Nr6PCJxQNgvy/o0RJ7/XYGVF9DHtQ2gnToU6wtNngIk89H6/Awa8
Kog6GrSyOaRN0wRs4Ej5NQ/gQ71H/cI=
-----END CERTIFICATE-----