Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/349154ac-da79-3fa6-bb58-7c988a458552.roa
File:                     349154ac-da79-3fa6-bb58-7c988a458552.roa (raw, json)
Hash identifier:          D/pfhdsyO4K5cU5Yjm4fAYduHzo40IqBM36IdR7RsGM=
Subject key identifier:   6F:1F:04:6D:05:BA:FB:4D:8E:7C:3D:31:C3:47:26:43:B2:16:10:43
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858430A14CE664D131EE083FB26C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/349154ac-da79-3fa6-bb58-7c988a458552.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.186.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:14:ce:66:4d:13:1e:e0:83:fb:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=613acb33-a517-4ee7-87ae-33b44c92ff8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:73:6a:1a:b7:e1:81:a3:0c:af:57:ed:08:
                    c2:cc:56:fd:d3:04:c7:5b:fb:b1:3d:c8:52:d5:bc:
                    fd:b9:38:8d:d5:65:56:14:ba:63:ee:c1:59:f2:79:
                    1e:c7:44:f5:81:4f:67:e3:7f:c5:b9:12:f8:aa:de:
                    aa:ad:ec:91:b6:e4:7e:fd:80:76:ab:9d:fc:7a:ae:
                    3a:d1:f0:51:ef:01:b9:fe:1c:48:1f:a8:45:19:53:
                    4c:0b:d1:14:29:24:51:c6:ea:5b:f4:79:5c:ef:78:
                    cb:2d:4f:77:20:3c:b4:b6:7d:e2:24:34:32:75:a1:
                    bd:bc:e4:ed:16:bd:21:51:06:d6:d4:03:9c:9a:05:
                    b0:95:86:c9:8d:c4:32:0a:ec:f9:e1:74:37:40:63:
                    ff:63:fb:47:70:41:39:31:2c:99:67:25:31:8b:a6:
                    59:73:92:14:c6:27:3a:a6:c4:c3:fd:15:7f:1f:e7:
                    f3:c6:b4:4a:46:5e:96:62:65:37:95:ec:61:7d:97:
                    cb:b6:ed:38:00:07:05:f4:f4:d9:a3:54:0f:26:18:
                    01:a3:0e:60:df:c3:05:b9:21:65:15:cf:37:ba:b7:
                    b3:b9:92:0d:e1:aa:8d:65:af:90:d7:7a:06:41:01:
                    d5:89:fa:91:f9:da:2e:d6:f6:40:b5:7e:0f:b3:14:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:04:6D:05:BA:FB:4D:8E:7C:3D:31:C3:47:26:43:B2:16:10:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/349154ac-da79-3fa6-bb58-7c988a458552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:d2:cd:c4:8f:76:c5:0f:73:35:2e:e0:d8:60:6a:11:eb:
         d6:cd:86:60:58:e8:9b:1e:52:03:16:b2:6a:6b:26:9d:eb:f5:
         71:b2:42:76:c6:14:7b:48:fa:ca:bd:b6:83:fe:01:b3:03:48:
         53:70:f7:56:2e:9c:ca:be:43:a2:e5:56:7b:41:92:2c:6e:ca:
         0b:6a:53:8a:3c:67:7b:bd:ff:ea:1b:20:a8:ce:6c:df:0d:82:
         da:4d:f0:c7:23:22:11:6a:11:74:9a:1f:c7:11:31:0d:f9:2e:
         06:45:ea:a2:40:ec:77:a2:9b:dc:f5:f2:2e:6a:cc:fa:35:9e:
         7b:7a:54:58:7a:f6:a3:0e:70:da:71:02:b6:eb:c0:04:eb:41:
         29:d4:ca:fc:e9:48:25:ac:bd:91:d4:a6:f0:24:5e:a5:78:20:
         7a:0f:e8:05:4c:ac:ba:c6:03:a9:c9:78:80:a1:ac:6c:79:be:
         17:b9:b7:64:81:ca:ce:e1:91:4b:70:67:b1:cc:54:e3:3c:f4:
         31:dc:e5:e7:0a:f6:01:02:aa:9b:80:bf:d7:d4:b3:23:8c:eb:
         62:6f:2c:e0:83:08:bc:27:be:35:79:9d:40:d9:5a:1c:3b:5a:
         08:8a:77:66:0f:fb:ba:ee:34:8f:d6:1b:7d:34:37:f5:4c:da:
         38:15:15:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFM5mTRMe4IP7JsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjEzYWNiMzMtYTUxNy00ZWU3LTg3YWUtMzNiNDRjOTJmZjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ1zahq34YGjDK9X7QjCzFb90wTHW/uxPchS
1bz9uTiN1WVWFLpj7sFZ8nkex0T1gU9n43/FuRL4qt6qreyRtuR+/YB2q538eq46
0fBR7wG5/hxIH6hFGVNMC9EUKSRRxupb9Hlc73jLLU93IDy0tn3iJDQydaG9vOTt
Fr0hUQbW1AOcmgWwlYbJjcQyCuz54XQ3QGP/Y/tHcEE5MSyZZyUxi6ZZc5IUxic6
psTD/RV/H+fzxrRKRl6WYmU3lexhfZfLtu04AAcF9PTZo1QPJhgBow5g38MFuSFl
Fc83urezuZIN4aqNZa+Q13oGQQHVifqR+dou1vZAtX4PsxRxKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8fBG0FuvtNjnw9McNHJkOyFhBDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMzQ5MTU0YWMtZGE3OS0z
ZmE2LWJiNTgtN2M5ODhhNDU4NTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Wu6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOK0s3Ej3bFD3M1LuDYYGoR69bNhmBY6JseUgMWsmprJp3r9XGyQnbG
FHtI+sq9toP+AbMDSFNw91YunMq+Q6LlVntBkixuygtqU4o8Z3u9/+obIKjObN8N
gtpN8McjIhFqEXSaH8cRMQ35LgZF6qJA7Heim9z18i5qzPo1nnt6VFh69qMOcNpx
ArbrwATrQSnUyvzpSCWsvZHUpvAkXqV4IHoP6AVMrLrGA6nJeIChrGx5vhe5t2SB
ys7hkUtwZ7HMVOM89DHc5ecK9gECqpuAv9fUsyOM62JvLOCDCLwnvjV5nUDZWhw7
WgiKd2YP+7ruNI/WG300N/VM2jgVFek=
-----END CERTIFICATE-----