Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/87afeb68-9d84-39ad-b8c0-ad629186e375.roa
File:                     87afeb68-9d84-39ad-b8c0-ad629186e375.roa (raw, json)
Hash identifier:          7i5WwioGMF1xo0xItUo0sr6VZDBD/mxFsU+BuBbAKWo=
Subject key identifier:   8D:2B:4A:DD:4F:C2:57:E5:D7:96:D4:FB:A3:6B:AF:D3:FD:60:A0:DA
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858430A0D8B87DE88BB1BF75E74C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/87afeb68-9d84-39ad-b8c0-ad629186e375.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:8b:87:de:88:bb:1b:f7:5e:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ad425320-0553-4f44-a016-22c60aed9e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:ed:a8:a7:0b:e3:c9:cc:01:23:bf:b1:44:
                    6a:38:66:dc:b5:7d:60:e4:3f:27:cf:73:76:7b:a6:
                    18:ea:d8:1a:45:23:19:b9:30:45:c3:14:52:a7:ba:
                    6f:f7:ad:a0:69:85:d8:d1:9b:be:71:49:10:55:08:
                    6d:f7:a2:12:0e:02:be:64:77:c0:b3:3c:a7:d5:61:
                    b2:9d:09:fe:b1:4c:a4:65:e3:aa:50:cf:a9:4d:11:
                    8b:e5:f0:24:34:9b:4c:1d:1e:43:d8:b2:dd:23:0f:
                    71:e4:1e:d7:b3:07:9f:e3:55:e4:f0:71:93:af:71:
                    89:44:6b:4c:49:ab:49:2c:f0:35:52:de:8b:e4:6a:
                    30:7e:b8:40:c8:ab:65:cf:34:ba:e4:4b:9b:27:f8:
                    50:b5:39:2e:59:9c:ee:61:0f:f7:2f:7e:b7:c5:b8:
                    54:31:75:1a:ea:1d:d9:8f:ce:46:78:21:d2:77:a4:
                    1f:7e:77:87:e4:aa:b6:7a:94:08:58:2f:3d:f8:7c:
                    67:82:67:14:d4:4d:49:fb:d1:15:68:f6:19:19:96:
                    70:64:1e:29:43:36:d4:b8:73:68:67:94:59:c9:18:
                    23:2e:fb:4f:fa:a5:0d:25:12:3f:54:b6:79:46:b6:
                    6c:7f:f6:b9:82:d6:73:9f:e3:2a:d3:15:62:fb:04:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2B:4A:DD:4F:C2:57:E5:D7:96:D4:FB:A3:6B:AF:D3:FD:60:A0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/87afeb68-9d84-39ad-b8c0-ad629186e375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:33:d0:c4:c2:75:34:ad:95:e2:31:53:b6:f9:7d:3a:3f:
         ed:46:7a:cd:a9:f5:b8:78:5e:cd:1c:e4:9e:ea:00:27:82:db:
         46:43:af:fb:ec:7d:8c:70:b1:de:cc:47:d6:c5:89:a7:4a:bc:
         98:9b:00:60:d9:7e:07:0b:26:00:58:df:b1:8c:aa:34:56:a2:
         24:4f:6a:50:ad:49:2e:57:32:48:1c:71:1a:63:04:54:55:19:
         20:62:d5:21:0c:17:bf:9d:ec:6d:19:b2:36:83:ce:1d:04:0e:
         54:2c:a3:dc:0c:00:69:cf:6c:b4:86:bb:9a:f1:bf:bf:63:8e:
         cb:8a:1c:a2:4c:19:a3:6d:05:33:ce:a1:e4:46:3c:07:26:90:
         54:c9:a3:f5:23:0a:47:3d:3c:a0:28:6b:e9:24:2d:ec:71:a4:
         15:40:5d:a7:c4:6b:eb:7f:2e:66:64:b9:2b:88:24:7e:57:1a:
         7c:11:a5:cd:0d:10:cc:fe:40:5c:cb:1c:22:f8:13:83:c5:63:
         f5:01:74:f3:e7:e5:c8:31:7c:91:ce:8f:41:bf:65:68:a7:63:
         db:09:0a:cb:cd:cf:cc:b7:3a:70:21:c3:a6:27:1f:cf:ba:94:
         b0:9c:c7:e5:00:1f:42:92:78:a9:ec:8b:69:9e:ab:75:d0:b5:
         1e:b1:f1:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKDYuH3oi7G/dedMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWQ0MjUzMjAtMDU1My00ZjQ0LWEwMTYtMjJjNjBhZWQ5ZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlztqKcL48nMASO/sURqOGbctX1g5D8nz3N2
e6YY6tgaRSMZuTBFwxRSp7pv962gaYXY0Zu+cUkQVQht96ISDgK+ZHfAszyn1WGy
nQn+sUykZeOqUM+pTRGL5fAkNJtMHR5D2LLdIw9x5B7Xswef41Xk8HGTr3GJRGtM
SatJLPA1Ut6L5GowfrhAyKtlzzS65EubJ/hQtTkuWZzuYQ/3L363xbhUMXUa6h3Z
j85GeCHSd6QffneH5Kq2epQIWC89+HxngmcU1E1J+9EVaPYZGZZwZB4pQzbUuHNo
Z5RZyRgjLvtP+qUNJRI/VLZ5RrZsf/a5gtZzn+Mq0xVi+wRvRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0rSt1Pwlfl15bU+6Nrr9P9YKDaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvODdhZmViNjgtOWQ4NC0z
OWFkLWI4YzAtYWQ2MjkxODZlMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Wu8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0JM9DEwnU0rZXiMVO2+X06P+1Ges2p9bh4Xs0c5J7qACeC20ZDr/vs
fYxwsd7MR9bFiadKvJibAGDZfgcLJgBY37GMqjRWoiRPalCtSS5XMkgccRpjBFRV
GSBi1SEMF7+d7G0ZsjaDzh0EDlQso9wMAGnPbLSGu5rxv79jjsuKHKJMGaNtBTPO
oeRGPAcmkFTJo/UjCkc9PKAoa+kkLexxpBVAXafEa+t/LmZkuSuIJH5XGnwRpc0N
EMz+QFzLHCL4E4PFY/UBdPPn5cgxfJHOj0G/ZWinY9sJCsvNz8y3OnAhw6YnH8+6
lLCcx+UAH0KSeKnsi2meq3XQtR6x8Wc=
-----END CERTIFICATE-----