Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b314f6e2-6b61-3313-b637-bca3588a9354.roa
File:                     b314f6e2-6b61-3313-b637-bca3588a9354.roa (raw, json)
Hash identifier:          w0h2VcW5NTaXXCpFtUbhTUG8YpKZoVmECw+QqbXh6rM=
Subject key identifier:   1F:10:BC:35:33:84:1B:21:47:75:BF:66:F8:5B:8D:3A:D1:6C:CC:91
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285844527995D903B2B8253B62A900
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b314f6e2-6b61-3313-b637-bca3588a9354.roa
Signing time:             Sun 24 Dec 2023 14:00:20 +0000
ROA not before:           Sun 24 Dec 2023 14:00:20 +0000
ROA not after:            Sat 23 Mar 2024 13:00:20 +0000
asID:                     7029
IP address blocks:        103.216.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 06:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:52:79:95:d9:03:b2:b8:25:3b:62:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Dec 24 14:00:20 2023 GMT
            Not After : Mar 23 13:00:20 2024 GMT
        Subject: CN=99bc4505-4c5a-4348-83a7-753f80da639d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:15:a2:75:1c:79:9d:d7:af:1c:dc:60:4e:
                    56:2d:ed:b7:2b:48:b3:f7:8a:b8:65:ee:56:cf:26:
                    bd:f0:92:19:a7:21:4e:bf:24:fd:4f:ca:da:77:19:
                    64:91:39:d7:38:6c:fd:fa:12:f2:b0:89:4c:df:70:
                    bd:98:e1:fa:7c:b0:e1:6f:16:37:c1:1e:e1:9a:83:
                    e2:0c:07:8f:f9:73:12:4f:4e:09:9c:ac:a3:6b:d5:
                    79:95:48:28:51:37:87:de:e7:81:f2:9e:21:7b:45:
                    a4:9a:10:b1:24:b7:a7:17:7f:3a:48:07:c5:5b:c9:
                    ac:fa:fd:2c:fc:26:01:18:76:c0:05:6b:e5:e3:27:
                    0f:91:ff:9f:1b:f3:23:e8:1e:bb:6f:bc:6e:57:42:
                    2a:41:70:14:20:e4:13:88:80:c2:af:11:4d:1b:80:
                    32:88:d3:b4:aa:06:5c:13:2b:fa:73:c8:8a:71:55:
                    87:fe:05:9a:fa:b3:7a:d6:81:77:37:1a:5e:56:55:
                    b5:58:3c:b4:55:c4:b0:34:01:a1:a6:0e:64:6e:25:
                    63:5e:98:58:86:5a:d2:d6:fc:45:de:77:d3:d5:bb:
                    7a:f5:c4:bc:5d:5b:de:18:b1:3c:d8:ab:18:15:01:
                    19:ea:90:98:d4:36:24:e6:83:47:4e:a7:37:dd:4e:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:10:BC:35:33:84:1B:21:47:75:BF:66:F8:5B:8D:3A:D1:6C:CC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b314f6e2-6b61-3313-b637-bca3588a9354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:af:44:e6:a3:76:c4:6d:7f:b6:e4:f6:6e:e8:25:c3:86:
         fd:d8:31:3d:f0:3e:bb:3b:ef:d9:35:37:42:72:0e:09:87:00:
         ad:d6:87:a8:34:3e:98:1f:a1:04:bc:c6:5c:bb:6b:57:00:07:
         9e:31:25:14:51:4b:01:2d:55:5f:5d:a3:99:e5:f1:f7:a0:f7:
         fc:ba:69:92:9f:3f:83:10:e6:e1:1c:4b:36:9f:3a:59:8f:6c:
         b2:bd:1b:bd:aa:e4:dd:f4:ad:e5:b3:81:fe:c4:5e:b9:14:13:
         50:0c:0f:b7:8c:4b:2e:f5:42:17:6f:d5:de:a6:72:02:47:86:
         2c:e6:a7:34:de:53:1c:8d:e3:68:cc:5e:57:f1:4f:f1:2a:8c:
         f8:43:5b:52:f0:2d:2f:fe:84:4e:6c:05:24:18:29:7d:7b:76:
         5d:c4:f5:a0:59:1e:a3:92:32:0a:24:f6:3b:95:ef:25:63:5a:
         3c:95:86:9b:09:57:2d:f3:f5:6e:2e:8c:5a:85:ad:96:1a:2e:
         42:c0:f9:4b:85:a1:5c:04:bb:83:ef:26:7b:47:c2:b8:b7:14:
         3f:d0:ae:14:e0:34:41:9a:08:4d:2c:d1:7f:ad:2a:9b:bc:ed:
         1c:b7:39:bc:5b:f2:af:3e:ac:5b:eb:e0:77:68:cc:72:7d:c2:
         02:e7:91:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERSeZXZA7K4JTtiqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTIzMTIyNDE0MDAyMFoXDTI0MDMyMzEzMDAyMFowLzEtMCsGA1UEAxMk
OTliYzQ1MDUtNGM1YS00MzQ4LTgzYTctNzUzZjgwZGE2MzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvkVonUceZ3XrxzcYE5WLe23K0iz94q4Ze5W
zya98JIZpyFOvyT9T8radxlkkTnXOGz9+hLysIlM33C9mOH6fLDhbxY3wR7hmoPi
DAeP+XMST04JnKyja9V5lUgoUTeH3ueB8p4he0WkmhCxJLenF386SAfFW8ms+v0s
/CYBGHbABWvl4ycPkf+fG/Mj6B67b7xuV0IqQXAUIOQTiIDCrxFNG4AyiNO0qgZc
Eyv6c8iKcVWH/gWa+rN61oF3NxpeVlW1WDy0VcSwNAGhpg5kbiVjXphYhlrS1vxF
3nfT1bt69cS8XVveGLE82KsYFQEZ6pCY1DYk5oNHTqc33U6qnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8QvDUzhBshR3W/ZvhbjTrRbMyRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvYjMxNGY2ZTItNmI2MS0z
MzEzLWI2MzctYmNhMzU4OGE5MzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9gAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrJr0Tmo3bEbX+25PZu6CXDhv3YMT3wPrs779k1N0JyDgmHAK3Wh6g0
PpgfoQS8xly7a1cAB54xJRRRSwEtVV9do5nl8feg9/y6aZKfP4MQ5uEcSzafOlmP
bLK9G72q5N30reWzgf7EXrkUE1AMD7eMSy71Qhdv1d6mcgJHhizmpzTeUxyN42jM
XlfxT/EqjPhDW1LwLS/+hE5sBSQYKX17dl3E9aBZHqOSMgok9juV7yVjWjyVhpsJ
Vy3z9W4ujFqFrZYaLkLA+UuFoVwEu4PvJntHwri3FD/QrhTgNEGaCE0s0X+tKpu8
7Ry3Obxb8q8+rFvr4HdozHJ9wgLnkQ0=
-----END CERTIFICATE-----