Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/6f604c83-84d2-3e6c-ba54-79b3d853678e.roa
File:                     6f604c83-84d2-3e6c-ba54-79b3d853678e.roa (raw, json)
Hash identifier:          yL3Ov1Ud3yy5bGr9pv+d3aB9P7Ksr7NNGYgHk4sRX8Q=
Subject key identifier:   9A:FC:78:26:54:46:33:53:3F:65:38:2B:69:E1:C8:FA:31:BD:18:38
Certificate issuer:       /CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Certificate serial:       010D0C9F43285843279956705A32BA290F614B80
Authority key identifier: 38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/6f604c83-84d2-3e6c-ba54-79b3d853678e.roa
Signing time:             Fri 08 Sep 2023 12:37:41 +0000
ROA not before:           Fri 08 Sep 2023 12:37:41 +0000
ROA not after:            Thu 07 Dec 2023 13:37:41 +0000
asID:                     35913
IP address blocks:        172.98.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:27:99:56:70:5a:32:ba:29:0f:61:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
        Validity
            Not Before: Sep  8 12:37:41 2023 GMT
            Not After : Dec  7 13:37:41 2023 GMT
        Subject: CN=78a44569-a0bf-425b-909f-07c4c4154a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:20:8d:23:26:82:f1:27:97:86:a6:04:d6:
                    fb:0e:50:86:be:78:92:b6:1b:9e:04:67:48:69:1f:
                    a1:95:07:bf:61:14:3b:53:ed:ff:f2:07:fc:53:67:
                    28:4b:6d:92:25:24:ed:0c:54:f5:3e:0a:96:66:ab:
                    d2:fb:b1:6b:ec:a0:f1:b3:14:1c:9f:15:c9:b3:8f:
                    51:f4:d0:54:d8:5b:28:6d:1e:b4:0a:bb:d8:97:0d:
                    08:36:a0:7e:44:a1:77:da:2a:8f:a8:9f:40:66:f6:
                    50:9d:25:5e:43:5c:70:e9:9c:6d:93:01:d8:1f:8c:
                    53:9b:c9:3e:95:5d:27:fa:c8:a5:40:8f:32:b1:2c:
                    e6:0e:65:a3:1c:5e:a2:48:e6:ae:c9:25:5a:37:a3:
                    22:b1:f0:3e:fb:cc:cd:49:ab:c7:34:ef:97:c5:96:
                    cc:91:20:7a:6d:d0:6a:ec:d7:15:b1:ea:35:d3:38:
                    b8:d6:ab:70:1d:1e:f6:dd:81:66:85:ee:11:59:02:
                    f7:21:aa:96:57:34:6a:dd:97:7d:af:2d:87:8f:fd:
                    78:40:3b:1b:4b:3e:bc:f4:da:ce:a2:6a:7e:94:d7:
                    fe:86:b0:78:3d:3f:de:7a:a8:e5:c2:66:55:4c:1b:
                    7e:75:34:01:58:e0:be:01:27:bf:8d:ca:2b:e6:33:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:78:26:54:46:33:53:3F:65:38:2B:69:E1:C8:FA:31:BD:18:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/6f604c83-84d2-3e6c-ba54-79b3d853678e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.crl

            X509v3 Authority Key Identifier:
                keyid:38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:99:43:35:3b:e6:95:29:54:4f:54:74:9f:a9:03:bc:49:be:
         e0:b1:73:67:c0:79:78:5f:c4:65:e3:26:c0:8a:ea:6c:64:60:
         11:d7:ae:ef:1a:5b:e8:ec:da:e8:b0:2e:8c:95:79:8a:00:0e:
         16:b6:f2:dd:5e:f5:e0:59:69:3a:06:ca:24:6d:ff:04:da:70:
         40:78:21:56:28:6c:13:f4:e2:b8:b3:be:3e:82:e8:74:6b:58:
         53:7a:ec:ff:82:29:4d:7b:b7:eb:ae:55:e6:d3:24:1a:a0:e6:
         79:16:3b:54:df:7e:09:26:d8:0c:27:67:dc:f9:aa:bf:85:74:
         e4:49:0e:c0:af:a8:90:b2:11:e1:ec:73:a6:3a:96:b5:c5:7b:
         20:88:de:f6:d5:49:d5:a8:9e:e1:ba:3d:96:2a:ad:41:91:85:
         41:eb:0b:11:c5:98:58:2d:58:74:c9:0c:52:0d:3d:47:f5:f2:
         83:37:29:35:71:c5:e9:c4:36:ba:5b:0b:96:ea:e1:b6:da:9f:
         d4:f1:d2:ed:4c:6f:8d:fb:48:f5:55:65:96:c3:ec:fa:ac:25:
         57:fa:27:92:e4:1a:aa:38:97:62:8f:98:79:03:9f:bd:a4:46:
         87:1a:00:3d:97:a3:59:0a:4b:7b:a2:9f:d6:5a:b8:76:b2:01:
         30:86:9b:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMnmVZwWjK6KQ9hS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkM2VmOGMtOGM1Ni00MDU2LWJhM2YtOWI4ZjYzODk1
MmNiMB4XDTIzMDkwODEyMzc0MVoXDTIzMTIwNzEzMzc0MVowLzEtMCsGA1UEAxMk
NzhhNDQ1NjktYTBiZi00MjViLTkwOWYtMDdjNGM0MTU0YTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5YgjSMmgvEnl4amBNb7DlCGvniSthueBGdI
aR+hlQe/YRQ7U+3/8gf8U2coS22SJSTtDFT1PgqWZqvS+7Fr7KDxsxQcnxXJs49R
9NBU2FsobR60CrvYlw0INqB+RKF32iqPqJ9AZvZQnSVeQ1xw6ZxtkwHYH4xTm8k+
lV0n+silQI8ysSzmDmWjHF6iSOauySVaN6MisfA++8zNSavHNO+XxZbMkSB6bdBq
7NcVseo10zi41qtwHR723YFmhe4RWQL3IaqWVzRq3Zd9ry2Hj/14QDsbSz689NrO
omp+lNf+hrB4PT/eeqjlwmZVTBt+dTQBWOC+ASe/jcor5jP2XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJr8eCZURjNTP2U4K2nhyPoxvRg4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81M2Qz
ZWY4Yy04YzU2LTQwNTYtYmEzZi05YjhmNjM4OTUyY2IvNmY2MDRjODMtODRkMi0z
ZTZjLWJhNTQtNzliM2Q4NTM2NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTNkM2VmOGMtOGM1Ni00MDU2LWJh
M2YtOWI4ZjYzODk1MmNiLzUzZDNlZjhjLThjNTYtNDA1Ni1iYTNmLTliOGY2Mzg5
NTJjYi5jcmwwHwYDVR0jBBgwFoAUOBFcc6hv1mZNMZddX0pA+JuQbUwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81M2QzZWY4Yy04YzU2LTQwNTYtYmEzZi05Yjhm
NjM4OTUyY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmZQzU75pUpVE9UdJ+pA7xJvuCxc2fAeXhfxGXjJsCK6mxkYBHXru8a
W+js2uiwLoyVeYoADha28t1e9eBZaToGyiRt/wTacEB4IVYobBP04rizvj6C6HRr
WFN67P+CKU17t+uuVebTJBqg5nkWO1Tffgkm2AwnZ9z5qr+FdORJDsCvqJCyEeHs
c6Y6lrXFeyCI3vbVSdWonuG6PZYqrUGRhUHrCxHFmFgtWHTJDFINPUf18oM3KTVx
xenENrpbC5bq4bban9Tx0u1Mb437SPVVZZbD7PqsJVf6J5LkGqo4l2KPmHkDn72k
RocaAD2Xo1kKS3uin9ZauHayATCGmyE=
-----END CERTIFICATE-----