Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa
File:                     c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa (raw, json)
Hash identifier:          QX1Btcno17UGMHS+bZ8pfYHFqWkDM7Ee7ivdm1tDyHs=
Subject key identifier:   E3:9F:67:E4:CE:91:0E:00:5A:FD:39:A1:5D:BD:2A:E2:2F:FA:EC:59
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285843AE939AEE8BCFAA5B59B01EC0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa
Signing time:             Thu 26 Oct 2023 21:00:16 +0000
ROA not before:           Thu 26 Oct 2023 21:00:16 +0000
ROA not after:            Wed 24 Jan 2024 22:00:16 +0000
asID:                     20303
IP address blocks:        198.145.70.0/23 maxlen: 23
                          198.145.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ae:93:9a:ee:8b:cf:aa:5b:59:b0:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct 26 21:00:16 2023 GMT
            Not After : Jan 24 22:00:16 2024 GMT
        Subject: CN=bf7a5ecd-7e0d-47c3-be82-8654ac2dbaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:a0:e4:6e:72:d7:33:df:95:ee:76:90:1a:
                    01:45:e5:8d:de:84:c5:60:71:03:fa:98:29:ce:06:
                    d3:74:82:e9:fd:cb:8a:81:58:aa:f7:c1:7d:18:aa:
                    96:f3:d0:e3:e6:9a:88:16:63:e3:ab:f0:1f:cc:e8:
                    f7:88:a1:bd:b8:d3:39:9f:36:e8:b5:b9:65:99:fa:
                    87:8e:a9:dd:ff:96:1b:d6:e4:68:59:d7:63:59:d1:
                    2d:b9:bc:83:92:e2:09:c5:ac:71:a0:eb:5a:3a:2d:
                    91:19:76:af:41:fd:00:a0:86:23:91:cf:84:c0:84:
                    35:2c:0e:c7:32:64:79:2c:50:1d:fb:b6:f2:19:3d:
                    a5:50:fd:62:26:a5:14:8b:89:40:25:d3:2d:0c:9d:
                    d7:12:52:ae:47:a7:e9:f7:ad:31:ec:e7:30:db:27:
                    1c:03:2c:2c:e6:c1:a3:c0:96:9c:01:39:e9:24:86:
                    02:3c:a1:90:08:32:b5:89:e2:73:1c:3c:6b:35:0a:
                    8f:c1:6d:59:e4:c0:b2:37:c3:25:d4:5f:38:e0:e8:
                    bf:3e:2f:14:0c:e7:93:f5:4a:15:c7:99:1c:33:90:
                    53:26:77:c5:e8:bf:32:7a:2c:ae:42:33:de:3d:04:
                    ce:cb:1c:d7:76:9e:ec:dc:9e:54:41:36:8d:f1:ef:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:67:E4:CE:91:0E:00:5A:FD:39:A1:5D:BD:2A:E2:2F:FA:EC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:10:90:a3:26:f1:16:11:70:22:e0:67:b3:a5:e3:26:01:
         0f:28:c0:d3:a9:c4:8c:f2:e9:5e:8b:3e:ef:90:12:9a:90:11:
         7b:66:9d:df:4e:3a:f7:2b:91:14:ab:00:43:b5:32:6f:d1:55:
         b1:5a:e7:33:e7:23:6c:03:d1:ca:59:0a:06:d9:f2:06:33:fa:
         f2:7c:4f:d2:36:b6:22:0a:b3:96:c9:78:b3:19:c9:ec:73:74:
         3a:e7:ce:04:48:91:9f:bc:7a:00:14:50:60:d4:e3:96:fe:9d:
         c3:1a:3d:72:92:b2:d2:78:ca:d9:13:63:d8:8d:01:00:6c:7d:
         db:32:a6:19:19:d1:77:08:38:a3:96:94:1e:5e:19:1d:1f:d0:
         fd:d6:57:4d:07:73:79:9c:71:ff:c0:5b:66:78:04:af:2b:85:
         87:52:01:07:0b:e1:86:1b:a6:b4:96:f1:60:73:4a:52:0a:4c:
         ac:45:ff:f3:05:17:f2:6a:4d:61:1a:6f:e6:c3:fc:cf:0b:e5:
         f6:20:11:1a:8d:1c:94:11:92:64:26:9f:16:21:87:e9:db:e7:
         4b:00:dc:a6:2c:24:ba:dd:e1:08:8b:78:22:18:52:1d:ea:ac:
         bc:f9:dd:f7:e7:41:43:de:71:24:fa:a0:5e:30:42:01:cf:8a:
         e0:cc:8c:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOuk5rui8+qW1mwHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTIzMTAyNjIxMDAxNloXDTI0MDEyNDIyMDAxNlowLzEtMCsGA1UEAxMk
YmY3YTVlY2QtN2UwZC00N2MzLWJlODItODY1NGFjMmRiYWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmyg5G5y1zPfle52kBoBReWN3oTFYHED+pgp
zgbTdILp/cuKgViq98F9GKqW89Dj5pqIFmPjq/AfzOj3iKG9uNM5nzbotbllmfqH
jqnd/5Yb1uRoWddjWdEtubyDkuIJxaxxoOtaOi2RGXavQf0AoIYjkc+EwIQ1LA7H
MmR5LFAd+7byGT2lUP1iJqUUi4lAJdMtDJ3XElKuR6fp960x7Ocw2yccAyws5sGj
wJacATnpJIYCPKGQCDK1ieJzHDxrNQqPwW1Z5MCyN8Ml1F844Oi/Pi8UDOeT9UoV
x5kcM5BTJnfF6L8yeiyuQjPePQTOyxzXdp7s3J5UQTaN8e+WcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOfZ+TOkQ4AWv05oV29KuIv+uxZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYzgxYmI0MGQtNWRkMy0z
NTU0LWFmMTctYTFjNzFjNmE4MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALaeEJCjJvEWEXAi4GezpeMmAQ8owNOpxIzy6V6LPu+QEpqQEXtmnd9O
OvcrkRSrAEO1Mm/RVbFa5zPnI2wD0cpZCgbZ8gYz+vJ8T9I2tiIKs5bJeLMZyexz
dDrnzgRIkZ+8egAUUGDU45b+ncMaPXKSstJ4ytkTY9iNAQBsfdsyphkZ0XcIOKOW
lB5eGR0f0P3WV00Hc3mccf/AW2Z4BK8rhYdSAQcL4YYbprSW8WBzSlIKTKxF//MF
F/JqTWEab+bD/M8L5fYgERqNHJQRkmQmnxYhh+nb50sA3KYsJLrd4QiLeCIYUh3q
rLz53ffnQUPecST6oF4wQgHPiuDMjEU=
-----END CERTIFICATE-----