Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/6fe4341c-51b1-3ca5-927c-dc264a4561f8.roa
File:                     6fe4341c-51b1-3ca5-927c-dc264a4561f8.roa (raw, json)
Hash identifier:          v2BuT+h9Lijh0CS28FxLXrcEgPriWpMSr89id5fzSFs=
Subject key identifier:   6C:22:C0:67:55:42:67:8D:F9:1C:B7:68:67:0B:AD:ED:3A:5C:A1:A8
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584505EE6EB33CFF754D43A971C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/6fe4341c-51b1-3ca5-927c-dc264a4561f8.roa
Signing time:             Mon 26 Feb 2024 20:45:32 +0000
ROA not before:           Mon 26 Feb 2024 20:45:32 +0000
ROA not after:            Sun 26 May 2024 19:45:32 +0000
asID:                     30456
IP address blocks:        141.195.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 03:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:ee:6e:b3:3c:ff:75:4d:43:a9:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Feb 26 20:45:32 2024 GMT
            Not After : May 26 19:45:32 2024 GMT
        Subject: CN=14cda228-3baf-4b43-a826-a8dd9b5f651b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:20:63:bd:95:82:18:62:c5:d7:12:4f:fb:
                    10:94:fe:58:d7:a6:d3:10:94:09:97:67:55:62:1b:
                    2a:e0:3c:60:86:d1:17:92:e3:b7:3e:90:07:c5:c0:
                    23:d5:62:40:cb:4f:53:6d:28:72:fd:b9:23:7e:89:
                    b0:b3:b9:fa:c8:33:6a:13:dc:9b:06:84:60:03:fe:
                    9a:58:aa:62:af:1e:da:86:d0:16:9a:11:94:dc:6b:
                    88:04:9e:c4:ff:dd:f6:0e:26:be:50:1a:d6:36:b7:
                    f3:2d:d8:fb:49:45:5e:74:40:ff:21:08:c5:96:95:
                    c8:1f:cc:e8:a0:d9:a4:4b:ca:9f:f0:b7:c0:1a:eb:
                    d6:de:0b:01:9d:f8:9b:b8:5b:69:36:81:c6:3e:75:
                    c0:52:3c:77:f8:5b:05:7a:48:fb:81:1a:6e:23:05:
                    c7:f7:e6:52:08:96:6b:58:00:e7:f5:6b:92:76:90:
                    fc:08:ec:68:b6:88:87:4b:be:0c:02:90:37:56:71:
                    b5:8f:b4:c8:d6:cb:6a:ca:3d:a3:97:1b:f0:33:69:
                    c7:3a:39:d7:77:e7:56:08:48:5f:52:2c:d9:d7:1c:
                    21:be:2d:cc:0e:02:48:6e:31:e3:be:47:fa:c1:cc:
                    92:d3:66:1b:7e:66:b9:14:15:de:0c:66:91:de:08:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:C0:67:55:42:67:8D:F9:1C:B7:68:67:0B:AD:ED:3A:5C:A1:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/6fe4341c-51b1-3ca5-927c-dc264a4561f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0b:1b:53:70:88:33:47:aa:63:bb:92:51:9e:a2:72:01:51:
         e7:73:d7:03:3a:80:91:ae:8e:5e:74:4a:8f:66:d5:c7:de:ed:
         1f:c8:da:3a:50:c8:b2:2d:9c:b7:54:e5:5c:7f:93:b1:f3:59:
         85:b1:7a:b7:e5:de:7a:19:b4:3c:a3:98:23:99:ac:72:5e:c2:
         e4:67:cb:ea:f7:35:91:ef:0a:72:be:e4:47:3a:a3:48:22:b5:
         b8:f1:9e:57:8e:1c:87:e1:46:19:bc:ad:5a:40:8b:1f:52:ea:
         44:bc:aa:26:88:f6:e4:a5:be:83:55:5f:99:3e:d9:2f:28:38:
         d7:85:7f:f0:e5:23:91:41:48:6c:e7:f0:dd:ae:c7:37:cd:0e:
         59:79:f4:ef:69:bd:56:50:85:02:80:f0:66:c7:aa:87:c5:d4:
         f0:02:48:6c:27:c5:b7:6b:28:11:0b:59:88:41:2c:41:f1:87:
         80:8e:47:d3:a0:57:57:4c:9d:a1:94:74:03:19:95:20:49:b7:
         5c:04:4f:d6:9e:89:4d:0e:99:7f:ae:8b:65:49:29:98:35:58:
         53:96:b3:4e:5b:2c:34:7e:32:60:c9:a2:d4:5b:3e:ee:4e:fa:
         8c:fe:11:e9:a0:04:36:e4:f2:f2:69:12:f1:a8:9b:4e:92:74:
         3c:d9:ea:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUF7m6zPP91TUOpccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI0MDIyNjIwNDUzMloXDTI0MDUyNjE5NDUzMlowLzEtMCsGA1UEAxMk
MTRjZGEyMjgtM2JhZi00YjQzLWE4MjYtYThkZDliNWY2NTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRsgY72VghhixdcST/sQlP5Y16bTEJQJl2dV
Yhsq4DxghtEXkuO3PpAHxcAj1WJAy09TbShy/bkjfomws7n6yDNqE9ybBoRgA/6a
WKpirx7ahtAWmhGU3GuIBJ7E/932Dia+UBrWNrfzLdj7SUVedED/IQjFlpXIH8zo
oNmkS8qf8LfAGuvW3gsBnfibuFtpNoHGPnXAUjx3+FsFekj7gRpuIwXH9+ZSCJZr
WADn9WuSdpD8COxotoiHS74MApA3VnG1j7TI1stqyj2jlxvwM2nHOjnXd+dWCEhf
UizZ1xwhvi3MDgJIbjHjvkf6wcyS02Ybfma5FBXeDGaR3ggSywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwiwGdVQmeN+Ry3aGcLre06XKGoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvNmZlNDM0MWMtNTFiMS0z
Y2E1LTkyN2MtZGMyNjRhNDU2MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAALG1NwiDNHqmO7klGeonIBUedz1wM6gJGujl50So9m1cfe7R/I2jpQ
yLItnLdU5Vx/k7HzWYWxerfl3noZtDyjmCOZrHJewuRny+r3NZHvCnK+5Ec6o0gi
tbjxnleOHIfhRhm8rVpAix9S6kS8qiaI9uSlvoNVX5k+2S8oONeFf/DlI5FBSGzn
8N2uxzfNDll59O9pvVZQhQKA8GbHqofF1PACSGwnxbdrKBELWYhBLEHxh4COR9Og
V1dMnaGUdAMZlSBJt1wET9aeiU0OmX+ui2VJKZg1WFOWs05bLDR+MmDJotRbPu5O
+oz+EemgBDbk8vJpEvGom06SdDzZ6kY=
-----END CERTIFICATE-----