Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7c28fcc2-98c8-3e22-986a-7acc3343976a.roa
File:                     7c28fcc2-98c8-3e22-986a-7acc3343976a.roa (raw, json)
Hash identifier:          m4UGuhzroatx1JkJD0gZ2Olj5nzghB/injP3s6fePwU=
Subject key identifier:   B3:7D:A2:FB:E9:54:34:DC:13:66:5F:1D:E7:30:28:D5:99:66:6F:40
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858438208068B69EEB49CF435D6C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7c28fcc2-98c8-3e22-986a-7acc3343976a.roa
Signing time:             Tue 10 Oct 2023 22:03:27 +0000
ROA not before:           Tue 10 Oct 2023 22:03:27 +0000
ROA not after:            Mon 08 Jan 2024 23:03:27 +0000
asID:                     197789
IP address blocks:        104.156.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:82:08:06:8b:69:ee:b4:9c:f4:35:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Oct 10 22:03:27 2023 GMT
            Not After : Jan  8 23:03:27 2024 GMT
        Subject: CN=237c186c-17ab-43ca-a660-40697ee31df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:df:8f:ab:bb:c6:d1:72:99:25:48:ce:eb:
                    6c:ca:fb:8b:6b:29:70:f5:6b:33:cd:14:d9:e2:f7:
                    51:37:bd:d7:82:8d:4b:f2:0d:f8:79:cd:e2:f0:c5:
                    82:86:7f:71:32:01:c1:fb:93:80:20:93:30:b7:a1:
                    77:b9:bb:67:b4:79:85:d5:c2:d5:21:10:7f:1b:2d:
                    8a:c9:b4:28:05:93:0b:13:51:19:09:c2:2f:0f:cd:
                    84:ba:c4:c0:30:fd:4a:b2:8d:cf:e3:34:79:ae:bf:
                    98:4f:f4:bc:67:8c:ee:5f:8c:a1:ef:15:86:f3:63:
                    fd:c5:42:3c:0f:d0:5e:9d:7c:f6:2e:7f:8d:5f:6f:
                    2e:90:38:a5:9d:b3:17:83:4d:03:8c:0e:ff:8a:3c:
                    07:08:df:4c:4f:48:d9:b2:1f:95:5f:c8:e6:5f:1f:
                    56:ec:b2:5f:79:46:cb:ce:2f:01:73:5e:92:52:24:
                    fd:eb:f2:96:7b:ee:89:aa:2d:29:bf:6c:13:34:96:
                    da:6e:f9:96:cf:2c:57:5a:c1:71:f9:41:bd:c3:fc:
                    57:47:44:98:29:64:96:45:21:cc:cd:3a:57:b8:8f:
                    1a:5a:34:12:01:ec:ac:9a:91:d8:92:14:0e:32:32:
                    c3:d4:e0:01:8c:76:94:0a:52:87:02:fe:4c:4b:7f:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:A2:FB:E9:54:34:DC:13:66:5F:1D:E7:30:28:D5:99:66:6F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7c28fcc2-98c8-3e22-986a-7acc3343976a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:61:de:3e:f2:6e:03:cf:69:2d:60:20:37:c5:21:50:cc:
         cc:09:85:ec:9e:bf:11:25:76:30:ac:a3:00:a8:10:03:1b:15:
         9b:6f:4f:7c:4b:cf:8c:18:06:9b:fa:13:ba:1e:39:18:45:e5:
         42:4f:55:d8:d2:84:e7:42:7b:ba:28:05:de:5f:d4:d3:31:93:
         b6:b9:92:00:0a:ab:af:2f:96:85:17:47:ea:e7:9a:a1:94:83:
         81:3a:4f:f4:a1:86:24:c2:47:7a:cb:45:52:42:d8:24:b7:70:
         e8:b1:3a:f6:73:0a:3b:01:a5:8c:80:6e:f1:82:03:21:19:c3:
         24:28:92:37:01:29:51:3b:e6:cf:7c:b7:7a:0a:cd:b0:74:fe:
         04:4d:4c:5a:1b:bb:eb:c5:42:a7:5e:c9:49:bd:1d:c0:bf:18:
         fa:d9:ce:5f:54:c1:29:03:f8:e0:ba:43:f6:c8:1b:00:07:47:
         5a:50:44:3c:21:87:8f:2b:86:7f:4d:03:da:8d:ab:1b:f5:41:
         64:d9:0c:b0:09:7f:94:06:24:1e:9c:08:bf:45:24:ed:02:30:
         5f:e5:f8:c4:59:44:d4:f9:35:13:47:9a:62:4a:07:3d:8a:8c:
         f2:bc:b7:2e:34:42:3c:38:35:6d:f6:2a:5f:7c:8d:ca:2a:57:
         80:82:d4:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOCCAaLae60nPQ11sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTIzMTAxMDIyMDMyN1oXDTI0MDEwODIzMDMyN1owLzEtMCsGA1UEAxMk
MjM3YzE4NmMtMTdhYi00M2NhLWE2NjAtNDA2OTdlZTMxZGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunbfj6u7xtFymSVIzutsyvuLaylw9WszzRTZ
4vdRN73Xgo1L8g34ec3i8MWChn9xMgHB+5OAIJMwt6F3ubtntHmF1cLVIRB/Gy2K
ybQoBZMLE1EZCcIvD82EusTAMP1Kso3P4zR5rr+YT/S8Z4zuX4yh7xWG82P9xUI8
D9BenXz2Ln+NX28ukDilnbMXg00DjA7/ijwHCN9MT0jZsh+VX8jmXx9W7LJfeUbL
zi8Bc16SUiT96/KWe+6Jqi0pv2wTNJbabvmWzyxXWsFx+UG9w/xXR0SYKWSWRSHM
zTpXuI8aWjQSAeysmpHYkhQOMjLD1OABjHaUClKHAv5MS3/SrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLN9ovvpVDTcE2ZfHecwKNWZZm9AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvN2MyOGZjYzItOThjOC0z
ZTIyLTk4NmEtN2FjYzMzNDM5NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7uYd4+8m4Dz2ktYCA3xSFQzMwJheyevxEldjCsowCoEAMbFZtvT3xL
z4wYBpv6E7oeORhF5UJPVdjShOdCe7ooBd5f1NMxk7a5kgAKq68vloUXR+rnmqGU
g4E6T/ShhiTCR3rLRVJC2CS3cOixOvZzCjsBpYyAbvGCAyEZwyQokjcBKVE75s98
t3oKzbB0/gRNTFobu+vFQqdeyUm9HcC/GPrZzl9UwSkD+OC6Q/bIGwAHR1pQRDwh
h48rhn9NA9qNqxv1QWTZDLAJf5QGJB6cCL9FJO0CMF/l+MRZRNT5NRNHmmJKBz2K
jPK8ty40Qjw4NW32Kl98jcoqV4CC1KY=
-----END CERTIFICATE-----