Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b208dbc-0592-3ebd-85b9-2e3e28145e08.roa
File:                     9b208dbc-0592-3ebd-85b9-2e3e28145e08.roa (raw, json)
Hash identifier:          m+OAbhO3AIihAFS726WCsnlZW3Jhf+2Y7BGPErxz5nI=
Subject key identifier:   23:2C:28:F3:ED:26:BC:51:EA:3F:79:A8:48:32:34:5E:A9:78:6B:1A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858479C111EB73A3789CB9CB298A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b208dbc-0592-3ebd-85b9-2e3e28145e08.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     23495
IP address blocks:        192.85.78.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 14:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:1e:b7:3a:37:89:cb:9c:b2:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=90261775-f4da-4c1c-949a-59f0697cfb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:64:35:dd:c1:0a:04:65:b9:39:d9:59:9d:
                    68:df:d1:db:44:df:f6:97:4e:03:29:20:9d:06:f5:
                    f9:17:5d:1a:cd:b4:b6:bb:f4:c0:b7:1c:76:91:34:
                    e7:76:5f:8f:d5:42:5b:11:4b:c1:d5:bf:c4:75:b1:
                    83:a0:94:b7:62:2b:68:1d:26:68:3c:50:44:35:86:
                    d9:31:c4:41:f8:f1:e3:1d:bb:f4:de:4b:7f:ef:67:
                    7d:27:4a:72:62:8d:5d:60:c2:c1:a2:c5:2a:77:45:
                    d7:a1:f4:a7:f1:7c:ec:51:b2:8e:da:90:17:c2:9e:
                    d9:34:d5:fc:7e:46:6e:33:c6:19:b3:64:17:d4:75:
                    02:7d:f9:10:8d:10:c6:72:1c:ba:01:90:f9:f6:a4:
                    59:ff:6b:b6:89:91:af:04:b4:7d:07:a6:e6:2c:16:
                    23:95:8a:67:5e:4e:a5:9f:01:2e:b5:27:e0:c4:71:
                    8c:49:8f:47:45:d1:f8:5a:f7:f6:c2:97:7d:43:22:
                    1e:f6:67:e9:61:3b:8f:76:29:93:b0:eb:cf:03:94:
                    ad:e8:28:3b:b4:5a:cc:3e:1d:28:22:c6:c0:bd:c9:
                    c2:bd:4a:9b:87:33:5b:a7:36:76:70:d1:cb:28:0a:
                    a3:00:77:be:d6:84:52:91:d9:4b:c4:be:73:6b:e7:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2C:28:F3:ED:26:BC:51:EA:3F:79:A8:48:32:34:5E:A9:78:6B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b208dbc-0592-3ebd-85b9-2e3e28145e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:94:b7:ae:5a:40:8e:1c:ed:6a:61:f9:eb:eb:6e:a8:a2:8d:
         6b:a1:75:e5:6c:c5:72:b7:11:34:81:64:1a:81:01:50:b1:85:
         21:69:fc:26:b3:9b:84:a2:89:90:9a:d5:28:35:09:73:64:e4:
         79:94:e4:0d:37:12:0a:db:38:00:a0:80:71:b7:fb:aa:17:bd:
         0b:3e:77:d2:df:7f:36:43:44:02:94:d8:4b:9c:6b:41:88:42:
         00:6e:25:e4:d3:3b:c7:56:c8:e9:a7:49:fa:9a:d9:77:5c:04:
         d2:15:5a:aa:0c:b7:d9:34:a6:3b:12:5a:63:a8:51:b6:0c:c8:
         2a:05:41:b1:6a:20:56:2a:2b:21:aa:3d:92:55:9c:28:3d:37:
         ee:8b:b0:a8:40:d7:73:22:b8:aa:63:40:21:ac:ac:13:f9:92:
         18:d7:f0:10:fe:4c:df:ad:87:50:4a:6c:a4:78:42:35:31:0f:
         6a:5d:93:b8:3c:49:4e:66:ef:c8:37:33:2b:80:31:2e:3f:22:
         c4:cf:8f:40:0f:f4:d1:36:50:15:fc:9b:2c:3c:14:4b:62:d5:
         89:1e:ff:7f:b3:5a:2c:35:5e:c2:7e:d9:bb:8f:41:84:83:08:
         77:a9:de:9b:cc:3a:85:cc:a3:6d:74:9f:b8:f6:e5:8e:a6:3f:
         ce:e3:a5:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecER63OjeJy5yymKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
OTAyNjE3NzUtZjRkYS00YzFjLTk0OWEtNTlmMDY5N2NmYjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuFkNd3BCgRluTnZWZ1o39HbRN/2l04DKSCd
BvX5F10azbS2u/TAtxx2kTTndl+P1UJbEUvB1b/EdbGDoJS3YitoHSZoPFBENYbZ
McRB+PHjHbv03kt/72d9J0pyYo1dYMLBosUqd0XXofSn8XzsUbKO2pAXwp7ZNNX8
fkZuM8YZs2QX1HUCffkQjRDGchy6AZD59qRZ/2u2iZGvBLR9B6bmLBYjlYpnXk6l
nwEutSfgxHGMSY9HRdH4Wvf2wpd9QyIe9mfpYTuPdimTsOvPA5St6Cg7tFrMPh0o
IsbAvcnCvUqbhzNbpzZ2cNHLKAqjAHe+1oRSkdlLxL5za+dZ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMsKPPtJrxR6j95qEgyNF6peGsaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWIyMDhkYmMtMDU5Mi0z
ZWJkLTg1YjktMmUzZTI4MTQ1ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFVOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGUt65aQI4c7Wph+evrbqiijWuhdeVsxXK3ETSBZBqBAVCxhSFp/Caz
m4SiiZCa1Sg1CXNk5HmU5A03EgrbOACggHG3+6oXvQs+d9LffzZDRAKU2Euca0GI
QgBuJeTTO8dWyOmnSfqa2XdcBNIVWqoMt9k0pjsSWmOoUbYMyCoFQbFqIFYqKyGq
PZJVnCg9N+6LsKhA13MiuKpjQCGsrBP5khjX8BD+TN+th1BKbKR4QjUxD2pdk7g8
SU5m78g3MyuAMS4/IsTPj0AP9NE2UBX8myw8FEti1Yke/3+zWiw1XsJ+2buPQYSD
CHep3pvMOoXMo210n7j25Y6mP87jpbA=
-----END CERTIFICATE-----