Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/6b613e0f-33b8-38ad-8397-7836eedb93e3.roa
File:                     6b613e0f-33b8-38ad-8397-7836eedb93e3.roa (raw, json)
Hash identifier:          yFziQil7ZevXxQQwLS9rMJTHDdxORNCPJfjjI03+upQ=
Subject key identifier:   8E:3E:BD:D1:0A:42:DA:C2:77:52:99:36:53:A3:1F:94:84:0E:A2:40
Certificate issuer:       /CN=b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec
Certificate serial:       010D0C9F4328583FCBF58EEA3DD118CBEC1C3180
Authority key identifier: 32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/6b613e0f-33b8-38ad-8397-7836eedb93e3.roa
Signing time:             Thu 15 Apr 2021 19:28:37 +0000
ROA not before:           Thu 15 Apr 2021 19:28:37 +0000
ROA not after:            Thu 06 Feb 2025 05:00:00 +0000
asID:                     55154
IP address blocks:        203.31.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Feb 2023 17:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:f5:8e:ea:3d:d1:18:cb:ec:1c:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec
        Validity
            Not Before: Apr 15 19:28:37 2021 GMT
            Not After : Feb  6 05:00:00 2025 GMT
        Subject: CN=d2a29403-df86-42fc-8499-58fdc2417067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:a0:09:02:66:74:54:eb:f8:f2:4d:fa:b1:
                    14:c4:fc:5d:8c:51:8e:4e:44:06:ac:1d:e9:f0:df:
                    a2:81:16:b6:8d:f2:a8:eb:6c:cb:19:e0:4b:07:2e:
                    33:e0:cb:4c:4e:70:8a:2e:02:55:58:f0:7c:d0:c7:
                    94:2a:dc:bd:46:7b:42:3f:e1:b5:47:d3:40:c4:0f:
                    9f:35:da:46:95:1b:6f:72:98:f0:da:4c:cc:ea:96:
                    84:ac:bf:61:b7:3e:19:a2:9d:64:74:bd:99:43:ac:
                    ed:40:7c:b7:f3:22:25:31:2f:2b:e6:57:9d:37:1b:
                    eb:90:6a:40:1d:46:57:21:23:7e:0a:4c:59:22:63:
                    ed:35:2f:c1:50:a7:0d:76:75:f9:25:42:c7:05:9e:
                    fc:da:b5:75:e0:33:50:25:70:75:e7:d4:b3:8c:50:
                    2b:31:27:93:f6:b9:39:61:4c:dd:fb:40:2e:6e:c5:
                    28:81:ff:6d:bb:a1:88:98:42:d8:ea:3b:e8:1f:d3:
                    10:8e:46:c6:b4:11:bf:a6:eb:c6:95:b2:58:66:a2:
                    79:cb:b6:8a:86:00:e9:cb:d6:ea:73:3f:0e:c6:7a:
                    04:3b:40:b6:48:f1:f9:c8:d6:dd:95:bc:19:d5:db:
                    62:c3:89:2b:3b:62:de:7b:fe:7d:6f:07:05:9b:88:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:BD:D1:0A:42:DA:C2:77:52:99:36:53:A3:1F:94:84:0E:A2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/6b613e0f-33b8-38ad-8397-7836eedb93e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.crl

            X509v3 Authority Key Identifier:
                keyid:32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:38:9a:c4:f9:ca:39:3e:c0:09:3a:e1:ea:c3:a1:7f:e2:fe:
         33:f8:bf:b8:13:fa:78:3d:af:5b:69:78:5d:44:ba:d0:b7:53:
         bc:74:71:bf:81:b3:0f:c6:e8:ef:41:fe:2f:93:34:8b:21:87:
         14:c6:08:a6:5f:8d:82:d0:c3:1a:69:a1:a8:08:9e:a3:d0:c9:
         3d:ad:9d:74:1f:40:51:01:70:fc:39:c1:fa:21:95:51:b9:63:
         b4:25:f6:95:c8:43:7b:fe:de:32:ec:48:52:6f:91:b8:6a:8e:
         ec:13:bb:1d:13:51:f1:ce:0a:ed:35:6e:bc:c6:a5:cf:32:97:
         4a:b5:54:de:ca:3e:37:ae:70:93:72:48:0c:40:f8:d5:a6:ca:
         23:0b:f8:a0:a7:9c:fb:09:9a:6d:dc:39:75:fe:74:7f:3e:93:
         bd:42:51:36:a5:88:d7:1f:9c:20:5f:96:38:8a:23:5e:82:34:
         30:38:72:a7:c5:aa:85:02:89:95:13:45:de:e2:52:30:1a:dc:
         8e:da:29:d1:52:94:e8:ad:b1:a8:d7:e8:81:6f:8c:2e:33:68:
         b3:8a:be:25:0d:b4:e7:8a:4f:25:9a:2b:22:bb:e7:3b:bd:1b:
         ea:11:01:79:5b:9d:f0:3c:40:7a:10:d0:1e:9d:7d:59:58:6f:
         05:e4:00:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/L9Y7qPdEYy+wcMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU4YmRkZDItYjljMC00ZTBhLWE3Y2MtZTRmNGNiMWI2
MGVjMB4XDTIxMDQxNTE5MjgzN1oXDTI1MDIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZDJhMjk0MDMtZGY4Ni00MmZjLTg0OTktNThmZGMyNDE3MDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOSgCQJmdFTr+PJN+rEUxPxdjFGOTkQGrB3p
8N+igRa2jfKo62zLGeBLBy4z4MtMTnCKLgJVWPB80MeUKty9RntCP+G1R9NAxA+f
NdpGlRtvcpjw2kzM6paErL9htz4Zop1kdL2ZQ6ztQHy38yIlMS8r5ledNxvrkGpA
HUZXISN+CkxZImPtNS/BUKcNdnX5JULHBZ782rV14DNQJXB159SzjFArMSeT9rk5
YUzd+0AubsUogf9tu6GImELY6jvoH9MQjkbGtBG/puvGlbJYZqJ5y7aKhgDpy9bq
cz8OxnoEO0C2SPH5yNbdlbwZ1dtiw4krO2Lee/59bwcFm4hCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4+vdEKQtrCd1KZNlOjH5SEDqJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThi
ZGRkMi1iOWMwLTRlMGEtYTdjYy1lNGY0Y2IxYjYwZWMvNmI2MTNlMGYtMzNiOC0z
OGFkLTgzOTctNzgzNmVlZGI5M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjU4YmRkZDItYjljMC00ZTBhLWE3
Y2MtZTRmNGNiMWI2MGVjL2I1OGJkZGQyLWI5YzAtNGUwYS1hN2NjLWU0ZjRjYjFi
NjBlYy5jcmwwHwYDVR0jBBgwFoAUMhxCyParsrE7GgSS7vILEu0OdNMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThiZGRkMi1iOWMwLTRlMGEtYTdjYy1lNGY0
Y2IxYjYwZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyx/1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM04msT5yjk+wAk64erDoX/i/jP4v7gT+ng9r1tpeF1EutC3U7x0cb+B
sw/G6O9B/i+TNIshhxTGCKZfjYLQwxppoagInqPQyT2tnXQfQFEBcPw5wfohlVG5
Y7Ql9pXIQ3v+3jLsSFJvkbhqjuwTux0TUfHOCu01brzGpc8yl0q1VN7KPjeucJNy
SAxA+NWmyiML+KCnnPsJmm3cOXX+dH8+k71CUTaliNcfnCBfljiKI16CNDA4cqfF
qoUCiZUTRd7iUjAa3I7aKdFSlOitsajX6IFvjC4zaLOKviUNtOeKTyWaKyK75zu9
G+oRAXlbnfA8QHoQ0B6dfVlYbwXkADM=
-----END CERTIFICATE-----