Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/4c08c8e4-a1ca-3fc9-8dfa-eda63ead4328.roa
File:                     4c08c8e4-a1ca-3fc9-8dfa-eda63ead4328.roa (raw, json)
Hash identifier:          IR4emzgmDMqfzv9keu3gV1ICgiwINVxFSQnBcs7Str8=
Subject key identifier:   71:CF:B8:5E:06:27:37:CC:F9:52:AB:31:83:50:82:B8:FC:76:68:FE
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F4328584757AD848E816F582059D17B80
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/4c08c8e4-a1ca-3fc9-8dfa-eda63ead4328.roa
Signing time:             Thu 26 Sep 2024 13:04:54 +0000
ROA not before:           Thu 26 Sep 2024 13:04:54 +0000
ROA not after:            Wed 25 Dec 2024 14:04:54 +0000
asID:                     996
IP address blocks:        141.195.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 12:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ad:84:8e:81:6f:58:20:59:d1:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Sep 26 13:04:54 2024 GMT
            Not After : Dec 25 14:04:54 2024 GMT
        Subject: CN=e6385600-49c6-4d0e-803b-2eb7bf340e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b7:dd:28:b3:be:c6:68:59:67:64:ea:a5:ac:
                    5e:37:1f:7f:6b:04:09:3f:f0:10:9a:33:c8:f8:35:
                    c2:a0:30:41:cc:11:19:b8:a8:0d:73:55:c0:9f:54:
                    39:2c:64:83:78:fe:c6:d7:23:3a:03:a2:46:a5:1a:
                    9f:e1:cc:1f:90:e5:63:e1:56:5f:49:b3:f7:52:cf:
                    bc:33:a5:59:30:a2:e6:6c:65:45:74:5e:39:4a:5c:
                    18:6d:3a:3c:77:26:c5:77:93:6b:96:73:81:9b:1d:
                    79:d8:f4:56:74:32:64:a6:3f:4b:99:e3:9c:ba:10:
                    86:10:40:cc:1f:cb:c9:40:ce:47:ae:22:59:bf:ac:
                    02:ad:d7:46:d0:e5:ef:3f:c2:28:ca:3a:8b:4e:7e:
                    05:96:d7:e7:4f:12:e9:ed:50:a9:ea:99:d1:91:ad:
                    05:ba:1c:66:08:21:03:77:f8:bf:d0:37:7b:a0:72:
                    07:9b:50:85:90:1a:8f:b9:a5:43:2c:83:b0:ff:f6:
                    50:5c:5f:0e:f7:74:bd:37:d8:12:67:ee:c7:9e:36:
                    3f:b3:15:ec:f0:ed:9c:d4:b7:a2:a8:1e:75:4e:8c:
                    d0:c3:08:b7:bc:00:c2:68:d9:60:47:c1:11:36:3b:
                    45:23:9d:28:86:42:26:3d:bd:7e:a4:ce:65:7a:6c:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CF:B8:5E:06:27:37:CC:F9:52:AB:31:83:50:82:B8:FC:76:68:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/4c08c8e4-a1ca-3fc9-8dfa-eda63ead4328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:09:c4:85:74:ba:a3:1a:cc:a6:50:96:d4:c5:63:5e:c7:fc:
         34:cf:91:9f:95:df:56:34:c3:00:b5:06:c4:90:eb:e8:61:06:
         fb:1b:32:3d:e6:6f:1a:7c:0f:69:fb:8b:41:66:45:b9:42:b5:
         40:f7:ac:bc:5b:fd:9f:da:36:59:05:95:80:dc:59:e9:b9:d4:
         b2:6a:0e:2c:b6:bb:64:95:65:9f:59:53:00:99:cd:d0:f1:9e:
         fc:62:e8:ed:bb:32:0c:56:35:b6:ed:9b:49:d1:4a:15:39:47:
         ac:39:06:8d:04:a1:ac:a5:9e:20:33:6a:54:bb:4e:58:03:95:
         6a:b6:f0:fb:94:cd:08:95:2b:d3:e1:07:2b:87:3d:4a:48:04:
         8c:25:41:5f:31:94:c9:31:86:af:99:3b:e5:76:83:3b:a5:48:
         d9:28:ec:20:b5:e4:05:4e:7b:5c:87:68:b1:30:25:db:de:ce:
         5f:72:21:54:f4:45:b6:ca:3a:76:ee:2f:56:3d:10:7e:7e:ec:
         f1:6a:03:c0:81:46:ed:9c:62:08:5f:0a:4d:12:ba:2a:39:3a:
         1f:60:3e:c7:55:e5:77:f8:9c:f1:0c:6e:ba:9d:00:91:12:c5:
         f2:95:fc:11:0b:1c:e0:9e:70:0e:4a:27:9a:18:3c:47:53:0e:
         11:43:5e:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdXrYSOgW9YIFnRe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1
ZTVjMB4XDTI0MDkyNjEzMDQ1NFoXDTI0MTIyNTE0MDQ1NFowLzEtMCsGA1UEAxMk
ZTYzODU2MDAtNDljNi00ZDBlLTgwM2ItMmViN2JmMzQwZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bfdKLO+xmhZZ2TqpaxeNx9/awQJP/AQmjPI
+DXCoDBBzBEZuKgNc1XAn1Q5LGSDeP7G1yM6A6JGpRqf4cwfkOVj4VZfSbP3Us+8
M6VZMKLmbGVFdF45SlwYbTo8dybFd5NrlnOBmx152PRWdDJkpj9LmeOcuhCGEEDM
H8vJQM5HriJZv6wCrddG0OXvP8IoyjqLTn4FltfnTxLp7VCp6pnRka0FuhxmCCED
d/i/0Dd7oHIHm1CFkBqPuaVDLIOw//ZQXF8O93S9N9gSZ+7HnjY/sxXs8O2c1Lei
qB51TozQwwi3vADCaNlgR8ERNjtFI50ohkImPb1+pM5lemzGlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHPuF4GJzfM+VKrMYNQgrj8dmj+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk
OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvNGMwOGM4ZTQtYTFjYS0z
ZmM5LThkZmEtZWRhNjNlYWQ0MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj
N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz
NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0
MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAJxIV0uqMazKZQltTFY17H/DTPkZ+V31Y0wwC1BsSQ6+hhBvsbMj3m
bxp8D2n7i0FmRblCtUD3rLxb/Z/aNlkFlYDcWem51LJqDiy2u2SVZZ9ZUwCZzdDx
nvxi6O27MgxWNbbtm0nRShU5R6w5Bo0EoaylniAzalS7TlgDlWq28PuUzQiVK9Ph
ByuHPUpIBIwlQV8xlMkxhq+ZO+V2gzulSNko7CC15AVOe1yHaLEwJdvezl9yIVT0
RbbKOnbuL1Y9EH5+7PFqA8CBRu2cYghfCk0Suio5Oh9gPsdV5Xf4nPEMbrqdAJES
xfKV/BELHOCecA5KJ5oYPEdTDhFDXtc=
-----END CERTIFICATE-----