Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/7d2bbb76-4fdc-3d41-bfb9-891e7411a1d6.roa
File:                     7d2bbb76-4fdc-3d41-bfb9-891e7411a1d6.roa (raw, json)
Hash identifier:          Yjur+A2A48hI8Olvc5OJ861S8c4q78WQhY/hIa69SlM=
Subject key identifier:   EC:A6:30:CE:F5:6B:C8:7D:17:55:9E:C7:32:19:13:EE:55:46:F1:F5
Certificate issuer:       /CN=edf51793-87f2-4529-9445-f4d5f104573e
Certificate serial:       010D0C9F432858448089DFE82775AAA46F1EA475
Authority key identifier: 7D:8B:C5:C2:D7:06:D4:1F:57:61:78:48:11:6F:D3:55:0F:E8:AA:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/7d2bbb76-4fdc-3d41-bfb9-891e7411a1d6.roa
Signing time:             Wed 10 Jan 2024 02:00:24 +0000
ROA not before:           Wed 10 Jan 2024 02:00:24 +0000
ROA not after:            Tue 09 Apr 2024 01:00:24 +0000
asID:                     8100
IP address blocks:        192.157.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 16:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:80:89:df:e8:27:75:aa:a4:6f:1e:a4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf51793-87f2-4529-9445-f4d5f104573e
        Validity
            Not Before: Jan 10 02:00:24 2024 GMT
            Not After : Apr  9 01:00:24 2024 GMT
        Subject: CN=8d8cd392-b56b-46cf-8819-3976804c4438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:d4:81:0d:8c:57:c0:31:1b:e6:4d:aa:d0:
                    42:1e:13:c0:d9:c3:e4:10:d8:3e:83:c7:fd:3b:2b:
                    43:98:1d:56:a2:52:a6:cf:ff:7c:cb:34:d3:bd:03:
                    73:fc:5e:37:d0:29:ed:86:e0:0b:53:7a:9f:6e:bd:
                    dd:55:4e:2d:1f:6a:51:0f:21:ce:e0:27:74:17:d1:
                    98:c5:23:31:78:b8:52:51:9b:3a:12:76:da:ef:c4:
                    5e:87:cf:76:ce:a2:4a:63:42:b1:06:f9:18:3f:bc:
                    65:74:4a:17:ec:33:69:48:de:f4:fc:77:2f:c3:8a:
                    89:73:fe:e7:38:1f:92:19:aa:23:af:ed:32:8f:70:
                    d5:7e:92:6c:2c:db:37:25:50:e2:4d:ca:a7:b4:09:
                    0f:3d:f4:b6:48:34:4e:a0:c6:7c:2b:3a:9a:c5:f3:
                    1f:3f:04:e9:b9:52:e3:67:ea:ab:84:2c:75:a4:60:
                    98:82:c9:f4:4b:80:f7:e5:eb:60:07:2d:88:85:0d:
                    5f:b7:ac:c9:db:1e:19:41:74:7e:44:3a:48:5f:2f:
                    60:96:36:7e:c8:4d:f6:77:67:77:03:a9:49:dd:27:
                    c6:20:1b:69:af:5b:c5:c2:68:17:f2:dd:9e:74:4f:
                    ba:96:14:83:3d:65:8a:1f:13:35:d2:77:23:a2:dc:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:30:CE:F5:6B:C8:7D:17:55:9E:C7:32:19:13:EE:55:46:F1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/7d2bbb76-4fdc-3d41-bfb9-891e7411a1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/edf51793-87f2-4529-9445-f4d5f104573e.crl

            X509v3 Authority Key Identifier:
                keyid:7D:8B:C5:C2:D7:06:D4:1F:57:61:78:48:11:6F:D3:55:0F:E8:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5e:66:69:6f:2c:25:f4:d9:f3:83:dd:72:61:4e:f2:e7:45:
         f3:ed:75:e9:eb:16:f1:97:8e:c6:c5:bd:b4:69:39:97:a8:ee:
         43:bb:53:31:5c:dd:2b:42:c2:cb:0e:f3:6f:de:a1:54:81:9b:
         94:36:51:4a:e3:76:0b:6b:dd:bd:06:1d:68:3b:fb:03:c3:b7:
         33:b9:73:46:7c:93:4a:97:70:85:67:15:af:d1:bd:0b:42:6f:
         59:4d:0d:0e:ff:e4:93:f2:e0:78:6f:78:36:86:cf:6f:23:fa:
         e7:ab:42:54:03:f2:ab:3c:a0:a2:11:87:93:c3:14:b4:9e:9b:
         ee:fd:c1:a9:38:f5:f1:c3:15:fa:88:d8:ca:b2:30:fd:15:9e:
         a1:d8:c9:5d:fa:91:3a:2e:8f:2a:66:72:2c:47:fc:6c:60:0f:
         50:bf:40:7f:11:b0:52:b6:9f:dd:37:e7:44:08:54:8e:d5:2c:
         a7:06:95:9b:f8:3c:45:dd:23:ff:83:0c:7c:82:33:e2:02:cb:
         bd:dd:42:90:e1:2a:8d:60:13:f0:b0:2a:8c:cd:88:e7:d5:30:
         9d:23:05:b3:b7:2d:60:a5:38:69:21:01:5b:a8:e3:0c:82:64:
         65:e4:f3:a0:38:a9:2d:e8:ac:da:a1:6c:ad:c9:69:aa:3b:28:
         e3:9e:79:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESAid/oJ3WqpG8epHUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRmNTE3OTMtODdmMi00NTI5LTk0NDUtZjRkNWYxMDQ1
NzNlMB4XDTI0MDExMDAyMDAyNFoXDTI0MDQwOTAxMDAyNFowLzEtMCsGA1UEAxMk
OGQ4Y2QzOTItYjU2Yi00NmNmLTg4MTktMzk3NjgwNGM0NDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6LUgQ2MV8AxG+ZNqtBCHhPA2cPkENg+g8f9
OytDmB1WolKmz/98yzTTvQNz/F430CnthuALU3qfbr3dVU4tH2pRDyHO4Cd0F9GY
xSMxeLhSUZs6Enba78Reh892zqJKY0KxBvkYP7xldEoX7DNpSN70/Hcvw4qJc/7n
OB+SGaojr+0yj3DVfpJsLNs3JVDiTcqntAkPPfS2SDROoMZ8KzqaxfMfPwTpuVLj
Z+qrhCx1pGCYgsn0S4D35etgBy2IhQ1ft6zJ2x4ZQXR+RDpIXy9gljZ+yE32d2d3
A6lJ3SfGIBtpr1vFwmgX8t2edE+6lhSDPWWKHxM10ncjotzoEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOymMM71a8h9F1WexzIZE+5VRvH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZGY1
MTc5My04N2YyLTQ1MjktOTQ0NS1mNGQ1ZjEwNDU3M2UvN2QyYmJiNzYtNGZkYy0z
ZDQxLWJmYjktODkxZTc0MTFhMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWRmNTE3OTMtODdmMi00NTI5LTk0
NDUtZjRkNWYxMDQ1NzNlL2VkZjUxNzkzLTg3ZjItNDUyOS05NDQ1LWY0ZDVmMTA0
NTczZS5jcmwwHwYDVR0jBBgwFoAUfYvFwtcG1B9XYXhIEW/TVQ/oqhgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lZGY1MTc5My04N2YyLTQ1MjktOTQ0NS1mNGQ1
ZjEwNDU3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ0dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZeZmlvLCX02fOD3XJhTvLnRfPtdenrFvGXjsbFvbRpOZeo7kO7UzFc
3StCwssO82/eoVSBm5Q2UUrjdgtr3b0GHWg7+wPDtzO5c0Z8k0qXcIVnFa/RvQtC
b1lNDQ7/5JPy4HhveDaGz28j+uerQlQD8qs8oKIRh5PDFLSem+79wak49fHDFfqI
2MqyMP0VnqHYyV36kToujypmcixH/GxgD1C/QH8RsFK2n90350QIVI7VLKcGlZv4
PEXdI/+DDHyCM+ICy73dQpDhKo1gE/CwKozNiOfVMJ0jBbO3LWClOGkhAVuo4wyC
ZGXk86A4qS3orNqhbK3Jaao7KOOeeZU=
-----END CERTIFICATE-----