Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ea0b01c8-e3a5-3b19-bf2c-e63c202979c1.roa
File:                     ea0b01c8-e3a5-3b19-bf2c-e63c202979c1.roa (raw, json)
Hash identifier:          Znpd1kwdPHN1eERa86W8eeV3TkLPZMUUVNrNOkreCrc=
Subject key identifier:   5B:76:F2:94:8F:4C:EE:43:99:72:31:01:B2:28:EB:82:DB:03:1B:F3
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285846B02A76DD708A9A33D320DB80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ea0b01c8-e3a5-3b19-bf2c-e63c202979c1.roa
Signing time:             Sun 28 Jul 2024 13:00:37 +0000
ROA not before:           Sun 28 Jul 2024 13:00:37 +0000
ROA not after:            Sat 26 Oct 2024 13:00:37 +0000
asID:                     138077
IP address blocks:        157.185.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b0:2a:76:dd:70:8a:9a:33:d3:20:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 28 13:00:37 2024 GMT
            Not After : Oct 26 13:00:37 2024 GMT
        Subject: CN=9656ca8b-bc6c-4c70-be58-1648d19c3900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:b0:76:e9:3c:c3:ea:9d:5e:a2:39:b4:e1:
                    41:94:8d:a0:d8:06:80:f6:1a:dd:ec:f6:44:1b:a2:
                    86:6e:0a:d1:43:80:fb:81:da:cd:3e:31:09:41:32:
                    81:1d:ce:bc:de:05:72:ad:7e:b3:86:44:23:c8:12:
                    03:6b:1e:37:5c:28:05:98:89:bd:26:88:ac:65:a0:
                    43:6e:36:b6:a9:a1:8e:b5:ce:68:da:a1:75:a4:68:
                    5c:63:c3:0b:ad:87:2b:a1:ac:4a:79:0c:6b:84:b9:
                    16:36:1c:f1:1e:ed:75:98:69:28:0c:97:da:ff:a0:
                    1b:06:34:9c:91:e7:4d:15:45:bd:50:d0:0b:ad:21:
                    04:2b:46:71:01:0d:90:da:bb:76:aa:92:53:54:1a:
                    42:8a:fc:1a:17:f5:0b:8c:47:43:9d:95:70:8e:46:
                    e4:3e:a8:a1:73:69:dd:27:28:f7:b5:2c:6e:27:f2:
                    88:0b:9d:ae:54:2d:f2:8c:11:01:5d:fa:6e:4d:57:
                    e0:62:56:03:3e:f7:d4:3a:b4:62:cc:85:65:17:24:
                    61:bd:6a:1c:5e:20:ea:24:38:35:75:5f:a2:f9:c0:
                    92:93:bf:74:15:f3:60:3a:5b:2a:e6:28:39:09:14:
                    b8:b7:ba:8c:f1:3f:69:7f:60:52:e1:9a:6b:c0:b1:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:76:F2:94:8F:4C:EE:43:99:72:31:01:B2:28:EB:82:DB:03:1B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ea0b01c8-e3a5-3b19-bf2c-e63c202979c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:73:62:07:84:e0:14:b1:45:60:97:ca:66:05:ee:58:3a:
         15:a0:32:2a:be:d7:e9:29:fc:5c:37:c3:a3:59:35:27:8d:5a:
         21:ca:bc:20:5c:f3:be:d2:ce:0e:8f:3c:17:20:5f:ce:76:09:
         9a:ea:af:c2:1c:0a:0d:ac:94:dc:11:6a:c7:3e:df:9f:c6:df:
         71:b6:e7:da:a1:41:9f:58:c8:be:55:63:46:6b:42:5d:39:dc:
         ad:a1:ab:0f:07:23:fa:96:87:7b:49:97:06:d0:f8:bc:48:6d:
         1c:f9:2f:98:43:39:4b:d7:3e:8c:02:1c:8b:b2:02:d0:4f:ab:
         be:db:28:db:c8:af:ad:ed:d1:55:5f:88:63:39:f0:d9:fa:9a:
         c0:f5:e6:70:78:79:27:ce:1b:c3:55:85:68:43:9d:6f:c6:15:
         36:ce:ac:f7:44:c4:c4:98:e2:f8:67:8d:5b:ff:6e:05:1e:94:
         7c:96:c4:6c:20:57:02:df:1c:1b:c3:65:1f:68:cc:f2:bf:c1:
         ef:7c:21:9c:98:0e:9f:f3:93:14:a7:a7:5a:13:57:30:98:7b:
         9e:6d:4d:00:22:51:5d:4d:c2:14:93:c9:67:b5:ca:c6:9b:f3:
         9f:2c:3e:2b:b8:85:0b:bd:4b:8a:bf:3b:7a:3c:a4:41:1b:74:
         a3:41:f6:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEawKnbdcIqaM9Mg24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI0MDcyODEzMDAzN1oXDTI0MTAyNjEzMDAzN1owLzEtMCsGA1UEAxMk
OTY1NmNhOGItYmM2Yy00YzcwLWJlNTgtMTY0OGQxOWMzOTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArISwduk8w+qdXqI5tOFBlI2g2AaA9hrd7PZE
G6KGbgrRQ4D7gdrNPjEJQTKBHc683gVyrX6zhkQjyBIDax43XCgFmIm9JoisZaBD
bja2qaGOtc5o2qF1pGhcY8MLrYcroaxKeQxrhLkWNhzxHu11mGkoDJfa/6AbBjSc
kedNFUW9UNALrSEEK0ZxAQ2Q2rt2qpJTVBpCivwaF/ULjEdDnZVwjkbkPqihc2nd
Jyj3tSxuJ/KIC52uVC3yjBEBXfpuTVfgYlYDPvfUOrRizIVlFyRhvWocXiDqJDg1
dV+i+cCSk790FfNgOlsq5ig5CRS4t7qM8T9pf2BS4ZprwLG8xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFt28pSPTO5DmXIxAbIo64LbAxvzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZWEwYjAxYzgtZTNhNS0z
YjE5LWJmMmMtZTYzYzIwMjk3OWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH//c2IHhOAUsUVgl8pmBe5YOhWgMiq+1+kp/Fw3w6NZNSeNWiHKvCBc
877Szg6PPBcgX852CZrqr8IcCg2slNwRasc+35/G33G259qhQZ9YyL5VY0ZrQl05
3K2hqw8HI/qWh3tJlwbQ+LxIbRz5L5hDOUvXPowCHIuyAtBPq77bKNvIr63t0VVf
iGM58Nn6msD15nB4eSfOG8NVhWhDnW/GFTbOrPdExMSY4vhnjVv/bgUelHyWxGwg
VwLfHBvDZR9ozPK/we98IZyYDp/zkxSnp1oTVzCYe55tTQAiUV1NwhSTyWe1ysab
858sPiu4hQu9S4q/O3o8pEEbdKNB9oQ=
-----END CERTIFICATE-----