Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/953f6278-74ef-3992-b250-5e0c4d4b26a1.roa
File:                     953f6278-74ef-3992-b250-5e0c4d4b26a1.roa (raw, json)
Hash identifier:          EPWxj0GeHliLTiRg/2DmCbQR/1t/AT/RNqAm20SkNxE=
Subject key identifier:   E1:C4:DF:2B:C3:FA:2B:F9:28:32:9A:DC:1C:66:6E:9E:E7:84:9F:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285844A36F88663DF78EF284D8EFA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/953f6278-74ef-3992-b250-5e0c4d4b26a1.roa
Signing time:             Mon 22 Jan 2024 14:00:31 +0000
ROA not before:           Mon 22 Jan 2024 14:00:31 +0000
ROA not after:            Sun 21 Apr 2024 13:00:31 +0000
asID:                     35994
IP address blocks:        23.43.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 15:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a3:6f:88:66:3d:f7:8e:f2:84:d8:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:31 2024 GMT
            Not After : Apr 21 13:00:31 2024 GMT
        Subject: CN=17536545-045a-4af4-8034-99a63a06428f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:88:8b:3a:45:45:7c:f3:55:65:b7:90:08:
                    71:4a:50:d4:d0:c0:6f:50:99:5d:5f:4a:7d:6d:4d:
                    f6:59:ad:90:99:c2:fb:5c:80:95:26:76:fb:36:a3:
                    5c:36:7d:3b:22:b7:40:6a:74:19:26:dd:41:20:b3:
                    1a:81:62:b2:ea:22:1d:8f:3a:fb:06:35:dd:e8:ad:
                    5d:f6:fc:4f:b2:bb:bb:cc:f9:ee:ce:b9:b2:4b:82:
                    d7:f4:1b:dd:87:1c:29:8f:5a:90:79:8d:0d:1c:4a:
                    46:f9:2b:ca:31:4a:55:29:f3:55:c2:6b:de:80:2c:
                    91:5a:01:26:a4:af:1b:64:59:89:ff:8e:2a:0a:13:
                    a9:47:f3:46:ee:40:47:20:d5:59:18:00:3a:4b:4c:
                    bd:1f:39:3d:71:97:d3:55:58:ca:62:65:eb:e5:a6:
                    24:f7:2c:64:22:6d:4d:0e:18:54:10:7e:0e:f4:61:
                    7d:b8:06:74:ef:18:57:88:f3:a2:aa:9e:a8:3c:a5:
                    b5:15:df:fe:d5:b8:3a:41:cd:9e:2d:95:07:35:ee:
                    ce:63:aa:21:8a:ee:d0:4a:57:f2:f0:d8:f2:a1:6f:
                    1a:2c:5a:1e:97:23:b0:96:4d:33:fb:bc:df:8c:39:
                    1b:22:e1:36:4e:43:19:57:64:5f:76:0b:28:39:8b:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:DF:2B:C3:FA:2B:F9:28:32:9A:DC:1C:66:6E:9E:E7:84:9F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/953f6278-74ef-3992-b250-5e0c4d4b26a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:f8:20:40:57:0d:88:ce:ad:ec:db:a4:b3:1d:61:10:9d:
         d5:d3:18:b0:3a:6c:fa:9f:de:e5:78:24:aa:c0:79:67:f4:b0:
         01:63:48:62:97:71:9b:ab:ef:40:7a:79:f8:05:4b:8f:d5:df:
         27:d1:bb:82:2c:9d:ab:7f:fc:ea:c4:e7:49:70:cc:b6:b2:b8:
         52:bb:4a:65:56:45:3e:18:7c:9b:5b:04:94:1a:be:46:32:f6:
         17:11:18:01:8d:42:24:7a:34:8d:e0:9c:ec:72:53:e8:61:d0:
         fb:da:bc:84:5c:8a:d3:bf:02:74:a3:7c:61:69:97:f2:4d:06:
         4d:ae:6e:a7:d7:5b:72:c1:91:b1:a0:5b:a6:53:b2:6c:07:d5:
         5f:cd:1e:40:4d:93:43:bf:3a:90:ab:80:4d:77:b1:01:08:73:
         43:53:33:17:cc:96:74:61:89:f0:94:ee:cc:69:33:f1:ed:cd:
         17:39:c9:e9:99:6b:64:c5:f0:c2:36:ba:27:e1:9d:b4:50:fe:
         55:d0:cb:58:9d:72:9a:0b:44:fb:28:76:98:fd:f5:94:48:2c:
         2b:cd:8e:49:d1:6c:20:ae:80:a6:f8:2f:47:37:27:c6:66:76:
         65:94:d9:2b:43:b4:32:d7:b7:e5:41:b1:66:f4:7d:de:ca:b0:
         b6:73:9e:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESjb4hmPfeO8oTY76AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDEyMjE0MDAzMVoXDTI0MDQyMTEzMDAzMVowLzEtMCsGA1UEAxMk
MTc1MzY1NDUtMDQ1YS00YWY0LTgwMzQtOTlhNjNhMDY0MjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCKIizpFRXzzVWW3kAhxSlDU0MBvUJldX0p9
bU32Wa2QmcL7XICVJnb7NqNcNn07IrdAanQZJt1BILMagWKy6iIdjzr7BjXd6K1d
9vxPsru7zPnuzrmyS4LX9Bvdhxwpj1qQeY0NHEpG+SvKMUpVKfNVwmvegCyRWgEm
pK8bZFmJ/44qChOpR/NG7kBHINVZGAA6S0y9Hzk9cZfTVVjKYmXr5aYk9yxkIm1N
DhhUEH4O9GF9uAZ07xhXiPOiqp6oPKW1Fd/+1bg6Qc2eLZUHNe7OY6ohiu7QSlfy
8NjyoW8aLFoelyOwlk0z+7zfjDkbIuE2TkMZV2RfdgsoOYvk3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHE3yvD+iv5KDKa3Bxmbp7nhJ8aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTUzZjYyNzgtNzRlZi0z
OTkyLWIyNTAtNWUwYzRkNGIyNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFysyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE33+CBAVw2Izq3s26SzHWEQndXTGLA6bPqf3uV4JKrAeWf0sAFjSGKX
cZur70B6efgFS4/V3yfRu4Isnat//OrE50lwzLayuFK7SmVWRT4YfJtbBJQavkYy
9hcRGAGNQiR6NI3gnOxyU+hh0PvavIRcitO/AnSjfGFpl/JNBk2ubqfXW3LBkbGg
W6ZTsmwH1V/NHkBNk0O/OpCrgE13sQEIc0NTMxfMlnRhifCU7sxpM/HtzRc5yemZ
a2TF8MI2uifhnbRQ/lXQy1idcpoLRPsodpj99ZRILCvNjknRbCCugKb4L0c3J8Zm
dmWU2StDtDLXt+VBsWb0fd7KsLZzngk=
-----END CERTIFICATE-----