Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f3edefb-b738-3504-ad0d-750e89f720ae.roa
File:                     2f3edefb-b738-3504-ad0d-750e89f720ae.roa (raw, json)
Hash identifier:          Y0SCkVAGqyqFO4SuZNd4kZLIiKbxMN0kdRw/XXo1sIY=
Subject key identifier:   CD:45:1C:EB:57:80:9A:FE:29:27:7F:C9:8B:71:4B:05:91:C4:E3:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E048CB427
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f3edefb-b738-3504-ad0d-750e89f720ae.roa
Signing time:             Fri 25 Oct 2019 20:12:40 +0000
ROA not before:           Tue 22 Oct 2019 04:00:00 +0000
ROA not after:            Mon 22 Oct 2029 04:00:00 +0000
asID:                     14218
IP address blocks:        63.117.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:04:8c:b4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 22 04:00:00 2019 GMT
            Not After : Oct 22 04:00:00 2029 GMT
        Subject: CN=20f32007-b0ec-42b8-be0e-cd2e57de3905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:b1:51:55:e4:f6:08:42:7b:87:c8:27:47:
                    e0:50:92:9d:1f:9e:76:06:56:60:38:5e:71:5c:95:
                    e9:3e:c0:f4:c4:91:6c:51:f7:de:01:15:69:7f:71:
                    fd:00:b7:df:90:e5:13:e7:2b:df:b8:61:55:cb:d0:
                    2c:b6:2c:4a:21:e9:5f:e5:09:87:b3:4b:8a:ae:1e:
                    6e:b2:88:27:7b:90:74:27:f0:dd:63:d5:b3:25:1f:
                    dc:d5:97:f0:e4:55:b0:88:fd:c5:d8:21:cc:99:cf:
                    bb:9d:f4:2b:d7:13:a2:b7:b3:44:ab:0f:03:6c:af:
                    a7:ee:88:fa:07:d2:51:3a:dd:40:3d:3a:e9:03:79:
                    eb:af:91:9c:da:e2:92:09:ec:67:0f:6c:60:6f:d3:
                    40:4e:3e:2e:78:1e:42:bf:6d:fa:d1:8b:ea:b2:58:
                    c2:6d:46:6c:1d:f8:53:2d:12:93:ff:7c:a3:ff:39:
                    10:08:7b:85:04:b6:ae:5b:92:03:75:b0:35:86:a2:
                    d3:da:b8:0f:8a:3b:cd:b0:ad:d1:8a:74:83:cf:50:
                    19:03:af:d5:30:af:b2:20:1f:d3:78:81:d7:fc:c5:
                    6c:74:f9:4c:dd:69:11:3f:1c:8f:4a:eb:fb:2c:35:
                    fa:47:7d:4b:81:3b:b0:47:1d:62:2f:17:34:58:bc:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:45:1C:EB:57:80:9A:FE:29:27:7F:C9:8B:71:4B:05:91:C4:E3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f3edefb-b738-3504-ad0d-750e89f720ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.117.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6b:26:c5:32:5d:98:54:2a:50:29:6c:cd:21:6d:22:c1:cc:
         fe:4e:82:9f:da:f6:17:69:00:0f:46:30:99:54:0c:ec:28:c3:
         5a:bf:1d:b6:d0:9d:df:f8:fc:5c:02:8a:b3:07:2a:0a:33:e9:
         c0:dd:05:42:67:91:e1:1f:d8:b6:4b:4a:40:d4:d5:c6:16:cb:
         e5:1a:90:37:4c:c7:e3:09:bd:da:2f:ef:63:b9:c8:63:7d:d7:
         9c:a3:ad:9a:45:24:7d:fe:cb:50:33:53:43:6a:9e:96:2c:8c:
         c1:31:8c:65:40:e2:a9:46:e7:2d:de:27:2b:4a:67:5e:53:0f:
         47:9c:9f:32:93:00:b5:24:7f:f5:10:50:10:c8:df:c7:47:52:
         78:93:d0:1e:6d:74:4d:c8:a4:6d:45:59:56:f3:26:6f:4f:5a:
         68:36:53:36:0a:20:e7:29:47:01:c7:b6:9f:4f:21:25:00:a1:
         cd:bb:fd:dd:7e:68:7f:ca:e0:93:78:4e:25:d3:8d:24:01:24:
         43:a9:d4:87:04:77:4a:f9:b9:c2:51:d4:15:f9:47:06:92:5f:
         8e:82:49:f1:a4:c3:7d:92:28:7c:48:81:e1:33:4e:46:a8:68:
         12:8d:f6:8a:ed:93:a4:0b:2b:52:fe:87:00:b1:69:cb:f0:ae:
         74:a2:ca:48
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbgSMtCcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMyMDg3
ODAeFw0xOTEwMjIwNDAwMDBaFw0yOTEwMjIwNDAwMDBaMC8xLTArBgNVBAMTJDIw
ZjMyMDA3LWIwZWMtNDJiOC1iZTBlLWNkMmU1N2RlMzkwNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALessVFV5PYIQnuHyCdH4FCSnR+edgZWYDhecVyV
6T7A9MSRbFH33gEVaX9x/QC335DlE+cr37hhVcvQLLYsSiHpX+UJh7NLiq4ebrKI
J3uQdCfw3WPVsyUf3NWX8ORVsIj9xdghzJnPu530K9cTorezRKsPA2yvp+6I+gfS
UTrdQD066QN566+RnNrikgnsZw9sYG/TQE4+LngeQr9t+tGL6rJYwm1GbB34Uy0S
k/98o/85EAh7hQS2rluSA3WwNYai09q4D4o7zbCt0Yp0g89QGQOv1TCvsiAf03iB
1/zFbHT5TN1pET8cj0rr+yw1+kd9S4E7sEcdYi8XNFi8GZECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTNRRzrV4Ca/iknf8mLcUsFkcTjYDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgw
NjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIwODc4LzJmM2VkZWZiLWI3MzgtMzUw
NC1hZDBkLTc1MGU4OWY3MjBhZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzczMjk4MDYyLWJkOGItNGI5Zi04NjEz
LWRlYjZlOWMyMDg3OC83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4
NzguY3JsMB8GA1UdIwQYMBaAFCmSwjWwiUC+ja0xys8TpLtfWOrmMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5
YzIwODc4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD91pzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAV2smxTJdmFQqUClszSFtIsHM/k6Cn9r2F2kAD0YwmVQM7CjDWr8dttCd3/j8
XAKKswcqCjPpwN0FQmeR4R/YtktKQNTVxhbL5RqQN0zH4wm92i/vY7nIY33XnKOt
mkUkff7LUDNTQ2qeliyMwTGMZUDiqUbnLd4nK0pnXlMPR5yfMpMAtSR/9RBQEMjf
x0dSeJPQHm10TcikbUVZVvMmb09aaDZTNgog5ylHAce2n08hJQChzbv93X5of8rg
k3hOJdONJAEkQ6nUhwR3Svm5wlHUFflHBpJfjoJJ8aTDfZIofEiB4TNORqhoEo32
iu2TpAsrUv6HALFpy/CudKLKSA==
-----END CERTIFICATE-----