Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ae6428c-8c3d-385c-91f3-f61a9450c85f.roa
File:                     5ae6428c-8c3d-385c-91f3-f61a9450c85f.roa (raw, json)
Hash identifier:          X93rQoP11u6kL9/tbAhLBf17gMGch6I6vn/zDn2yjLQ=
Subject key identifier:   74:42:81:60:3B:77:CD:11:C1:2D:71:DC:2D:18:49:9E:B1:E5:1F:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07263AD617A0FB8455222740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ae6428c-8c3d-385c-91f3-f61a9450c85f.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        65.44.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 18:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:26:3a:d6:17:a0:fb:84:55:22:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=40a1a20a-e413-4644-80d6-32d262013d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:94:36:b0:1b:dd:85:b3:6e:80:b8:a9:5d:
                    c5:d9:3b:2d:bf:b0:ee:f6:8f:e9:eb:60:97:38:a4:
                    2f:7b:86:84:0d:0a:84:4e:1f:29:11:3b:3a:d4:54:
                    6a:ce:af:41:f8:43:e3:a9:c0:89:54:7c:1f:d1:c9:
                    58:32:94:ec:0f:4e:fb:2c:b1:6e:ab:4f:70:89:3f:
                    c2:ef:82:fb:c9:dc:24:9a:f4:d4:b0:cd:46:3d:8c:
                    f4:5a:94:cd:5e:e3:40:0c:6e:81:36:b4:25:80:5a:
                    fb:e1:25:77:a9:a8:b5:4e:56:16:45:db:dd:21:c7:
                    9f:0b:fe:3a:2a:49:86:5b:e9:6c:f0:26:d0:f6:ec:
                    ad:66:08:4e:e3:47:16:4f:32:dd:4c:ad:b7:10:fe:
                    21:e6:5f:0d:5a:ba:d9:fd:cb:6b:f4:36:40:03:66:
                    b7:82:14:14:1a:69:b8:f9:80:43:89:94:58:65:86:
                    d0:ac:fd:c2:29:30:c9:94:5e:a3:44:df:3e:d4:69:
                    56:32:ec:5d:16:f2:af:43:f9:7b:c0:e9:2b:59:0d:
                    92:c1:11:42:9a:ed:1d:c3:9d:23:60:e3:8e:75:ae:
                    9e:a9:0c:75:e0:8c:2d:4f:e6:9d:98:85:4e:69:e6:
                    12:b4:3b:f1:cc:99:c2:5a:cc:2c:9a:e3:b2:73:09:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:81:60:3B:77:CD:11:C1:2D:71:DC:2D:18:49:9E:B1:E5:1F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ae6428c-8c3d-385c-91f3-f61a9450c85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.44.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:e9:28:6b:3c:cb:36:d8:77:74:61:5c:dd:e4:1e:2a:e1:
         09:cb:fb:30:d7:66:20:46:90:1b:bc:34:df:fe:5a:c1:46:ea:
         9e:e3:12:ff:8a:2d:16:87:d7:5e:0a:8e:c4:de:6f:d3:ec:5b:
         a5:5b:9d:66:b8:61:52:e0:7f:0b:5a:db:33:5d:6c:48:2d:36:
         eb:aa:ab:04:56:ec:e8:73:7b:bc:b7:38:c5:d3:36:05:bb:d9:
         21:e0:21:6d:10:95:e4:9d:a0:56:8a:18:9c:e4:ce:87:0f:53:
         74:67:6d:dc:eb:03:67:9b:d4:a4:01:61:74:71:80:d4:88:c1:
         1b:7f:4e:7a:42:38:a2:52:f2:fe:7b:7a:f2:b5:a6:75:fb:65:
         17:73:6a:43:80:af:95:4a:0a:4e:1b:6a:92:8b:d4:38:e7:97:
         9e:fb:3b:99:44:ee:ee:43:ae:ca:c6:dc:1f:af:45:21:9a:1f:
         1e:2f:cc:c6:b6:40:aa:20:ff:c1:5a:9f:1e:6f:72:f2:97:74:
         fd:ed:fb:ba:86:77:37:c8:2c:16:7a:ab:fb:49:b1:0b:9b:ed:
         3c:fb:95:f2:86:7c:36:4f:d0:96:bc:91:31:74:3d:2d:ae:c1:
         7c:97:e3:ae:81:9c:d7:03:ae:9c:0e:67:12:a3:a8:9d:a8:83:
         37:45:88:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8HJjrWF6D7hFUiJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
NDBhMWEyMGEtZTQxMy00NjQ0LTgwZDYtMzJkMjYyMDEzZDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8GUNrAb3YWzboC4qV3F2Tstv7Du9o/p62CX
OKQve4aEDQqETh8pETs61FRqzq9B+EPjqcCJVHwf0clYMpTsD077LLFuq09wiT/C
74L7ydwkmvTUsM1GPYz0WpTNXuNADG6BNrQlgFr74SV3qai1TlYWRdvdIcefC/46
KkmGW+ls8CbQ9uytZghO40cWTzLdTK23EP4h5l8NWrrZ/ctr9DZAA2a3ghQUGmm4
+YBDiZRYZYbQrP3CKTDJlF6jRN8+1GlWMuxdFvKvQ/l7wOkrWQ2SwRFCmu0dw50j
YOOOda6eqQx14IwtT+admIVOaeYStDvxzJnCWswsmuOycwleFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRCgWA7d80RwS1x3C0YSZ6x5R9xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWFlNjQyOGMtOGMzZC0z
ODVjLTkxZjMtZjYxYTk0NTBjODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSyrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILJ6ShrPMs22Hd0YVzd5B4q4QnL+zDXZiBGkBu8NN/+WsFG6p7jEv+K
LRaH114KjsTeb9PsW6VbnWa4YVLgfwta2zNdbEgtNuuqqwRW7Ohze7y3OMXTNgW7
2SHgIW0QleSdoFaKGJzkzocPU3RnbdzrA2eb1KQBYXRxgNSIwRt/TnpCOKJS8v57
evK1pnX7ZRdzakOAr5VKCk4bapKL1Djnl577O5lE7u5DrsrG3B+vRSGaHx4vzMa2
QKog/8Fanx5vcvKXdP3t+7qGdzfILBZ6q/tJsQub7Tz7lfKGfDZP0Ja8kTF0PS2u
wXyX466BnNcDrpwOZxKjqJ2ogzdFiCs=
-----END CERTIFICATE-----