Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/8d9f214d-4e06-357e-b2ff-cdc4cc565d7b.roa
File:                     8d9f214d-4e06-357e-b2ff-cdc4cc565d7b.roa (raw, json)
Hash identifier:          qqgT/7eNxcrJbmdN1W78gE0h5xRrouEH2Lk6XIfDfCM=
Subject key identifier:   6C:5E:03:98:CE:7C:92:FB:AB:2C:01:A3:31:D0:16:CA:D9:DD:4E:8B
Certificate issuer:       /CN=903f8e05-f3a5-4300-8c04-39c3103ddccb
Certificate serial:       010D0C9F4328583FB0894877CFD41A44721D1400
Authority key identifier: 5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/8d9f214d-4e06-357e-b2ff-cdc4cc565d7b.roa
Signing time:             Thu 20 Oct 2022 23:06:23 +0000
ROA not before:           Thu 20 Oct 2022 23:06:23 +0000
ROA not after:            Wed 22 Jan 2025 05:00:00 +0000
asID:                     19499
IP address blocks:        136.175.228.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b0:89:48:77:cf:d4:1a:44:72:1d:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903f8e05-f3a5-4300-8c04-39c3103ddccb
        Validity
            Not Before: Oct 20 23:06:23 2022 GMT
            Not After : Jan 22 05:00:00 2025 GMT
        Subject: CN=2e9f2bba-df57-4135-8e0d-e9439f94f005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:26:85:bc:a6:2d:c1:b0:07:3c:3d:38:f4:
                    fe:f9:4e:d6:6f:df:e0:43:ba:50:67:37:cb:1e:df:
                    61:7b:83:87:a4:24:6a:24:af:13:28:07:6f:26:72:
                    f5:51:2f:c9:ab:7c:f0:cc:04:71:cb:2a:e7:38:7b:
                    85:ba:9b:17:f0:57:02:95:38:12:ca:5c:6b:84:12:
                    ce:04:54:e2:b4:0d:bf:7f:28:a5:d2:bb:41:6a:25:
                    8c:38:c4:e5:b8:79:8d:71:b3:07:64:7c:a7:bf:31:
                    a5:ef:de:47:0c:e5:1f:30:89:36:00:a1:59:16:4b:
                    f7:f9:4b:01:e4:84:42:15:8d:90:ed:52:aa:d6:9d:
                    f5:72:b9:25:2a:18:61:c6:f9:43:35:d0:8e:42:a3:
                    09:2d:21:b9:8b:d3:7b:2f:97:fa:03:02:a0:f8:06:
                    ac:e2:23:4d:fb:44:d0:95:18:e7:e9:13:16:00:fa:
                    33:e6:9a:d9:66:ae:72:74:51:26:4a:56:56:a1:5a:
                    98:13:fb:9d:dc:35:94:74:f8:57:04:85:a5:24:86:
                    97:b1:24:ba:80:9b:79:96:00:9c:90:81:ad:d7:bf:
                    b4:d3:56:c7:dc:5a:2f:3c:6b:0c:52:7d:ea:b3:95:
                    f0:7b:8b:eb:ba:0d:a5:ba:b4:84:8d:f7:01:4b:4d:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:03:98:CE:7C:92:FB:AB:2C:01:A3:31:D0:16:CA:D9:DD:4E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/8d9f214d-4e06-357e-b2ff-cdc4cc565d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.crl

            X509v3 Authority Key Identifier:
                keyid:5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a1:5b:5d:0b:1d:7a:9f:35:a1:88:69:b8:91:f8:72:12:3e:
         bd:54:b6:db:4d:8a:38:0b:34:0d:7c:00:9c:d8:f7:92:b1:0c:
         a7:14:f6:79:62:fc:df:cb:f1:62:fc:73:e2:f7:e4:86:58:12:
         0c:59:29:3a:45:a9:72:97:a3:be:46:9a:02:ee:d8:64:63:2e:
         c7:33:b8:09:7f:d7:54:ff:a4:62:c9:67:8e:61:12:1d:7d:20:
         e2:0b:7c:64:47:5c:3c:a2:41:ac:72:f3:39:1b:17:3a:31:6b:
         16:f2:57:49:eb:68:c8:2d:1b:9b:56:0f:82:a2:ba:d2:7c:81:
         28:4b:51:65:da:3b:9f:33:3d:fd:41:89:db:3e:d1:2a:62:1b:
         39:51:17:a8:ab:11:cc:30:99:38:1b:50:dc:65:db:3f:14:85:
         ab:dc:7c:41:34:d0:56:51:98:d7:c7:f1:6d:3d:1e:95:a4:28:
         53:1c:24:f2:d4:52:dc:55:eb:8e:93:1a:c1:47:55:10:57:c3:
         f4:28:61:0b:98:32:78:41:26:7e:f7:59:01:70:3f:d3:9c:0b:
         fc:01:ca:e8:59:81:7a:e7:b0:6e:99:63:76:bd:bb:82:5a:06:
         69:e2:11:fc:92:c9:c3:fe:5f:19:a3:b0:9c:a1:9d:ae:55:e9:
         d4:d6:c7:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+wiUh3z9QaRHIdFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAzZjhlMDUtZjNhNS00MzAwLThjMDQtMzljMzEwM2Rk
Y2NiMB4XDTIyMTAyMDIzMDYyM1oXDTI1MDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MmU5ZjJiYmEtZGY1Ny00MTM1LThlMGQtZTk0MzlmOTRmMDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglQmhbymLcGwBzw9OPT++U7Wb9/gQ7pQZzfL
Ht9he4OHpCRqJK8TKAdvJnL1US/Jq3zwzARxyyrnOHuFupsX8FcClTgSylxrhBLO
BFTitA2/fyil0rtBaiWMOMTluHmNcbMHZHynvzGl795HDOUfMIk2AKFZFkv3+UsB
5IRCFY2Q7VKq1p31crklKhhhxvlDNdCOQqMJLSG5i9N7L5f6AwKg+Aas4iNN+0TQ
lRjn6RMWAPoz5prZZq5ydFEmSlZWoVqYE/ud3DWUdPhXBIWlJIaXsSS6gJt5lgCc
kIGt17+001bH3FovPGsMUn3qs5Xwe4vrug2lurSEjfcBS03IHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxeA5jOfJL7qywBozHQFsrZ3U6LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MDNm
OGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMzMTAzZGRjY2IvOGQ5ZjIxNGQtNGUwNi0z
NTdlLWIyZmYtY2RjNGNjNTY1ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTAzZjhlMDUtZjNhNS00MzAwLThj
MDQtMzljMzEwM2RkY2NiLzkwM2Y4ZTA1LWYzYTUtNDMwMC04YzA0LTM5YzMxMDNk
ZGNjYi5jcmwwHwYDVR0jBBgwFoAUXti8WtFyjZuArhca8QI8Xg3hcWkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MDNmOGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMz
MTAzZGRjY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK/kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIShW10LHXqfNaGIabiR+HISPr1UtttNijgLNA18AJzY95KxDKcU9nli
/N/L8WL8c+L35IZYEgxZKTpFqXKXo75GmgLu2GRjLsczuAl/11T/pGLJZ45hEh19
IOILfGRHXDyiQaxy8zkbFzoxaxbyV0nraMgtG5tWD4KiutJ8gShLUWXaO58zPf1B
ids+0SpiGzlRF6irEcwwmTgbUNxl2z8UhavcfEE00FZRmNfH8W09HpWkKFMcJPLU
UtxV646TGsFHVRBXw/QoYQuYMnhBJn73WQFwP9OcC/wByuhZgXrnsG6ZY3a9u4Ja
BmniEfySycP+XxmjsJyhna5V6dTWxy0=
-----END CERTIFICATE-----