Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/786ef8fd-ef2b-3c4a-adae-d2a71a0b9d3a.roa
File:                     786ef8fd-ef2b-3c4a-adae-d2a71a0b9d3a.roa (raw, json)
Hash identifier:          uU6Q6v3yD4E518US2syPXStufQ15sFSFi1qoDclTjsQ=
Subject key identifier:   9E:E5:C3:4F:68:0E:FA:33:97:5A:FA:E6:12:97:3F:74:44:F8:4F:0D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446DDF1ADBDA6091F912A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/786ef8fd-ef2b-3c4a-adae-d2a71a0b9d3a.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Wed 02 Aug 2023 10:54:20 +0000
asID:                     62579
IP address blocks:        108.165.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:dd:f1:ad:bd:a6:09:1f:91:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  2 10:54:20 2023 GMT
        Subject: CN=3de89d91-f668-4fc5-8456-110f58fae7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:97:8c:dd:b8:5b:06:99:1f:97:20:4f:cb:
                    50:8a:47:c4:02:0e:f0:69:03:8e:24:37:df:4c:a2:
                    aa:6b:64:8f:1f:1d:4b:df:60:76:82:ae:8c:ea:18:
                    35:db:94:3e:2a:10:bb:cf:f0:a8:85:c0:be:44:3f:
                    7c:23:71:bc:7d:0d:bb:cf:07:40:68:33:5c:d6:79:
                    e7:c2:32:1a:4c:32:d5:cf:97:f6:08:0a:c5:d9:99:
                    22:b8:a4:2b:7c:9b:f5:f6:13:38:3f:af:f3:97:cd:
                    22:94:d0:a5:11:e5:64:67:3e:2a:69:db:08:3b:ed:
                    b9:13:c7:22:c7:d1:25:7b:e6:a3:3f:23:c1:d4:6b:
                    ef:00:76:ad:61:07:ec:03:a6:91:fa:d7:66:ee:11:
                    3a:2e:2c:e6:50:7e:ba:d3:61:54:c3:ce:1d:3f:db:
                    74:7e:e5:76:67:62:47:42:63:a8:c3:10:b4:a4:7f:
                    b5:a4:26:0b:45:c1:70:f9:f3:34:b7:eb:b1:bf:5b:
                    3a:6f:69:a2:e3:a8:e5:ab:44:84:85:98:58:ee:39:
                    7e:df:a5:0b:31:ec:7e:30:80:85:35:5f:39:ac:11:
                    03:00:a7:b8:db:b5:62:cd:24:49:c4:6e:64:23:1d:
                    aa:2b:2a:5f:39:c2:43:b2:be:35:f1:6c:24:86:19:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E5:C3:4F:68:0E:FA:33:97:5A:FA:E6:12:97:3F:74:44:F8:4F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/786ef8fd-ef2b-3c4a-adae-d2a71a0b9d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:f0:af:e1:6d:a1:e0:f5:cc:1b:01:57:40:f8:e8:45:88:
         29:3c:ee:2a:80:b7:b9:91:33:06:67:55:ab:2d:1b:51:6b:4e:
         8e:34:30:1d:5c:74:dd:f1:62:c8:66:a4:27:45:79:03:1c:b3:
         f9:9b:ac:16:18:75:30:a6:23:b7:3b:99:b7:1c:62:33:7c:61:
         f8:8a:5b:46:54:e4:dd:cd:8c:11:5f:0d:a5:93:d6:01:ad:2a:
         ac:28:1a:2b:14:85:59:2e:1b:fd:81:25:c5:b1:5b:84:07:ed:
         3f:a6:98:10:36:37:71:df:91:32:c6:c2:65:18:23:9b:a6:97:
         69:3c:77:33:df:a6:7b:2d:f2:c6:07:64:b7:d5:33:b1:b5:0a:
         9e:67:02:ca:7a:09:ac:11:2f:7d:04:87:b4:96:18:d3:a6:8a:
         70:6a:0f:58:87:d8:26:44:09:1c:db:37:d4:2e:00:98:91:5a:
         6c:e2:d8:b1:9c:a5:f2:fa:b7:38:ea:79:2c:93:4d:94:bc:93:
         05:17:f6:e6:bf:cf:9e:c6:2b:ac:f7:a6:56:89:a8:85:5f:92:
         08:f9:7b:c8:05:3a:78:15:7c:46:99:53:46:14:43:a0:c2:d2:
         03:1b:86:3a:91:92:0d:42:2b:a5:e8:cc:c5:78:de:31:2c:f1:
         f4:38:b4:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRt3xrb2mCR+RKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwMjEwNTQyMFowLzEtMCsGA1UEAxMk
M2RlODlkOTEtZjY2OC00ZmM1LTg0NTYtMTEwZjU4ZmFlN2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhraXjN24WwaZH5cgT8tQikfEAg7waQOOJDff
TKKqa2SPHx1L32B2gq6M6hg125Q+KhC7z/CohcC+RD98I3G8fQ27zwdAaDNc1nnn
wjIaTDLVz5f2CArF2ZkiuKQrfJv19hM4P6/zl80ilNClEeVkZz4qadsIO+25E8ci
x9Ele+ajPyPB1GvvAHatYQfsA6aR+tdm7hE6LizmUH6602FUw84dP9t0fuV2Z2JH
QmOowxC0pH+1pCYLRcFw+fM0t+uxv1s6b2mi46jlq0SEhZhY7jl+36ULMex+MICF
NV85rBEDAKe427VizSRJxG5kIx2qKypfOcJDsr418WwkhhkdBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7lw09oDvozl1r65hKXP3RE+E8NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzg2ZWY4ZmQtZWYyYi0z
YzRhLWFkYWUtZDJhNzFhMGI5ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZa8K/hbaHg9cwbAVdA+OhFiCk87iqAt7mRMwZnVastG1FrTo40MB1c
dN3xYshmpCdFeQMcs/mbrBYYdTCmI7c7mbccYjN8YfiKW0ZU5N3NjBFfDaWT1gGt
KqwoGisUhVkuG/2BJcWxW4QH7T+mmBA2N3HfkTLGwmUYI5uml2k8dzPfpnst8sYH
ZLfVM7G1Cp5nAsp6CawRL30Eh7SWGNOminBqD1iH2CZECRzbN9QuAJiRWmzi2LGc
pfL6tzjqeSyTTZS8kwUX9ua/z57GK6z3plaJqIVfkgj5e8gFOngVfEaZU0YUQ6DC
0gMbhjqRkg1CK6XozMV43jEs8fQ4tKI=
-----END CERTIFICATE-----