Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86a3ea86-1145-3999-8e89-0cbe35a76fe3.roa
File:                     86a3ea86-1145-3999-8e89-0cbe35a76fe3.roa (raw, json)
Hash identifier:          ZRttjhA+jH9DEYbSfBJJK2pWHVsTRObhPL/qElEZhfg=
Subject key identifier:   19:D5:BB:17:29:9D:7E:A9:31:27:F2:39:8A:7B:CF:D3:0D:5E:02:51
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584261F920910EFFA4318C1C09E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86a3ea86-1145-3999-8e89-0cbe35a76fe3.roa
Signing time:             Thu 29 Jun 2023 17:40:38 +0000
ROA not before:           Thu 29 Jun 2023 17:40:38 +0000
ROA not after:            Wed 27 Sep 2023 17:40:38 +0000
asID:                     834
IP address blocks:        108.165.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:61:f9:20:91:0e:ff:a4:31:8c:1c:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 29 17:40:38 2023 GMT
            Not After : Sep 27 17:40:38 2023 GMT
        Subject: CN=b8acb792-7200-47dc-99e6-c11e84486a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:51:3d:17:51:db:3c:55:fb:9c:45:08:12:60:
                    a2:c0:d8:51:4f:78:1e:19:b5:27:a1:4e:32:0f:e8:
                    8b:35:3d:26:e7:64:b4:13:8c:05:71:c4:01:91:c5:
                    f4:b0:47:a7:ff:ed:1d:40:9b:2c:20:73:b2:75:fe:
                    c9:17:29:05:6e:85:3f:a8:ee:5b:59:8b:33:12:7a:
                    12:ac:97:1e:f9:0c:d4:62:ad:4f:56:3d:c8:a9:a8:
                    99:65:e1:11:4a:84:03:89:bf:3a:71:d4:22:82:e7:
                    2d:d8:fe:7e:c2:96:5e:b8:75:1d:4b:1b:04:a2:14:
                    38:08:0d:49:d4:3f:8e:a9:d8:84:78:71:02:63:df:
                    24:3f:02:b2:60:d9:da:d8:c4:ff:9a:c2:e8:06:fa:
                    5b:48:95:1d:97:64:74:4c:e5:22:f1:86:70:94:5d:
                    55:67:81:24:df:91:94:df:3b:2a:66:f5:fd:38:61:
                    27:b5:28:a3:2e:85:cd:cf:8a:c9:ba:cb:53:6f:dc:
                    c8:0f:e0:92:ee:f4:f2:0b:70:65:22:68:9f:10:30:
                    74:90:be:24:9b:59:9c:37:9d:39:8e:41:12:f9:2d:
                    8a:59:5b:ed:51:64:4d:dd:73:99:62:a1:d7:57:53:
                    a9:28:86:94:c5:ad:bf:85:8d:46:c3:9b:bb:ab:cd:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D5:BB:17:29:9D:7E:A9:31:27:F2:39:8A:7B:CF:D3:0D:5E:02:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86a3ea86-1145-3999-8e89-0cbe35a76fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:34:41:3f:79:c3:d6:ed:dc:55:92:3c:61:7c:48:6d:d2:56:
         5e:cf:99:86:89:c9:22:37:a0:78:bd:59:ed:ef:35:64:ed:2f:
         b4:6c:ae:a0:80:25:82:fe:b2:d9:d6:f0:4d:35:b3:83:6d:b6:
         85:15:d4:12:ba:00:10:2d:4b:ae:e2:dd:7d:39:14:3e:1e:8f:
         65:57:4d:af:49:17:e7:39:5e:02:c9:a4:15:47:bb:c8:1c:f8:
         81:90:2c:ad:1e:d2:8b:66:85:42:d1:53:c0:c9:2e:67:35:b9:
         c2:99:7b:2f:67:51:dd:2b:c6:8a:3e:ec:f4:da:76:11:00:81:
         37:40:53:2b:28:bb:09:7d:9d:eb:c5:d9:e9:7a:19:f7:26:9b:
         ee:3c:08:af:29:b7:fe:02:9b:45:b8:0f:61:c0:0b:fd:9e:12:
         66:58:51:b7:b4:5d:95:62:a3:db:ff:0e:f0:06:ba:5f:5d:f3:
         1f:e6:5d:a2:bb:6b:40:1a:fe:13:f8:11:a5:0a:a1:9a:79:0f:
         a1:16:48:e5:a1:b7:15:6e:ca:7d:9c:89:eb:4a:75:6f:14:e3:
         78:ae:77:0c:a3:62:33:b2:a6:da:2c:6e:1b:b4:f9:0f:d8:5f:
         84:c9:3d:29:d2:b7:d1:eb:e2:0e:d8:a8:23:b5:e0:e2:d8:bd:
         92:c1:81:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJh+SCRDv+kMYwcCeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYyOTE3NDAzOFoXDTIzMDkyNzE3NDAzOFowLzEtMCsGA1UEAxMk
YjhhY2I3OTItNzIwMC00N2RjLTk5ZTYtYzExZTg0NDg2YTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVE9F1HbPFX7nEUIEmCiwNhRT3geGbUnoU4y
D+iLNT0m52S0E4wFccQBkcX0sEen/+0dQJssIHOydf7JFykFboU/qO5bWYszEnoS
rJce+QzUYq1PVj3IqaiZZeERSoQDib86cdQiguct2P5+wpZeuHUdSxsEohQ4CA1J
1D+OqdiEeHECY98kPwKyYNna2MT/msLoBvpbSJUdl2R0TOUi8YZwlF1VZ4Ek35GU
3zsqZvX9OGEntSijLoXNz4rJustTb9zID+CS7vTyC3BlImifEDB0kL4km1mcN505
jkES+S2KWVvtUWRN3XOZYqHXV1OpKIaUxa2/hY1Gw5u7q801GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnVuxcpnX6pMSfyOYp7z9MNXgJRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODZhM2VhODYtMTE0NS0z
OTk5LThlODktMGNiZTM1YTc2ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEE0QT95w9bt3FWSPGF8SG3SVl7PmYaJySI3oHi9We3vNWTtL7RsrqCA
JYL+stnW8E01s4NttoUV1BK6ABAtS67i3X05FD4ej2VXTa9JF+c5XgLJpBVHu8gc
+IGQLK0e0otmhULRU8DJLmc1ucKZey9nUd0rxoo+7PTadhEAgTdAUysouwl9nevF
2el6Gfcmm+48CK8pt/4Cm0W4D2HAC/2eEmZYUbe0XZVio9v/DvAGul9d8x/mXaK7
a0Aa/hP4EaUKoZp5D6EWSOWhtxVuyn2cietKdW8U43iudwyjYjOyptosbhu0+Q/Y
X4TJPSnSt9Hr4g7YqCO14OLYvZLBgcY=
-----END CERTIFICATE-----