Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b976c2f2-ea95-34c1-9d0b-1b303c2b4500.roa
File:                     b976c2f2-ea95-34c1-9d0b-1b303c2b4500.roa (raw, json)
Hash identifier:          z7VUiz4xqiusPkT89aOi7DIfKqrWo3LP2Fj9ugzRsAY=
Subject key identifier:   BD:07:74:26:4F:5E:AD:26:C5:9E:75:33:65:14:70:5C:B4:9C:F5:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446FF9D9F509DF9E4B13F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b976c2f2-ea95-34c1-9d0b-1b303c2b4500.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 16:26:38 +0000
asID:                     834
IP address blocks:        108.165.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:ff:9d:9f:50:9d:f9:e4:b1:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 16:26:38 2023 GMT
        Subject: CN=095d97c9-8664-420f-a27f-66a1c2eaa10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:63:2a:18:06:36:f9:82:94:b1:a8:b4:3e:
                    17:34:c1:47:00:37:47:ad:54:a2:dc:68:ce:7c:53:
                    25:e4:71:b2:16:a4:06:c1:6a:f4:4d:60:0c:bf:6d:
                    52:a6:df:3b:03:ef:cb:05:a8:79:ec:5a:ae:c6:81:
                    68:2b:25:34:a9:2a:cc:58:30:e0:db:2e:29:36:1c:
                    82:97:d6:bf:21:4a:57:6f:34:d2:c1:fa:d6:04:0e:
                    02:c8:d9:35:44:4c:87:53:dc:21:a3:63:92:f9:6e:
                    d1:22:2f:c5:4e:b6:62:30:1f:8c:11:1c:59:95:d3:
                    3c:22:49:bb:67:ae:9b:53:71:9e:7a:89:5c:50:1e:
                    ad:2b:32:dd:20:f2:93:c4:ad:bc:73:93:43:0d:29:
                    ca:7c:dc:67:23:36:c8:5a:bb:f1:9b:bd:fd:93:61:
                    50:e5:95:15:58:80:19:be:47:9c:37:03:43:36:58:
                    8d:a7:56:15:cc:ca:2f:58:c3:6f:71:ef:11:cd:da:
                    dc:35:61:03:cc:e5:1b:3d:b2:51:b1:61:4e:40:f4:
                    e3:a4:95:36:3c:97:01:87:da:58:07:d6:5b:8a:8b:
                    9e:fe:82:bb:3e:de:1f:18:76:24:40:2f:68:69:76:
                    b9:b1:52:31:a7:32:0d:ee:ef:d9:55:50:92:cd:6b:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:74:26:4F:5E:AD:26:C5:9E:75:33:65:14:70:5C:B4:9C:F5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b976c2f2-ea95-34c1-9d0b-1b303c2b4500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:33:a1:85:a2:5b:0a:19:26:d6:c8:03:e3:c5:bd:86:99:28:
         cf:3f:99:2d:9d:73:84:f4:db:54:36:95:d1:bd:cd:af:e0:40:
         dd:3a:9e:64:87:fb:69:4f:88:56:88:ba:19:76:c6:ea:e7:a5:
         61:88:dd:f0:54:8c:6d:10:15:be:18:2e:5a:73:a0:bc:09:57:
         8a:33:a0:56:c0:57:c4:ea:1b:6d:1b:50:2c:1c:32:f4:b9:54:
         e1:c0:bf:ea:77:5a:99:ff:f0:90:d1:57:9e:6c:c1:0b:ff:5f:
         29:ad:3a:a8:cd:f1:08:cb:4f:a4:25:b9:82:58:de:b8:7b:78:
         47:1a:8d:1c:d7:91:d5:22:b6:cc:f7:6c:5f:24:57:34:a4:5c:
         77:f1:da:a5:b5:1b:b4:71:1d:5c:8b:76:d5:23:eb:8c:28:0d:
         f0:3b:4b:c5:22:a1:e7:bd:c4:71:80:f6:af:3e:bd:90:5c:cf:
         a2:dd:7f:16:14:f2:9d:b8:24:53:df:02:98:ca:d6:75:bf:b8:
         67:3f:12:30:22:d3:83:6f:e3:eb:fd:fa:cf:3c:4c:ce:d0:a5:
         c8:39:0f:a4:52:01:13:2c:fe:7d:c8:2b:a0:b6:0a:d1:c8:43:
         2b:50:77:a7:60:d1:6e:bb:96:ae:01:b5:32:84:4c:60:8e:ae:
         02:a5:80:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRv+dn1Cd+eSxPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwODE2MjYzOFowLzEtMCsGA1UEAxMk
MDk1ZDk3YzktODY2NC00MjBmLWEyN2YtNjZhMWMyZWFhMTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lxjKhgGNvmClLGotD4XNMFHADdHrVSi3GjO
fFMl5HGyFqQGwWr0TWAMv21Spt87A+/LBah57FquxoFoKyU0qSrMWDDg2y4pNhyC
l9a/IUpXbzTSwfrWBA4CyNk1REyHU9who2OS+W7RIi/FTrZiMB+MERxZldM8Ikm7
Z66bU3GeeolcUB6tKzLdIPKTxK28c5NDDSnKfNxnIzbIWrvxm739k2FQ5ZUVWIAZ
vkecNwNDNliNp1YVzMovWMNvce8RzdrcNWEDzOUbPbJRsWFOQPTjpJU2PJcBh9pY
B9Zbioue/oK7Pt4fGHYkQC9oaXa5sVIxpzIN7u/ZVVCSzWulWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0HdCZPXq0mxZ51M2UUcFy0nPUTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjk3NmMyZjItZWE5NS0z
NGMxLTlkMGItMWIzMDNjMmI0NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKU5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAzoYWiWwoZJtbIA+PFvYaZKM8/mS2dc4T021Q2ldG9za/gQN06nmSH
+2lPiFaIuhl2xurnpWGI3fBUjG0QFb4YLlpzoLwJV4ozoFbAV8TqG20bUCwcMvS5
VOHAv+p3Wpn/8JDRV55swQv/XymtOqjN8QjLT6QluYJY3rh7eEcajRzXkdUitsz3
bF8kVzSkXHfx2qW1G7RxHVyLdtUj64woDfA7S8Uioee9xHGA9q8+vZBcz6LdfxYU
8p24JFPfApjK1nW/uGc/EjAi04Nv4+v9+s88TM7Qpcg5D6RSARMs/n3IK6C2CtHI
QytQd6dg0W67lq4BtTKETGCOrgKlgA4=
-----END CERTIFICATE-----