Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14a6ae66-95ae-392b-9966-7d13518f314b.roa
File:                     14a6ae66-95ae-392b-9966-7d13518f314b.roa (raw, json)
Hash identifier:          o0MW9hM227dnLnCJHnN4oZbSKAO8p96pfYLQ7BUZ3Jo=
Subject key identifier:   5F:B0:E1:06:79:BA:76:1C:AB:C9:6E:42:C2:FE:59:1A:AE:70:5D:40
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842EFCEF14BC2146B875BA05300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14a6ae66-95ae-392b-9966-7d13518f314b.roa
Signing time:             Sat 19 Aug 2023 13:00:24 +0000
ROA not before:           Sat 19 Aug 2023 13:00:24 +0000
ROA not after:            Fri 17 Nov 2023 14:00:24 +0000
asID:                     40676
IP address blocks:        206.123.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ef:ce:f1:4b:c2:14:6b:87:5b:a0:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 19 13:00:24 2023 GMT
            Not After : Nov 17 14:00:24 2023 GMT
        Subject: CN=a7bb8f8c-c871-447b-9c04-c28efa9a509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:7a:fa:e9:9d:8e:4a:91:c3:29:03:ad:76:
                    c3:69:63:b7:7b:0a:72:28:8c:a2:af:e0:57:e5:a3:
                    0d:de:08:01:94:e4:3b:b8:f8:4f:65:a7:db:37:e7:
                    39:e3:bb:f4:3f:04:da:ed:ed:6f:e8:72:3c:42:00:
                    e3:4a:ab:e1:31:90:bc:a0:b4:05:39:b3:32:67:dd:
                    80:08:fc:c8:62:5b:f1:21:ba:17:97:01:71:dc:6e:
                    20:af:9c:e5:8e:55:4c:23:cf:04:c4:1b:0e:94:16:
                    22:92:01:5d:06:62:ab:52:e3:9e:aa:13:b5:39:41:
                    bc:81:85:91:2d:ff:ef:a1:c2:97:46:e9:8b:cc:d7:
                    23:ed:e5:82:7b:61:62:34:38:2b:98:46:c8:c0:6e:
                    f1:20:7e:17:8b:18:11:7d:bb:1f:cb:b7:c2:27:63:
                    0c:a6:97:6a:dd:4d:93:13:de:f4:be:b8:72:88:e6:
                    bd:0e:5c:74:bd:a0:d6:b2:2c:cd:0c:9f:f4:96:bc:
                    df:99:17:a9:c1:9a:ee:e9:d5:3e:f4:f4:1a:09:4f:
                    fe:b9:cf:5e:10:e6:c9:f9:ff:9b:f7:cb:d0:a8:5b:
                    d1:64:b8:96:78:f3:52:fd:38:33:80:0a:a6:0d:12:
                    0d:a0:3b:95:5a:d3:c8:33:29:cf:f6:32:82:cd:05:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:E1:06:79:BA:76:1C:AB:C9:6E:42:C2:FE:59:1A:AE:70:5D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14a6ae66-95ae-392b-9966-7d13518f314b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:70:71:08:5a:8c:82:72:cb:33:f2:ae:c2:f0:b9:d0:d1:
         fe:b4:00:40:74:31:1c:79:42:dd:90:3e:c7:c6:89:2d:ad:44:
         ee:bf:f7:19:9e:7c:c0:cb:63:97:ae:7e:fb:48:20:a7:0f:f5:
         df:25:64:0b:45:59:d6:c8:d9:1b:96:9a:71:22:cc:37:f8:b7:
         ff:28:c8:c2:91:20:80:d2:93:fc:69:d5:f0:91:87:07:67:0a:
         2b:38:32:b8:81:84:10:4b:b2:bf:7d:24:74:10:cc:4e:4a:ca:
         90:47:e6:1a:e5:25:68:00:9e:6e:69:aa:4d:2c:14:3c:f5:36:
         fc:d0:e4:11:00:70:55:e1:f6:48:ae:19:1b:4c:cd:86:5a:a1:
         07:3b:df:72:14:fb:88:a5:81:a3:f0:e9:2d:6a:c8:2c:d0:84:
         c5:a4:b9:75:b4:1d:b9:d3:d3:53:c5:06:03:06:97:e0:c3:36:
         96:c2:ee:8a:1d:cd:de:c4:6a:94:45:52:3c:c5:3d:4c:f4:c0:
         fd:40:1f:24:ec:62:44:35:66:21:3c:5d:58:b1:0c:a4:12:0b:
         16:c9:bf:ab:84:b5:6f:e7:95:5b:50:b8:da:3a:65:c1:ad:0a:
         f2:5a:f7:32:2d:10:77:95:32:f6:c0:9a:e3:2b:bb:5e:6b:d2:
         88:76:54:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELvzvFLwhRrh1ugUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDgxOTEzMDAyNFoXDTIzMTExNzE0MDAyNFowLzEtMCsGA1UEAxMk
YTdiYjhmOGMtYzg3MS00NDdiLTljMDQtYzI4ZWZhOWE1MDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr756+umdjkqRwykDrXbDaWO3ewpyKIyir+BX
5aMN3ggBlOQ7uPhPZafbN+c547v0PwTa7e1v6HI8QgDjSqvhMZC8oLQFObMyZ92A
CPzIYlvxIboXlwFx3G4gr5zljlVMI88ExBsOlBYikgFdBmKrUuOeqhO1OUG8gYWR
Lf/vocKXRumLzNcj7eWCe2FiNDgrmEbIwG7xIH4XixgRfbsfy7fCJ2MMppdq3U2T
E970vrhyiOa9Dlx0vaDWsizNDJ/0lrzfmRepwZru6dU+9PQaCU/+uc9eEObJ+f+b
98vQqFvRZLiWePNS/TgzgAqmDRINoDuVWtPIMynP9jKCzQUD9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+w4QZ5unYcq8luQsL+WRqucF1AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTRhNmFlNjYtOTVhZS0z
OTJiLTk5NjYtN2QxMzUxOGYzMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznufMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAs8cHEIWoyCcssz8q7C8LnQ0f60AEB0MRx5Qt2QPsfGiS2tRO6/9xme
fMDLY5eufvtIIKcP9d8lZAtFWdbI2RuWmnEizDf4t/8oyMKRIIDSk/xp1fCRhwdn
Cis4MriBhBBLsr99JHQQzE5KypBH5hrlJWgAnm5pqk0sFDz1NvzQ5BEAcFXh9kiu
GRtMzYZaoQc733IU+4ilgaPw6S1qyCzQhMWkuXW0HbnT01PFBgMGl+DDNpbC7ood
zd7EapRFUjzFPUz0wP1AHyTsYkQ1ZiE8XVixDKQSCxbJv6uEtW/nlVtQuNo6ZcGt
CvJa9zItEHeVMvbAmuMru15r0oh2VPY=
-----END CERTIFICATE-----