Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3c069f2-a1d8-3fdf-92bd-f463d346c924.roa
File:                     c3c069f2-a1d8-3fdf-92bd-f463d346c924.roa (raw, json)
Hash identifier:          7dmn9QUaqGJh7YC8M/GS6/HgEodJsvhoCsxVnouJ8v0=
Subject key identifier:   2C:DB:FD:37:EB:0E:DC:AC:9C:DC:E1:05:4B:D9:82:5F:51:1B:8D:8A
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858440E13CB07F905ABF6371F7F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3c069f2-a1d8-3fdf-92bd-f463d346c924.roa
Signing time:             Thu 30 Nov 2023 02:00:16 +0000
ROA not before:           Thu 30 Nov 2023 02:00:16 +0000
ROA not after:            Wed 28 Feb 2024 02:00:16 +0000
asID:                     3223
IP address blocks:        172.111.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:13:cb:07:f9:05:ab:f6:37:1f:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov 30 02:00:16 2023 GMT
            Not After : Feb 28 02:00:16 2024 GMT
        Subject: CN=faaaa0f6-dfb2-4c60-b25b-4eec9f42a82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:00:0d:e0:e1:f3:97:d2:15:36:eb:6e:f5:
                    a3:4d:c2:d6:c7:a4:19:8a:23:f2:5d:35:94:24:91:
                    84:c5:bb:55:db:e6:01:39:7b:aa:60:e7:fc:71:4f:
                    cb:61:d3:96:b1:86:1a:9e:58:c1:7a:4c:43:45:74:
                    54:dd:98:04:c1:a5:82:91:ee:6c:d0:5c:56:8f:14:
                    ff:24:8b:64:9a:2a:cc:cc:bf:fa:1b:3d:49:a3:87:
                    b3:27:09:25:f4:ed:03:d9:65:54:6f:a4:08:fd:b2:
                    d9:63:09:38:19:08:27:2d:08:0d:de:f0:32:c7:39:
                    72:3d:34:66:54:f9:14:96:00:05:3c:30:89:81:4a:
                    9a:48:3c:f9:50:9b:af:94:ab:53:11:b0:76:cb:01:
                    41:08:0b:d3:5e:4a:88:c5:58:b4:ac:f5:0f:b4:5e:
                    fb:86:0e:07:91:d3:c1:4c:32:0f:cd:16:00:3d:83:
                    2c:40:4b:95:11:f8:f3:11:4e:43:a7:e5:4c:be:b3:
                    2b:8e:39:93:94:c4:ae:8f:40:47:4d:a1:59:de:ae:
                    97:ea:04:78:cf:b7:94:5c:72:d1:22:31:47:af:ef:
                    95:4e:7c:0f:0c:18:76:87:85:dd:d1:69:89:9f:1a:
                    2c:d2:89:09:3a:52:85:4f:11:64:76:62:85:c9:d3:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DB:FD:37:EB:0E:DC:AC:9C:DC:E1:05:4B:D9:82:5F:51:1B:8D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3c069f2-a1d8-3fdf-92bd-f463d346c924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:84:a7:1f:b7:66:63:49:e5:e8:d9:28:24:b9:90:93:77:e6:
         e7:66:38:c4:68:a8:be:0c:68:ef:e2:bb:aa:59:94:68:37:ed:
         f3:2f:2c:83:ad:2e:7c:0c:a8:b8:c1:c4:eb:9c:ae:3a:b1:db:
         21:4e:80:77:18:92:90:54:90:19:e3:da:67:85:8b:a3:4a:11:
         4a:3b:4f:82:bb:52:61:02:90:f2:9e:08:d5:44:2a:9f:19:2d:
         ef:5f:97:6a:71:2d:7f:ae:7a:c4:1e:3a:46:5b:16:dc:fa:a0:
         80:67:89:55:1a:45:3f:75:01:84:2d:ce:39:ce:93:db:fd:32:
         6a:de:9c:36:d7:88:45:01:71:d6:36:86:dd:6c:05:3e:e9:3c:
         95:95:40:70:dc:7a:3f:6b:a1:17:c1:2f:3a:84:98:a4:59:40:
         71:99:47:f4:db:72:df:a9:bf:86:ea:31:92:66:5b:da:f4:bd:
         54:23:a8:8a:ea:0d:4b:a0:67:ba:34:be:e9:85:83:05:44:88:
         ea:e0:d4:72:94:da:23:37:95:77:ff:3f:7c:5d:5e:a7:c6:b5:
         a8:03:e5:e5:8c:11:4a:a5:ad:02:8c:96:1b:0c:df:34:e9:65:
         50:09:4f:36:7a:8f:20:c8:ac:5f:76:df:ba:11:8e:5a:58:07:
         b2:bc:28:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQOE8sH+QWr9jcffwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMTEzMDAyMDAxNloXDTI0MDIyODAyMDAxNlowLzEtMCsGA1UEAxMk
ZmFhYWEwZjYtZGZiMi00YzYwLWIyNWItNGVlYzlmNDJhODJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzwADeDh85fSFTbrbvWjTcLWx6QZiiPyXTWU
JJGExbtV2+YBOXuqYOf8cU/LYdOWsYYanljBekxDRXRU3ZgEwaWCke5s0FxWjxT/
JItkmirMzL/6Gz1Jo4ezJwkl9O0D2WVUb6QI/bLZYwk4GQgnLQgN3vAyxzlyPTRm
VPkUlgAFPDCJgUqaSDz5UJuvlKtTEbB2ywFBCAvTXkqIxVi0rPUPtF77hg4HkdPB
TDIPzRYAPYMsQEuVEfjzEU5Dp+VMvrMrjjmTlMSuj0BHTaFZ3q6X6gR4z7eUXHLR
IjFHr++VTnwPDBh2h4Xd0WmJnxos0okJOlKFTxFkdmKFydM80wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzb/TfrDtysnNzhBUvZgl9RG42KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzNjMDY5ZjItYTFkOC0z
ZmRmLTkyYmQtZjQ2M2QzNDZjOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeEpx+3ZmNJ5ejZKCS5kJN35udmOMRoqL4MaO/iu6pZlGg37fMvLIOt
LnwMqLjBxOucrjqx2yFOgHcYkpBUkBnj2meFi6NKEUo7T4K7UmECkPKeCNVEKp8Z
Le9fl2pxLX+uesQeOkZbFtz6oIBniVUaRT91AYQtzjnOk9v9MmrenDbXiEUBcdY2
ht1sBT7pPJWVQHDcej9roRfBLzqEmKRZQHGZR/Tbct+pv4bqMZJmW9r0vVQjqIrq
DUugZ7o0vumFgwVEiOrg1HKU2iM3lXf/P3xdXqfGtagD5eWMEUqlrQKMlhsM3zTp
ZVAJTzZ6jyDIrF9237oRjlpYB7K8KLI=
-----END CERTIFICATE-----