Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa
File:                     f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa (raw, json)
Hash identifier:          KeIIhEbc4m+L57xMXorMtADKAmAC1cOiEtwBmk75ZI4=
Subject key identifier:   E1:DF:BA:7A:87:B3:F4:47:B5:10:E6:1B:C4:CE:5F:28:83:38:DE:3F
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584311BDA3B2292042A3AB32E2E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa
Signing time:             Thu 31 Aug 2023 16:43:02 +0000
ROA not before:           Thu 31 Aug 2023 16:43:02 +0000
ROA not after:            Wed 29 Nov 2023 17:43:02 +0000
asID:                     212238
IP address blocks:        172.111.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:11:bd:a3:b2:29:20:42:a3:ab:32:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 31 16:43:02 2023 GMT
            Not After : Nov 29 17:43:02 2023 GMT
        Subject: CN=27ee2e01-3735-491a-bbca-ea2cf9e8b1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:bb:b7:c1:d7:02:6a:82:a6:16:ac:f7:46:
                    2a:ac:a1:71:e4:4c:bb:f0:97:b0:7c:3c:ff:2a:a3:
                    e1:df:2c:47:c2:8d:ba:69:0a:db:b2:fb:be:2b:a9:
                    59:d5:c7:d7:28:fa:6d:c0:5e:ee:93:9c:58:44:ec:
                    69:58:c2:22:3a:36:64:75:41:5e:1b:4b:b6:ce:7e:
                    98:1f:2e:e3:4f:6a:e5:ce:2d:da:6c:0d:07:e6:5d:
                    b0:42:46:cd:99:4b:53:ba:79:8a:85:5a:e2:4a:34:
                    05:a7:dc:f9:d7:88:aa:1a:ff:c5:75:4c:76:b6:89:
                    49:99:4a:fd:c1:81:bf:52:9a:61:1f:f4:66:30:8e:
                    13:76:26:ae:f1:30:bb:96:1c:e2:cb:da:ae:69:9c:
                    2b:b6:fc:f0:15:97:73:29:77:83:8a:bd:99:02:81:
                    04:64:22:c1:71:77:29:f9:20:aa:b8:4f:6b:9c:79:
                    95:ab:96:23:0b:bb:c6:d7:53:5e:cb:8a:15:3e:11:
                    de:01:d1:44:6e:81:aa:a3:f2:48:2c:b7:72:d1:13:
                    a2:75:e9:72:6a:cd:aa:11:fe:16:a8:2d:e6:81:ab:
                    71:91:18:d8:17:44:60:12:10:92:16:71:df:4f:c2:
                    d3:67:3e:03:42:c1:ea:df:bf:16:8a:48:0c:db:dc:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DF:BA:7A:87:B3:F4:47:B5:10:E6:1B:C4:CE:5F:28:83:38:DE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:6f:e1:79:d0:77:b0:4b:02:42:4d:ed:e1:03:7b:0e:18:
         c1:7f:15:51:52:36:6b:d4:19:7f:14:80:2c:51:d6:e6:2e:d3:
         60:02:54:d1:5e:e3:c3:71:44:7a:f1:c6:10:3a:a8:db:d2:e9:
         64:e6:8d:3f:5b:f4:ee:92:09:e0:d7:e5:d7:b4:ee:62:32:ae:
         3d:b9:88:ed:de:b8:c2:e0:33:ac:bd:1d:01:97:a3:72:45:95:
         f0:66:e9:60:6c:94:6f:cf:71:34:ed:35:5f:b3:e3:4e:17:25:
         92:b9:08:d4:77:4e:9f:c1:31:fc:86:d3:39:13:87:58:e9:b8:
         cc:f3:10:09:8d:9b:07:e7:17:bc:19:7c:c8:36:59:23:d1:d0:
         b3:ef:02:68:1a:07:9f:59:03:92:c8:90:3c:42:18:02:28:39:
         5e:f7:d1:74:42:b9:e6:5c:f4:e4:d4:bb:4d:f0:f9:73:92:01:
         89:40:68:07:23:92:be:92:28:dc:31:75:7b:58:63:b1:26:43:
         04:06:b9:56:38:7c:77:97:f3:78:18:d2:c9:1c:df:89:c0:aa:
         62:be:99:74:ee:3b:91:5e:c4:95:9b:60:7a:29:7f:9c:ac:4a:
         4a:48:67:7b:af:29:7a:e7:d9:55:fc:e6:21:80:d9:72:2b:ee:
         14:e5:c0:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMRvaOyKSBCo6sy4uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDgzMTE2NDMwMloXDTIzMTEyOTE3NDMwMlowLzEtMCsGA1UEAxMk
MjdlZTJlMDEtMzczNS00OTFhLWJiY2EtZWEyY2Y5ZThiMWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+m7t8HXAmqCphas90YqrKFx5Ey78JewfDz/
KqPh3yxHwo26aQrbsvu+K6lZ1cfXKPptwF7uk5xYROxpWMIiOjZkdUFeG0u2zn6Y
Hy7jT2rlzi3abA0H5l2wQkbNmUtTunmKhVriSjQFp9z514iqGv/FdUx2tolJmUr9
wYG/UpphH/RmMI4Tdiau8TC7lhziy9quaZwrtvzwFZdzKXeDir2ZAoEEZCLBcXcp
+SCquE9rnHmVq5YjC7vG11Ney4oVPhHeAdFEboGqo/JILLdy0ROidelyas2qEf4W
qC3mgatxkRjYF0RgEhCSFnHfT8LTZz4DQsHq378WikgM29yYTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHfunqHs/RHtRDmG8TOXyiDON4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjRjZDIxNzYtYmNlMy0z
NjJkLWIzYTAtYzQ2NjBiYTM0YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjZb+F50HewSwJCTe3hA3sOGMF/FVFSNmvUGX8UgCxR1uYu02ACVNFe
48NxRHrxxhA6qNvS6WTmjT9b9O6SCeDX5de07mIyrj25iO3euMLgM6y9HQGXo3JF
lfBm6WBslG/PcTTtNV+z404XJZK5CNR3Tp/BMfyG0zkTh1jpuMzzEAmNmwfnF7wZ
fMg2WSPR0LPvAmgaB59ZA5LIkDxCGAIoOV730XRCueZc9OTUu03w+XOSAYlAaAcj
kr6SKNwxdXtYY7EmQwQGuVY4fHeX83gY0skc34nAqmK+mXTuO5FexJWbYHopf5ys
SkpIZ3uvKXrn2VX85iGA2XIr7hTlwCg=
-----END CERTIFICATE-----