Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/9afa6246-2092-3a7b-bdf8-05e95c3e2a0b.roa
File:                     9afa6246-2092-3a7b-bdf8-05e95c3e2a0b.roa (raw, json)
Hash identifier:          AZcacR8ZNQKyloW8AwzGQOK0Jm3dxFHYZ2Cc6fU4PQo=
Subject key identifier:   4A:C8:A1:A0:64:A6:19:4B:89:5F:87:0C:68:C0:24:D3:FD:76:80:84
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584187BE51226CC941B5C1A10780
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/9afa6246-2092-3a7b-bdf8-05e95c3e2a0b.roa
Signing time:             Tue 11 Apr 2023 12:00:00 +0000
ROA not before:           Tue 11 Apr 2023 12:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     834
IP address blocks:        64.113.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:87:be:51:22:6c:c9:41:b5:c1:a1:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Apr 11 12:00:00 2023 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=15df40ac-5a92-4dfa-bbf1-5493b3143cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:ec:02:4a:02:27:6f:79:ed:0c:78:fc:43:
                    88:07:1e:11:c8:b1:7a:53:a7:51:bc:42:7e:f1:82:
                    65:be:1f:cc:62:e5:9d:a8:d2:40:6f:8c:26:c1:61:
                    75:8e:31:a0:ce:85:f8:e9:4d:f5:1e:62:5c:d3:7c:
                    de:72:3f:d0:a0:f5:a9:80:77:0a:8a:67:2e:5f:a6:
                    c5:1b:7d:c2:a3:37:00:cb:5e:4c:55:57:2a:6c:75:
                    0c:f6:3a:67:b6:69:6c:be:16:fe:32:36:96:5f:b7:
                    3e:b1:7b:f4:dd:38:98:4f:a2:81:84:7c:43:82:52:
                    7f:9d:ad:5a:ed:02:a0:13:1e:e6:e0:36:31:ac:22:
                    1c:63:a5:13:9e:7a:6b:f0:39:12:49:92:4f:2e:af:
                    0e:fa:b7:ae:38:5c:be:19:85:13:e5:5e:1d:63:36:
                    a0:25:02:ab:69:8b:5d:1e:88:46:4b:7b:a1:c8:fc:
                    7d:78:27:81:fb:11:5b:59:48:6b:18:f5:cf:0f:cc:
                    c2:07:cd:bf:ed:9b:82:05:b2:3d:dc:11:df:3c:df:
                    ec:de:c6:e2:18:f9:af:55:85:ce:45:6c:ee:b4:7a:
                    eb:53:15:cd:57:3d:6d:76:c1:c2:d4:08:f9:a9:af:
                    71:e9:62:53:99:3a:15:1d:f0:97:00:32:c8:04:17:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:A1:A0:64:A6:19:4B:89:5F:87:0C:68:C0:24:D3:FD:76:80:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/9afa6246-2092-3a7b-bdf8-05e95c3e2a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:02:4b:61:b9:37:68:49:d3:5f:8c:5d:f8:c1:c4:47:78:c1:
         63:cf:a3:28:7c:be:65:55:09:e2:e9:25:6b:25:f1:5c:c7:97:
         cd:3b:34:54:c3:5a:6a:ac:b5:9f:76:c5:f0:84:71:04:dd:61:
         03:ba:0e:47:57:dd:89:7a:25:0d:cd:1e:13:84:01:89:2b:12:
         9d:bb:9b:a3:3b:e5:b9:03:21:40:4a:ca:15:f5:92:56:29:af:
         67:86:42:91:af:ca:88:ea:b7:f5:f3:f4:7e:9c:b8:cd:39:da:
         d9:53:45:14:cd:d8:1a:e8:5e:b4:29:09:6c:5b:6c:d8:4e:7a:
         92:ce:d1:a1:c5:73:9c:39:4b:bb:cd:77:88:e3:41:f8:db:c8:
         cc:94:06:2b:f2:02:f6:f4:59:14:69:d8:a3:57:18:42:ff:a6:
         59:55:be:2c:29:0e:c0:20:b9:bc:de:e6:c2:c4:35:57:cd:39:
         85:2a:fe:71:d8:ba:cb:55:6b:4f:44:22:43:ff:8f:03:29:15:
         4f:8e:ed:3b:27:27:d4:ac:66:7a:6f:64:c0:6f:98:39:8b:4b:
         23:78:55:ae:32:4b:57:f1:6a:a2:55:bb:60:3f:29:9c:48:46:
         00:97:3b:40:0d:3e:eb:8a:4d:c7:71:b7:70:c2:92:5c:94:c3:
         03:7b:46:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGHvlEibMlBtcGhB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx
NDllMB4XDTIzMDQxMTEyMDAwMFoXDTI4MDQxMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTVkZjQwYWMtNWE5Mi00ZGZhLWJiZjEtNTQ5M2IzMTQzY2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkXsAkoCJ2957Qx4/EOIBx4RyLF6U6dRvEJ+
8YJlvh/MYuWdqNJAb4wmwWF1jjGgzoX46U31HmJc03zecj/QoPWpgHcKimcuX6bF
G33CozcAy15MVVcqbHUM9jpntmlsvhb+MjaWX7c+sXv03TiYT6KBhHxDglJ/na1a
7QKgEx7m4DYxrCIcY6UTnnpr8DkSSZJPLq8O+reuOFy+GYUT5V4dYzagJQKraYtd
HohGS3uhyPx9eCeB+xFbWUhrGPXPD8zCB82/7ZuCBbI93BHfPN/s3sbiGPmvVYXO
RWzutHrrUxXNVz1tdsHC1Aj5qa9x6WJTmToVHfCXADLIBBfe0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErIoaBkphlLiV+HDGjAJNP9doCEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm
NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvOWFmYTYyNDYtMjA5Mi0z
YTdiLWJkZjgtMDVlOTVjM2UyYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4
MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2
MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0
NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHEJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcCS2G5N2hJ01+MXfjBxEd4wWPPoyh8vmVVCeLpJWsl8VzHl807NFTD
WmqstZ92xfCEcQTdYQO6DkdX3Yl6JQ3NHhOEAYkrEp27m6M75bkDIUBKyhX1klYp
r2eGQpGvyojqt/Xz9H6cuM052tlTRRTN2BroXrQpCWxbbNhOepLO0aHFc5w5S7vN
d4jjQfjbyMyUBivyAvb0WRRp2KNXGEL/pllVviwpDsAgubze5sLENVfNOYUq/nHY
ustVa09EIkP/jwMpFU+O7TsnJ9SsZnpvZMBvmDmLSyN4Va4yS1fxaqJVu2A/KZxI
RgCXO0ANPuuKTcdxt3DCklyUwwN7RuY=
-----END CERTIFICATE-----