Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa99000-551c-3619-a373-d5bc5a84a5c6.roa
File:                     2aa99000-551c-3619-a373-d5bc5a84a5c6.roa (raw, json)
Hash identifier:          k50G8XU4jCBxdWGhqnP9iNEE4xcInDVwvFe3En7DTZU=
Subject key identifier:   C3:B2:7F:BE:B2:C0:40:F8:35:93:C9:B9:D1:E7:13:A2:64:E4:6F:38
Certificate issuer:       /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial:       010D0C9F4328584234C31D02213AC05636E0E980
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa99000-551c-3619-a373-d5bc5a84a5c6.roa
Signing time:             Tue 13 Jun 2023 13:00:19 +0000
ROA not before:           Tue 13 Jun 2023 13:00:19 +0000
ROA not after:            Mon 11 Sep 2023 13:00:19 +0000
asID:                     62972
IP address blocks:        206.41.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:34:c3:1d:02:21:3a:c0:56:36:e0:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
        Validity
            Not Before: Jun 13 13:00:19 2023 GMT
            Not After : Sep 11 13:00:19 2023 GMT
        Subject: CN=82205842-8bcb-4bb0-acdd-4b7b48f0cc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:9c:a9:87:5e:a6:81:06:fc:dd:a0:d3:87:
                    c8:f1:5f:fa:82:74:75:bf:46:6f:71:64:c1:5f:d9:
                    77:52:e2:13:2e:5e:8b:88:99:e8:0b:77:e0:90:26:
                    51:ba:eb:80:80:67:38:7c:6a:f0:dc:43:15:01:64:
                    24:bd:f5:fd:8f:9a:bb:1e:ba:5a:04:f5:7f:be:a6:
                    89:13:c8:fc:df:a3:29:5a:08:b5:e3:f9:63:24:ae:
                    e2:74:13:14:ff:56:ff:1c:a9:7e:73:24:8b:d3:68:
                    ba:94:fa:6f:5c:f0:14:96:27:00:16:fc:cc:72:7b:
                    47:24:f6:fd:0d:a2:12:dd:b8:a3:51:85:f6:1d:2c:
                    a9:48:33:e6:77:e5:c1:7b:8f:e8:a7:50:a7:98:83:
                    76:06:a5:66:31:f7:e4:9d:e8:19:3c:9c:92:45:ad:
                    28:f2:5b:ea:e4:c7:48:14:13:f4:27:06:dd:b2:bc:
                    b7:04:07:3b:f2:0d:12:23:cc:aa:31:c0:84:7c:13:
                    85:3d:19:ee:b6:4b:8e:4d:8d:0f:62:43:a7:e2:f6:
                    64:f3:57:dd:a2:cf:23:0e:a1:ce:6c:22:c3:7b:89:
                    88:d5:87:67:2f:f3:25:5c:f6:ce:5f:d1:af:62:4a:
                    df:ac:63:f9:49:e7:3d:cf:f8:fa:98:63:d8:9f:e8:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B2:7F:BE:B2:C0:40:F8:35:93:C9:B9:D1:E7:13:A2:64:E4:6F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa99000-551c-3619-a373-d5bc5a84a5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:13:d9:76:e4:cc:46:5a:c2:27:e9:cb:e2:13:9c:8d:19:06:
         e0:8a:05:5b:77:9d:f0:e2:54:a4:7e:8f:46:d8:da:b9:3c:43:
         d2:48:42:93:1d:6b:da:5b:88:b1:12:50:ba:ea:e8:00:d9:6e:
         37:ff:44:f8:88:8d:f2:09:9a:70:59:dd:f7:00:c7:a8:3d:03:
         60:da:8d:bf:fc:4c:5a:50:cb:b9:77:07:2b:af:05:98:30:75:
         0f:b2:03:2c:85:c7:a3:85:27:74:bf:bc:30:16:d2:a1:b3:fb:
         57:89:78:2e:4c:0b:db:17:c8:5c:31:e6:8b:1e:8a:90:13:7b:
         22:f7:a2:a7:a0:cd:74:c6:17:05:ef:fd:49:03:93:3c:c3:fc:
         94:9c:cf:cd:ab:41:d2:ca:ff:e3:e2:ef:96:11:8c:ef:1d:0e:
         e8:da:2f:9a:43:f7:3e:d1:23:8e:dd:ff:37:1a:35:9f:f7:25:
         48:8e:01:d2:d6:48:cc:54:91:5e:11:da:76:3b:f8:5a:6c:78:
         e4:ba:e7:b7:51:cd:ad:6c:51:46:1f:d7:a0:19:2f:8c:e9:84:
         45:59:f8:31:1a:82:cd:e5:38:eb:9e:76:6c:a7:4b:7f:00:d4:
         c2:09:11:01:74:d3:a9:0f:27:97:c6:11:fe:b0:d7:0e:bc:3f:
         71:79:b2:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEI0wx0CITrAVjbg6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh
YTk5MB4XDTIzMDYxMzEzMDAxOVoXDTIzMDkxMTEzMDAxOVowLzEtMCsGA1UEAxMk
ODIyMDU4NDItOGJjYi00YmIwLWFjZGQtNGI3YjQ4ZjBjYzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNOcqYdepoEG/N2g04fI8V/6gnR1v0ZvcWTB
X9l3UuITLl6LiJnoC3fgkCZRuuuAgGc4fGrw3EMVAWQkvfX9j5q7HrpaBPV/vqaJ
E8j836MpWgi14/ljJK7idBMU/1b/HKl+cySL02i6lPpvXPAUlicAFvzMcntHJPb9
DaIS3bijUYX2HSypSDPmd+XBe4/op1CnmIN2BqVmMffknegZPJySRa0o8lvq5MdI
FBP0Jwbdsry3BAc78g0SI8yqMcCEfBOFPRnutkuOTY0PYkOn4vZk81fdos8jDqHO
bCLDe4mI1YdnL/MlXPbOX9GvYkrfrGP5Sec9z/j6mGPYn+jJ3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOyf76ywED4NZPJudHnE6Jk5G84MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl
MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhOTkwMDAtNTUxYy0z
NjE5LWEzNzMtZDViYzVhODRhNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj
MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw
YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk
YmM3MGFhOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAT2XbkzEZawifpy+ITnI0ZBuCKBVt3nfDiVKR+j0bY2rk8Q9JIQpMd
a9pbiLESULrq6ADZbjf/RPiIjfIJmnBZ3fcAx6g9A2Dajb/8TFpQy7l3ByuvBZgw
dQ+yAyyFx6OFJ3S/vDAW0qGz+1eJeC5MC9sXyFwx5oseipATeyL3oqegzXTGFwXv
/UkDkzzD/JScz82rQdLK/+Pi75YRjO8dDujaL5pD9z7RI47d/zcaNZ/3JUiOAdLW
SMxUkV4R2nY7+FpseOS657dRza1sUUYf16AZL4zphEVZ+DEags3lOOuedmynS38A
1MIJEQF006kPJ5fGEf6w1w68P3F5srA=
-----END CERTIFICATE-----