Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b36f954a-4931-4991-872e-f61c8c4e67fd/398ee3e1-f27c-3df0-875a-3ea3c3486f6d.roa
File:                     398ee3e1-f27c-3df0-875a-3ea3c3486f6d.roa (raw, json)
Hash identifier:          aTrhxvWqryrRT0OTKtH2sl+2CNqzrBcwYc88R1m6hYw=
Subject key identifier:   35:19:E7:2F:79:DD:1E:9D:7B:43:80:45:D2:CD:4A:89:05:3C:B9:C5
Certificate issuer:       /CN=b36f954a-4931-4991-872e-f61c8c4e67fd
Certificate serial:       010D0C9F4328584214E23E4FF8581D4140702FC0
Authority key identifier: E5:2E:74:6C:73:3F:EF:E4:C5:C9:A3:8C:F8:A3:1B:DA:74:E9:39:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b36f954a-4931-4991-872e-f61c8c4e67fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b36f954a-4931-4991-872e-f61c8c4e67fd/398ee3e1-f27c-3df0-875a-3ea3c3486f6d.roa
Signing time:             Fri 02 Jun 2023 02:57:17 +0000
ROA not before:           Fri 02 Jun 2023 02:57:17 +0000
ROA not after:            Thu 31 Aug 2023 02:57:17 +0000
asID:                     1828
IP address blocks:        64.65.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:14:e2:3e:4f:f8:58:1d:41:40:70:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b36f954a-4931-4991-872e-f61c8c4e67fd
        Validity
            Not Before: Jun  2 02:57:17 2023 GMT
            Not After : Aug 31 02:57:17 2023 GMT
        Subject: CN=d7523ca7-2bcc-4586-854e-5b5b42fc254c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:72:2c:64:e8:36:82:a4:d6:4f:34:33:31:
                    21:25:55:f1:ec:d9:8d:53:00:20:ff:79:0d:21:dd:
                    61:55:2c:3c:91:a0:f3:ce:58:02:f4:3c:8e:02:fb:
                    94:bf:cf:77:28:ea:59:b5:e0:cb:7b:c6:a1:e6:86:
                    7e:59:8e:9b:4f:23:dd:da:15:01:a9:82:7a:af:d5:
                    68:a0:02:90:c2:97:1f:a5:14:35:0b:6e:6f:9f:55:
                    cc:d2:92:06:39:0e:85:b2:9e:1d:e8:38:f6:a3:3a:
                    93:ea:81:ac:79:2d:22:35:44:25:4d:cc:61:b5:ec:
                    ae:43:42:84:20:cc:2f:08:72:c1:0e:0e:cb:9b:b3:
                    8f:f4:63:26:c3:bf:d9:9c:d3:8e:81:65:44:f8:71:
                    20:cc:33:6b:fe:b8:75:b3:82:a2:58:35:8f:ba:3a:
                    0a:69:15:61:dd:36:a1:40:4e:e0:d7:6e:b6:f1:b7:
                    27:ed:0f:39:49:c0:42:5b:a4:06:70:5e:a2:f0:4b:
                    6a:95:17:e8:1d:07:ee:38:a1:9d:af:cb:c0:2a:52:
                    79:8e:4d:df:68:18:69:08:6e:ce:39:4c:b3:ac:ed:
                    c0:45:fa:cb:f0:c8:ef:94:e4:e0:57:4d:0d:d8:69:
                    2b:95:c1:5c:38:92:29:e7:32:bb:8b:98:a6:7b:99:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:E7:2F:79:DD:1E:9D:7B:43:80:45:D2:CD:4A:89:05:3C:B9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b36f954a-4931-4991-872e-f61c8c4e67fd/398ee3e1-f27c-3df0-875a-3ea3c3486f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b36f954a-4931-4991-872e-f61c8c4e67fd/b36f954a-4931-4991-872e-f61c8c4e67fd.crl

            X509v3 Authority Key Identifier:
                keyid:E5:2E:74:6C:73:3F:EF:E4:C5:C9:A3:8C:F8:A3:1B:DA:74:E9:39:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b36f954a-4931-4991-872e-f61c8c4e67fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.65.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2e:0d:98:4f:7d:75:05:ee:42:4f:ae:ed:d5:ff:45:41:cc:
         ac:58:00:cf:d1:0a:1d:59:4c:fe:6d:8e:d5:ef:8c:4f:48:cb:
         0f:ca:8c:ca:da:61:2d:2e:ee:a2:c1:d2:6e:4c:49:ff:8b:48:
         14:77:29:9f:22:69:9c:0a:5d:7f:9a:15:d4:da:32:18:f2:9b:
         2b:65:98:a8:df:02:a9:8f:6e:49:59:e4:36:5c:6a:c3:14:01:
         8f:24:32:25:2c:f8:d2:65:16:0d:6a:68:7a:94:75:f7:c7:c3:
         03:eb:44:67:f1:ce:b3:f4:84:9f:17:13:76:9e:51:33:9c:39:
         8c:b6:59:fb:51:02:91:52:5b:49:3d:ec:c6:4a:4f:87:53:6d:
         a7:12:ae:40:8e:ac:4e:19:03:e1:c7:ea:74:5c:5a:3f:71:9d:
         b2:a8:cd:d0:72:c1:41:e7:28:7a:26:3c:bd:aa:15:73:21:05:
         29:b8:9d:35:31:30:ce:07:93:59:ec:2b:cc:7c:24:d3:36:3b:
         4d:e2:2c:52:b2:aa:9b:97:9e:8f:a1:4d:5f:21:b5:36:5e:34:
         8e:a5:ca:af:9c:47:61:14:0b:0b:03:3f:10:94:24:fe:7e:d6:
         25:e5:22:7f:28:cf:1e:2a:b7:2b:fe:70:74:c2:d6:8f:c5:b1:
         69:3d:2c:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIU4j5P+FgdQUBwL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM2Zjk1NGEtNDkzMS00OTkxLTg3MmUtZjYxYzhjNGU2
N2ZkMB4XDTIzMDYwMjAyNTcxN1oXDTIzMDgzMTAyNTcxN1owLzEtMCsGA1UEAxMk
ZDc1MjNjYTctMmJjYy00NTg2LTg1NGUtNWI1YjQyZmMyNTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXFyLGToNoKk1k80MzEhJVXx7NmNUwAg/3kN
Id1hVSw8kaDzzlgC9DyOAvuUv893KOpZteDLe8ah5oZ+WY6bTyPd2hUBqYJ6r9Vo
oAKQwpcfpRQ1C25vn1XM0pIGOQ6Fsp4d6Dj2ozqT6oGseS0iNUQlTcxhteyuQ0KE
IMwvCHLBDg7Lm7OP9GMmw7/ZnNOOgWVE+HEgzDNr/rh1s4KiWDWPujoKaRVh3Tah
QE7g12628bcn7Q85ScBCW6QGcF6i8EtqlRfoHQfuOKGdr8vAKlJ5jk3faBhpCG7O
OUyzrO3ARfrL8MjvlOTgV00N2GkrlcFcOJIp5zK7i5ime5kdiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUZ5y953R6de0OARdLNSokFPLnFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMzZm
OTU0YS00OTMxLTQ5OTEtODcyZS1mNjFjOGM0ZTY3ZmQvMzk4ZWUzZTEtZjI3Yy0z
ZGYwLTg3NWEtM2VhM2MzNDg2ZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjM2Zjk1NGEtNDkzMS00OTkxLTg3
MmUtZjYxYzhjNGU2N2ZkL2IzNmY5NTRhLTQ5MzEtNDk5MS04NzJlLWY2MWM4YzRl
NjdmZC5jcmwwHwYDVR0jBBgwFoAU5S50bHM/7+TFyaOM+KMb2nTpOY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMzZmOTU0YS00OTMxLTQ5OTEtODcyZS1mNjFj
OGM0ZTY3ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwuDZhPfXUF7kJPru3V/0VBzKxYAM/RCh1ZTP5tjtXvjE9Iyw/KjMra
YS0u7qLB0m5MSf+LSBR3KZ8iaZwKXX+aFdTaMhjymytlmKjfAqmPbklZ5DZcasMU
AY8kMiUs+NJlFg1qaHqUdffHwwPrRGfxzrP0hJ8XE3aeUTOcOYy2WftRApFSW0k9
7MZKT4dTbacSrkCOrE4ZA+HH6nRcWj9xnbKozdBywUHnKHomPL2qFXMhBSm4nTUx
MM4Hk1nsK8x8JNM2O03iLFKyqpuXno+hTV8htTZeNI6lyq+cR2EUCwsDPxCUJP5+
1iXlIn8ozx4qtyv+cHTC1o/FsWk9LDI=
-----END CERTIFICATE-----