Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/1256bd72-0e69-341f-be7d-358e853abead.roa
File:                     1256bd72-0e69-341f-be7d-358e853abead.roa (raw, json)
Hash identifier:          WHqO96RM4Jf/7n5g9drDPj5OHm4qhG0nr0bncZbqvlk=
Subject key identifier:   03:38:88:3C:B6:4E:46:81:B3:CA:13:B4:23:4E:9E:1D:91:34:47:61
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F43285842DC442888C339354DA8D1AE80
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/1256bd72-0e69-341f-be7d-358e853abead.roa
Signing time:             Sat 12 Aug 2023 13:00:23 +0000
ROA not before:           Sat 12 Aug 2023 13:00:23 +0000
ROA not after:            Fri 10 Nov 2023 14:00:23 +0000
asID:                     62833
IP address blocks:        45.78.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:dc:44:28:88:c3:39:35:4d:a8:d1:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Aug 12 13:00:23 2023 GMT
            Not After : Nov 10 14:00:23 2023 GMT
        Subject: CN=61e4ea99-f834-4d02-be5f-4853db712fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:bc:ce:fa:3a:eb:ef:64:74:34:39:b4:5b:
                    a3:7f:6c:bf:29:ab:a0:91:f2:65:5e:bf:63:23:c6:
                    7e:18:b5:6c:a6:41:d7:76:8c:ec:a3:d4:b4:17:5e:
                    cb:95:51:df:a8:07:41:92:3a:6f:51:2c:78:39:b1:
                    f3:fe:8b:05:af:fd:fa:c0:78:d6:08:ba:9b:48:50:
                    f0:69:fb:39:c1:59:7d:3f:6e:40:01:a0:68:53:41:
                    8c:5f:4f:19:7b:09:36:b6:d1:d0:d3:1e:b9:8d:aa:
                    f8:b0:e0:2f:25:f9:e5:40:a6:25:19:7f:5e:9d:50:
                    d9:20:36:ad:dc:53:9d:91:88:63:66:cf:23:24:a8:
                    a5:f7:e3:14:57:b7:c3:0c:b3:fa:92:4a:75:3f:c1:
                    10:45:ea:16:ed:40:3e:d0:0a:9b:90:dc:24:c8:38:
                    21:ec:9f:76:77:ef:25:21:7d:55:33:d0:cc:d2:89:
                    1b:18:27:95:63:0d:24:2b:15:73:04:6f:fe:a8:b4:
                    14:ae:e4:72:f4:ff:a3:92:f1:44:89:3d:4d:7c:c4:
                    b1:b5:c5:14:73:19:35:e6:71:ec:80:64:a4:b4:c4:
                    d4:e9:43:ef:b7:4f:38:04:46:34:14:fd:8c:24:ed:
                    c7:36:f3:98:fb:05:8d:ee:25:72:a1:49:7d:df:49:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:38:88:3C:B6:4E:46:81:B3:CA:13:B4:23:4E:9E:1D:91:34:47:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/1256bd72-0e69-341f-be7d-358e853abead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.78.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e9:ab:c3:b1:e8:05:80:b4:e9:93:cf:96:a1:50:b0:94:a1:
         47:b4:17:0c:76:55:b4:a3:ed:fa:6b:41:36:98:7b:6c:21:24:
         98:7d:cc:36:68:3a:9e:e3:f4:14:2a:cc:8f:ec:78:32:f7:c7:
         08:86:91:83:c5:b9:18:0c:a9:b4:ba:a5:5c:77:f7:05:9e:ca:
         b1:4c:59:92:89:db:0e:7b:08:b7:c1:c2:2b:60:03:c6:71:a4:
         bf:cc:35:c1:78:a4:e7:6b:38:b8:d7:d1:68:f7:e0:4e:0e:0e:
         5a:ec:f2:5b:e7:75:16:d0:5d:a8:26:0d:42:6b:3a:4b:55:aa:
         c6:2a:68:ef:cc:d7:92:6a:64:24:d5:8f:6b:e9:a6:39:2d:2d:
         ee:0e:3b:6b:fc:7d:ea:10:22:63:ac:2b:67:6b:1d:fc:b3:62:
         16:0a:c1:32:ea:d4:54:8d:21:fb:7b:83:f1:74:5c:28:ac:95:
         1c:02:81:6d:6b:74:72:91:e6:d5:43:40:34:24:93:e4:61:80:
         23:24:fb:b9:14:e3:7f:cc:57:29:73:c1:ae:cb:83:df:7e:64:
         aa:8a:f2:c1:b3:85:79:0c:dc:d0:1d:ef:5a:1d:ae:c2:bb:bf:
         52:3e:77:f9:42:43:9a:44:9d:80:d9:bb:cf:60:78:b9:ff:43:
         92:e6:26:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELcRCiIwzk1TajRroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI3NTU0YWItZjAwZi00ZmI1LWI1ZTMtNmZjNDQzYWEz
MGVkMB4XDTIzMDgxMjEzMDAyM1oXDTIzMTExMDE0MDAyM1owLzEtMCsGA1UEAxMk
NjFlNGVhOTktZjgzNC00ZDAyLWJlNWYtNDg1M2RiNzEyZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDa8zvo66+9kdDQ5tFujf2y/KaugkfJlXr9j
I8Z+GLVspkHXdozso9S0F17LlVHfqAdBkjpvUSx4ObHz/osFr/36wHjWCLqbSFDw
afs5wVl9P25AAaBoU0GMX08Zewk2ttHQ0x65jar4sOAvJfnlQKYlGX9enVDZIDat
3FOdkYhjZs8jJKil9+MUV7fDDLP6kkp1P8EQReoW7UA+0AqbkNwkyDgh7J92d+8l
IX1VM9DM0okbGCeVYw0kKxVzBG/+qLQUruRy9P+jkvFEiT1NfMSxtcUUcxk15nHs
gGSktMTU6UPvt084BEY0FP2MJO3HNvOY+wWN7iVyoUl930keOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAM4iDy2TkaBs8oTtCNOnh2RNEdhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMjc1
NTRhYi1mMDBmLTRmYjUtYjVlMy02ZmM0NDNhYTMwZWQvMTI1NmJkNzItMGU2OS0z
NDFmLWJlN2QtMzU4ZTg1M2FiZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTI3NTU0YWItZjAwZi00ZmI1LWI1
ZTMtNmZjNDQzYWEzMGVkLzEyNzU1NGFiLWYwMGYtNGZiNS1iNWUzLTZmYzQ0M2Fh
MzBlZC5jcmwwHwYDVR0jBBgwFoAU+we/L43Q5FW0Wyazf6IvLwxovcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMjc1NTRhYi1mMDBmLTRmYjUtYjVlMy02ZmM0
NDNhYTMwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALU6VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTpq8Ox6AWAtOmTz5ahULCUoUe0Fwx2VbSj7fprQTaYe2whJJh9zDZo
Op7j9BQqzI/seDL3xwiGkYPFuRgMqbS6pVx39wWeyrFMWZKJ2w57CLfBwitgA8Zx
pL/MNcF4pOdrOLjX0Wj34E4ODlrs8lvndRbQXagmDUJrOktVqsYqaO/M15JqZCTV
j2vppjktLe4OO2v8feoQImOsK2drHfyzYhYKwTLq1FSNIft7g/F0XCislRwCgW1r
dHKR5tVDQDQkk+RhgCMk+7kU43/MVylzwa7Lg99+ZKqK8sGzhXkM3NAd71odrsK7
v1I+d/lCQ5pEnYDZu89geLn/Q5LmJpI=
-----END CERTIFICATE-----