Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/3a76f340-542f-3905-aeed-589695efb056.roa
File:                     3a76f340-542f-3905-aeed-589695efb056.roa (raw, json)
Hash identifier:          u59GQo5yOBF5LFadEmGeWNSU8SNf8YuSuhbn+hSkEPI=
Subject key identifier:   41:3D:E6:C0:76:5C:A0:BE:C4:FD:9F:68:86:D6:BE:61:D9:2B:D2:02
Certificate issuer:       /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial:       010D0C9F432858424EB0B6142ECC5D5FD496A880
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/3a76f340-542f-3905-aeed-589695efb056.roa
Signing time:             Thu 22 Jun 2023 19:54:22 +0000
ROA not before:           Thu 22 Jun 2023 19:54:22 +0000
ROA not after:            Wed 20 Sep 2023 19:54:22 +0000
asID:                     13830
IP address blocks:        174.136.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:b0:b6:14:2e:cc:5d:5f:d4:96:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
        Validity
            Not Before: Jun 22 19:54:22 2023 GMT
            Not After : Sep 20 19:54:22 2023 GMT
        Subject: CN=958428f5-414e-446e-b4fe-5d45a91679a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:32:26:56:e3:80:7b:da:21:2d:5b:6c:b8:
                    4a:1b:3a:6c:ab:57:47:94:5a:53:1e:f0:11:27:3a:
                    58:6a:e5:c1:73:4d:32:d2:1e:25:31:53:4c:80:50:
                    eb:43:7c:09:d6:70:8b:d1:89:52:53:9f:06:cc:bb:
                    8b:e4:4e:1a:8f:c6:f7:4b:a8:a0:b6:24:7b:c4:72:
                    5a:5d:f1:f2:9b:5c:bb:87:79:61:39:63:cb:9c:6a:
                    03:70:1c:49:6b:5e:f9:cf:b2:68:8e:61:41:5a:d3:
                    43:4a:b5:89:ff:e6:c7:67:d5:d6:5a:53:86:b2:e9:
                    89:32:3f:8e:b6:8d:0a:c8:75:f1:7c:b6:82:a2:1d:
                    21:ee:b1:cc:9d:98:48:b1:67:0d:10:b0:0f:d8:c3:
                    5b:38:8c:5e:7a:d5:3b:72:c0:44:2c:5a:b6:10:c9:
                    95:2c:9d:cb:87:53:56:39:fe:c6:25:82:93:2d:bd:
                    c4:c2:60:ae:32:83:e8:2b:f1:b4:2f:33:ea:70:b8:
                    68:ae:b4:6d:44:19:8a:63:31:50:be:47:84:a4:b8:
                    a5:ca:4e:fc:33:77:74:d8:31:a5:f9:45:92:41:ed:
                    c1:45:e1:66:b8:1e:94:71:11:16:bc:76:a2:cd:2c:
                    84:19:41:c1:de:63:12:e1:ed:d9:d1:e7:60:aa:6b:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3D:E6:C0:76:5C:A0:BE:C4:FD:9F:68:86:D6:BE:61:D9:2B:D2:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/3a76f340-542f-3905-aeed-589695efb056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl

            X509v3 Authority Key Identifier:
                keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:0f:bb:7e:32:44:9e:09:3c:58:3b:ab:ae:c3:90:4e:ba:
         dd:95:9e:44:45:69:94:8b:e2:7e:c5:48:dd:48:ed:d5:2c:71:
         41:16:cd:d9:89:de:6c:8e:18:e9:9b:9c:ed:aa:f0:c9:c1:7f:
         68:05:97:ec:7e:50:0b:6c:dc:6f:55:04:56:92:42:44:64:12:
         fb:e6:97:b2:22:e1:c6:e6:9b:1b:b3:01:db:6a:df:dd:2f:7e:
         34:cb:f0:b3:30:41:19:46:64:99:a7:cf:bc:ae:2f:5b:48:b3:
         63:c7:d9:7f:a9:5e:f7:8d:83:82:57:d8:75:db:d0:db:1d:2c:
         4c:0c:13:34:69:98:74:f0:27:d8:42:3e:45:12:cb:4e:fb:05:
         18:b4:4c:6e:39:e2:01:9f:d0:c8:59:56:f6:2d:73:82:e4:6d:
         7c:26:b7:57:a7:b3:35:e6:4b:84:26:ea:59:03:5f:27:2c:34:
         f1:1f:dd:1f:99:0e:ed:a0:30:fd:af:2c:14:5f:38:10:f0:30:
         90:8d:11:ca:87:9e:75:eb:c6:13:6e:9f:c1:46:4b:e3:76:9d:
         86:0e:43:75:a5:8e:77:02:26:bd:0a:6e:13:35:4f:7b:0f:f6:
         65:40:58:29:15:cc:e0:3e:e1:d7:fa:38:96:a4:56:68:72:22:
         4c:45:a1:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJOsLYULsxdX9SWqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg5YWI5ZDUtZWFhMi00YTcyLTg3MjEtNzhhM2ZlMTEw
NjgwMB4XDTIzMDYyMjE5NTQyMloXDTIzMDkyMDE5NTQyMlowLzEtMCsGA1UEAxMk
OTU4NDI4ZjUtNDE0ZS00NDZlLWI0ZmUtNWQ0NWE5MTY3OWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyUyJlbjgHvaIS1bbLhKGzpsq1dHlFpTHvAR
JzpYauXBc00y0h4lMVNMgFDrQ3wJ1nCL0YlSU58GzLuL5E4aj8b3S6igtiR7xHJa
XfHym1y7h3lhOWPLnGoDcBxJa175z7JojmFBWtNDSrWJ/+bHZ9XWWlOGsumJMj+O
to0KyHXxfLaCoh0h7rHMnZhIsWcNELAP2MNbOIxeetU7csBELFq2EMmVLJ3Lh1NW
Of7GJYKTLb3EwmCuMoPoK/G0LzPqcLhorrRtRBmKYzFQvkeEpLilyk78M3d02DGl
+UWSQe3BReFmuB6UcREWvHaizSyEGUHB3mMS4e3Z0edgqmsh3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEE95sB2XKC+xP2faIbWvmHZK9ICMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ODlh
YjlkNS1lYWEyLTRhNzItODcyMS03OGEzZmUxMTA2ODAvM2E3NmYzNDAtNTQyZi0z
OTA1LWFlZWQtNTg5Njk1ZWZiMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTg5YWI5ZDUtZWFhMi00YTcyLTg3
MjEtNzhhM2ZlMTEwNjgwLzU4OWFiOWQ1LWVhYTItNGE3Mi04NzIxLTc4YTNmZTEx
MDY4MC5jcmwwHwYDVR0jBBgwFoAUbyZ8dlCkFkcmkzn3ZwVPgDkTo/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ODlhYjlkNS1lYWEyLTRhNzItODcyMS03OGEz
ZmUxMTA2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrojoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHtD7t+MkSeCTxYO6uuw5BOut2VnkRFaZSL4n7FSN1I7dUscUEWzdmJ
3myOGOmbnO2q8MnBf2gFl+x+UAts3G9VBFaSQkRkEvvml7Ii4cbmmxuzAdtq390v
fjTL8LMwQRlGZJmnz7yuL1tIs2PH2X+pXveNg4JX2HXb0NsdLEwMEzRpmHTwJ9hC
PkUSy077BRi0TG454gGf0MhZVvYtc4LkbXwmt1enszXmS4Qm6lkDXycsNPEf3R+Z
Du2gMP2vLBRfOBDwMJCNEcqHnnXrxhNun8FGS+N2nYYOQ3WljncCJr0KbhM1T3sP
9mVAWCkVzOA+4df6OJakVmhyIkxFoc8=
-----END CERTIFICATE-----