Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/dbd4e1b0-8448-3a41-94b3-0aa44e22ae2e.roa
File:                     dbd4e1b0-8448-3a41-94b3-0aa44e22ae2e.roa (raw, json)
Hash identifier:          Gbh5NnaKtFbX0B1nB4k9bGUo1ya1sqRMVfm7gEz8k/k=
Subject key identifier:   BC:0D:09:A7:0C:CA:E1:04:E8:61:71:7E:9F:9A:92:3B:C7:D4:71:04
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A1D58051D0B40FEF2E42280
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/dbd4e1b0-8448-3a41-94b3-0aa44e22ae2e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1d:58:05:1d:0b:40:fe:f2:e4:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7368111e-1f00-4c58-8a7f-4804d814fb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:e7:79:c7:c4:14:9d:6d:0f:fa:7b:e7:58:
                    86:96:fa:e1:17:40:03:27:77:19:33:0e:14:4e:0b:
                    a0:bc:3b:16:b6:69:a7:6d:21:b8:19:a7:7f:18:50:
                    11:1a:b4:71:a1:01:92:cf:2c:db:46:78:fe:5f:a9:
                    93:77:f3:f6:43:3e:20:dc:56:5d:a6:f9:63:43:a4:
                    36:2c:5e:dc:21:e7:9f:cf:b7:e4:20:48:e6:32:f8:
                    22:21:fa:26:68:18:51:34:c8:aa:d8:86:05:6a:11:
                    57:65:c2:f4:45:2a:95:8a:dc:06:ef:29:13:41:d6:
                    72:83:f6:ad:29:48:4e:0a:c8:7c:7a:16:11:d1:2d:
                    3d:dc:66:02:b1:58:51:73:3f:e5:75:c7:2c:50:44:
                    4f:87:9e:fe:d4:7d:0d:46:8f:e2:f4:6a:c0:19:ff:
                    8d:10:d2:1b:91:ff:40:b2:84:72:f7:58:40:19:f1:
                    18:65:35:66:19:50:4a:0c:60:d2:31:5d:49:1d:41:
                    22:35:d1:f3:0a:08:96:2b:c9:e4:9b:b7:25:c5:3e:
                    96:9a:17:1a:0e:de:5f:2a:c1:d7:b0:0c:2e:1c:3b:
                    e2:df:f3:62:91:f2:c2:40:30:03:66:83:71:bc:76:
                    ee:00:4f:49:f7:8e:c4:0c:be:f4:9e:97:f5:2b:8a:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0D:09:A7:0C:CA:E1:04:E8:61:71:7E:9F:9A:92:3B:C7:D4:71:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/dbd4e1b0-8448-3a41-94b3-0aa44e22ae2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e9:ef:19:23:9e:40:7f:7e:c4:c5:c4:b2:21:f8:51:8e:e3:
         98:12:87:10:78:cc:93:5a:7d:4f:a8:ca:c9:4e:7a:53:d9:41:
         07:44:9b:8d:91:00:f8:69:dc:7e:8b:2b:83:42:fb:83:f0:4b:
         84:7c:52:04:64:cd:8d:ae:17:39:04:73:35:83:ba:4a:09:40:
         2b:6c:4b:c9:b6:91:e9:17:bd:da:33:63:4b:69:c4:86:2f:65:
         71:4a:a4:e2:6d:a7:35:65:f8:ad:a0:08:fe:ea:c2:26:bb:81:
         c3:c8:eb:a7:c6:4d:87:c8:e9:c8:88:a8:b1:0f:a3:cc:85:f2:
         ec:eb:6e:ce:38:48:82:b1:3a:f5:01:db:a4:ac:bf:2d:40:8f:
         42:22:a5:dd:b5:28:cb:82:29:ed:16:6e:28:7b:0d:d6:27:22:
         85:a1:37:eb:c3:ff:fd:a0:ba:4e:e9:83:22:42:b5:bf:ff:db:
         86:07:6d:36:7a:49:2d:53:cc:cf:73:ed:b1:36:e1:15:25:f8:
         2f:18:76:19:e4:52:3f:a2:63:0d:d2:3b:49:89:06:86:16:3d:
         10:cc:e5:6b:62:5e:49:81:92:71:65:37:73:4d:7d:1d:0d:66:
         72:a1:a7:d5:63:56:39:72:f9:89:35:e4:50:78:09:1d:f9:06:
         4c:2e:3b:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHVgFHQtA/vLkIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzM2ODExMWUtMWYwMC00YzU4LThhN2YtNDgwNGQ4MTRmYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSrnecfEFJ1tD/p751iGlvrhF0ADJ3cZMw4U
TgugvDsWtmmnbSG4Gad/GFARGrRxoQGSzyzbRnj+X6mTd/P2Qz4g3FZdpvljQ6Q2
LF7cIeefz7fkIEjmMvgiIfomaBhRNMiq2IYFahFXZcL0RSqVitwG7ykTQdZyg/at
KUhOCsh8ehYR0S093GYCsVhRcz/ldccsUERPh57+1H0NRo/i9GrAGf+NENIbkf9A
soRy91hAGfEYZTVmGVBKDGDSMV1JHUEiNdHzCgiWK8nkm7clxT6WmhcaDt5fKsHX
sAwuHDvi3/NikfLCQDADZoNxvHbuAE9J947EDL70npf1K4r5kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwNCacMyuEE6GFxfp+akjvH1HEEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZGJkNGUxYjAtODQ0OC0z
YTQxLTk0YjMtMGFhNDRlMjJhZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHp7xkjnkB/fsTFxLIh+FGO45gShxB4zJNafU+oyslOelPZQQdEm42R
APhp3H6LK4NC+4PwS4R8UgRkzY2uFzkEczWDukoJQCtsS8m2kekXvdozY0tpxIYv
ZXFKpOJtpzVl+K2gCP7qwia7gcPI66fGTYfI6ciIqLEPo8yF8uzrbs44SIKxOvUB
26Ssvy1Aj0Iipd21KMuCKe0Wbih7DdYnIoWhN+vD//2guk7pgyJCtb//24YHbTZ6
SS1TzM9z7bE24RUl+C8YdhnkUj+iYw3SO0mJBoYWPRDM5WtiXkmBknFlN3NNfR0N
ZnKhp9VjVjly+Yk15FB4CR35BkwuO40=
-----END CERTIFICATE-----