Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/93a2aa77-d404-3a8b-8f32-953edda7aeb1.roa
File:                     93a2aa77-d404-3a8b-8f32-953edda7aeb1.roa (raw, json)
Hash identifier:          aMZlrdNO9OFvCAN0mZiPynQKvE6UH5vUPD2jCWjradg=
Subject key identifier:   4B:18:86:74:D1:17:9D:89:5B:9A:2F:B8:2F:8B:08:5C:2A:02:EE:F6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840FF7C4736A9B5375EEA862400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/93a2aa77-d404-3a8b-8f32-953edda7aeb1.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 27 May 2025 04:00:00 +0000
asID:                     142430
IP address blocks:        173.211.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ff:7c:47:36:a9:b5:37:5e:ea:86:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : May 27 04:00:00 2025 GMT
        Subject: CN=fb604a94-5009-43b8-a75b-b35a3566453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ea:31:78:c9:82:ce:37:19:a8:ee:b9:c9:74:
                    60:ed:ec:7a:e2:8b:ee:aa:2d:bb:2c:27:66:7a:e4:
                    cb:ed:48:98:de:cf:96:38:e2:5f:c4:7c:2c:1e:50:
                    bd:b4:53:d1:fc:a2:1b:4f:9b:c5:11:0f:2c:fb:f9:
                    ee:14:37:0f:e3:c9:29:f6:0c:84:1a:db:f8:fe:1e:
                    f0:c5:3c:d8:2d:81:5c:7d:60:1b:13:3d:a6:00:d5:
                    1e:55:82:c4:0f:7d:85:b6:46:8e:24:16:f1:31:a0:
                    37:7c:18:56:28:75:ab:49:77:01:d1:2e:12:2e:d4:
                    a1:1a:bd:31:9b:31:73:ae:f5:db:29:9d:35:90:c5:
                    8a:9e:08:d4:8b:4d:03:cf:1e:8f:e9:8a:43:a6:09:
                    bd:28:51:b7:ed:93:0a:a5:93:6d:00:da:33:b1:8b:
                    e9:3b:b7:d0:c8:e7:b5:af:e2:55:a1:e4:73:4b:90:
                    ec:f1:7a:47:4c:cd:f4:32:d4:3b:db:42:ab:8e:4e:
                    77:ae:a8:65:37:8d:ff:81:83:06:38:b9:69:8b:04:
                    60:c2:e9:02:56:fc:b1:7a:54:f7:2a:99:bc:e3:b4:
                    62:73:3d:93:74:e6:b3:72:a0:73:62:cb:63:21:ec:
                    9a:8b:6b:28:d0:35:59:ed:c3:c6:06:60:2b:09:80:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:86:74:D1:17:9D:89:5B:9A:2F:B8:2F:8B:08:5C:2A:02:EE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/93a2aa77-d404-3a8b-8f32-953edda7aeb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:ac:6e:42:c1:97:8e:c7:cb:64:06:65:d5:43:b2:0f:93:
         32:14:14:f5:01:d7:3e:a8:13:e7:6a:85:fb:6d:77:05:e5:f4:
         b1:e9:b0:f4:3c:98:38:1f:09:ad:a0:d1:7e:81:31:73:35:f3:
         c0:71:2c:e5:14:3c:ee:51:65:7b:c9:6f:c3:26:f3:f1:d4:1e:
         8b:89:4c:60:b4:2d:bc:4a:4a:82:f8:a3:af:c3:ab:d6:6f:c0:
         7a:63:f3:e4:27:4f:0f:05:58:fb:70:fa:cd:28:f2:a3:f5:08:
         bb:ef:3b:f9:39:78:91:2d:61:00:c0:32:30:f4:26:ac:3c:b7:
         e2:2d:45:ca:e0:dc:2b:df:e6:ae:30:6e:ff:bc:f2:4b:d6:74:
         91:f4:09:9a:0c:12:3f:5d:dc:b1:fb:7c:2c:71:00:cf:56:27:
         2d:69:bd:5b:fd:61:fc:d3:8a:79:e9:cd:b5:12:4e:22:4c:8b:
         49:3e:e3:6c:24:5e:64:35:e2:b5:e3:9a:14:aa:27:68:cc:91:
         9a:06:c1:6e:98:d0:8f:80:68:79:61:3b:75:b2:ca:70:34:64:
         b2:b7:e9:4d:fc:44:52:a3:18:ed:57:70:49:50:6c:ea:f7:b5:
         11:4b:67:5f:a3:78:03:cd:7c:d1:73:ce:60:7e:61:a6:47:13:
         6c:73:82:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWED/fEc2qbU3XuqGJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIyMTIxMzE4MjcwOVoXDTI1MDUyNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmI2MDRhOTQtNTAwOS00M2I4LWE3NWItYjM1YTM1NjY0NTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeoxeMmCzjcZqO65yXRg7ex64ovuqi27LCdm
euTL7UiY3s+WOOJfxHwsHlC9tFPR/KIbT5vFEQ8s+/nuFDcP48kp9gyEGtv4/h7w
xTzYLYFcfWAbEz2mANUeVYLED32FtkaOJBbxMaA3fBhWKHWrSXcB0S4SLtShGr0x
mzFzrvXbKZ01kMWKngjUi00Dzx6P6YpDpgm9KFG37ZMKpZNtANozsYvpO7fQyOe1
r+JVoeRzS5Ds8XpHTM30MtQ720Krjk53rqhlN43/gYMGOLlpiwRgwukCVvyxelT3
Kpm847Ricz2TdOazcqBzYstjIeyai2so0DVZ7cPGBmArCYCAbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsYhnTRF52JW5ovuC+LCFwqAu72MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTNhMmFhNzctZDQwNC0z
YThiLThmMzItOTUzZWRkYTdhZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEO0rG5CwZeOx8tkBmXVQ7IPkzIUFPUB1z6oE+dqhfttdwXl9LHpsPQ8
mDgfCa2g0X6BMXM188BxLOUUPO5RZXvJb8Mm8/HUHouJTGC0LbxKSoL4o6/Dq9Zv
wHpj8+QnTw8FWPtw+s0o8qP1CLvvO/k5eJEtYQDAMjD0Jqw8t+ItRcrg3Cvf5q4w
bv+88kvWdJH0CZoMEj9d3LH7fCxxAM9WJy1pvVv9YfzTinnpzbUSTiJMi0k+42wk
XmQ14rXjmhSqJ2jMkZoGwW6Y0I+AaHlhO3WyynA0ZLK36U38RFKjGO1XcElQbOr3
tRFLZ1+jeAPNfNFzzmB+YaZHE2xzgkA=
-----END CERTIFICATE-----