Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b86a2e21-0436-3986-9c7f-801d57498ad9.roa
File:                     b86a2e21-0436-3986-9c7f-801d57498ad9.roa (raw, json)
Hash identifier:          lsE+lwd47bIkXPN57bk4K3A/HheI3AWgtp+Ik1Q3Rqk=
Subject key identifier:   65:03:CE:4C:25:E5:49:04:A4:BC:CC:BB:35:5B:EB:B9:C0:62:1E:BF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584384861129E8B34073DC972C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b86a2e21-0436-3986-9c7f-801d57498ad9.roa
Signing time:             Wed 11 Oct 2023 19:29:02 +0000
ROA not before:           Wed 11 Oct 2023 19:29:02 +0000
ROA not after:            Tue 09 Jan 2024 20:29:02 +0000
asID:                     63023
IP address blocks:        184.174.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:84:86:11:29:e8:b3:40:73:dc:97:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 11 19:29:02 2023 GMT
            Not After : Jan  9 20:29:02 2024 GMT
        Subject: CN=766152ce-5540-4bf9-9068-2d862ef1b75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:84:4e:61:3e:4c:ad:01:08:ad:8a:19:79:
                    e5:f8:cd:25:3c:3a:e8:52:1d:69:08:99:7c:6e:0a:
                    62:eb:15:77:50:d9:7b:9f:97:27:4c:0b:71:d1:12:
                    f7:7e:ed:21:ae:65:de:1e:7b:ce:c4:cd:69:2d:0c:
                    b4:03:2a:01:dc:ed:5c:20:53:ec:51:b4:eb:b5:25:
                    be:e1:50:09:56:71:c8:e3:0f:0b:2c:54:40:ab:ee:
                    70:70:a9:6c:c5:8a:de:f7:62:4c:a7:d2:11:78:b1:
                    a6:0e:24:3c:82:b4:10:4b:b7:ba:da:b9:66:6d:ea:
                    0a:7e:3e:fb:41:db:b0:c0:0d:0b:fb:2f:f9:5a:ef:
                    01:ac:5d:f7:17:7d:c8:f8:bf:43:0e:8b:32:44:a2:
                    0d:e6:d7:e5:0d:45:1c:9d:1e:4d:09:c9:2a:ee:c9:
                    20:44:09:3a:0a:f8:1c:e6:b7:3f:eb:cd:35:71:d0:
                    1f:c6:9c:6b:d6:3c:da:99:f0:6c:7a:e8:39:fe:b2:
                    c8:70:9e:09:64:82:b1:0f:65:ac:fc:ca:e4:c7:71:
                    aa:2b:d9:ea:c3:af:b1:90:e8:a8:82:d8:cd:66:16:
                    4c:a5:34:5e:d1:be:a6:18:66:8a:7e:62:e1:d1:df:
                    ca:3f:39:b8:6d:f0:50:b1:3f:9a:97:6d:b7:81:f9:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:03:CE:4C:25:E5:49:04:A4:BC:CC:BB:35:5B:EB:B9:C0:62:1E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b86a2e21-0436-3986-9c7f-801d57498ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:d1:41:57:3b:f9:40:ef:19:99:72:08:68:0e:65:37:2d:d5:
         08:e9:81:ce:f3:21:4b:eb:56:5f:ee:e2:b2:d5:60:9b:57:47:
         11:20:1f:57:61:97:e5:9e:5c:fe:24:a5:be:88:84:ed:56:8b:
         6d:0c:87:b6:04:91:46:22:22:c8:44:3d:41:ba:13:38:51:e6:
         41:7f:df:bb:fd:b5:35:7c:91:0b:47:6b:d2:5f:3d:00:20:21:
         47:d8:47:a8:e8:c6:f4:44:e8:b4:4e:b1:97:6d:9b:f9:30:07:
         a7:e3:d4:5a:78:b1:7e:96:8f:f0:20:af:f1:41:a1:f5:22:43:
         8a:6e:93:cb:65:d0:12:fe:c7:b3:28:92:05:f9:be:dc:f5:2d:
         13:4c:10:b4:b1:9a:a1:26:a1:d0:9a:cf:03:22:1e:9d:32:2c:
         42:86:39:f9:bf:bc:cd:8b:7e:9f:04:01:c0:29:c9:65:36:78:
         62:e6:af:5f:f6:d5:ba:46:2c:fa:79:e8:62:d5:b3:b4:4b:d3:
         6c:55:f7:03:4f:af:a6:4d:fe:89:3a:a4:2f:4b:1f:3a:81:3b:
         62:be:ac:a1:73:d6:17:c9:6a:37:48:73:fe:35:35:a1:27:fa:
         39:75:94:10:fd:e8:c5:8a:88:77:48:32:ec:a6:ff:66:01:15:
         ff:59:cb:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOEhhEp6LNAc9yXLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMTAxMTE5MjkwMloXDTI0MDEwOTIwMjkwMlowLzEtMCsGA1UEAxMk
NzY2MTUyY2UtNTU0MC00YmY5LTkwNjgtMmQ4NjJlZjFiNzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimqETmE+TK0BCK2KGXnl+M0lPDroUh1pCJl8
bgpi6xV3UNl7n5cnTAtx0RL3fu0hrmXeHnvOxM1pLQy0AyoB3O1cIFPsUbTrtSW+
4VAJVnHI4w8LLFRAq+5wcKlsxYre92JMp9IReLGmDiQ8grQQS7e62rlmbeoKfj77
QduwwA0L+y/5Wu8BrF33F33I+L9DDosyRKIN5tflDUUcnR5NCckq7skgRAk6Cvgc
5rc/6801cdAfxpxr1jzamfBseug5/rLIcJ4JZIKxD2Ws/Mrkx3GqK9nqw6+xkOio
gtjNZhZMpTRe0b6mGGaKfmLh0d/KPzm4bfBQsT+al223gfkfKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUDzkwl5UkEpLzMuzVb67nAYh6/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYjg2YTJlMjEtMDQzNi0z
OTg2LTljN2YtODAxZDU3NDk4YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK4GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMnRQVc7+UDvGZlyCGgOZTct1Qjpgc7zIUvrVl/u4rLVYJtXRxEgH1dh
l+WeXP4kpb6IhO1Wi20Mh7YEkUYiIshEPUG6EzhR5kF/37v9tTV8kQtHa9JfPQAg
IUfYR6joxvRE6LROsZdtm/kwB6fj1Fp4sX6Wj/Agr/FBofUiQ4puk8tl0BL+x7Mo
kgX5vtz1LRNMELSxmqEmodCazwMiHp0yLEKGOfm/vM2Lfp8EAcApyWU2eGLmr1/2
1bpGLPp56GLVs7RL02xV9wNPr6ZN/ok6pC9LHzqBO2K+rKFz1hfJajdIc/41NaEn
+jl1lBD96MWKiHdIMuym/2YBFf9Zy7o=
-----END CERTIFICATE-----