Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa
File:                     c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa (raw, json)
Hash identifier:          8HPC0JffTWetXoIyEzW5JadDtuqgW+JVp77nAOnJBVo=
Subject key identifier:   87:F3:BC:97:BC:F1:A3:32:7D:D9:AD:E5:57:9E:45:8B:8A:F0:02:2D
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F432858435FFD891FF4F68BF66E14B620
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa
Signing time:             Thu 28 Sep 2023 17:24:50 +0000
ROA not before:           Thu 28 Sep 2023 17:24:50 +0000
ROA not after:            Wed 27 Dec 2023 18:24:50 +0000
asID:                     0
IP address blocks:        128.254.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:fd:89:1f:f4:f6:8b:f6:6e:14:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Sep 28 17:24:50 2023 GMT
            Not After : Dec 27 18:24:50 2023 GMT
        Subject: CN=0aab86ed-c5a3-4962-af7c-ad905e6fd9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:f0:bd:20:a0:fe:68:e8:8f:63:4d:03:ec:
                    35:02:92:42:9e:4c:a3:79:5c:eb:54:2b:71:6f:51:
                    4c:20:2e:f9:d6:2c:78:25:ce:36:83:b0:d7:0a:e5:
                    b2:e4:29:14:85:45:bc:83:9a:df:4a:5c:5c:e2:c2:
                    f9:7a:6a:0a:3e:55:e0:a5:e7:17:f4:d8:7a:9a:b9:
                    bd:dc:08:43:ee:c8:e8:6b:ad:ee:45:64:be:d0:9d:
                    75:09:5b:cd:8f:d4:29:61:16:04:fc:8f:83:5e:3a:
                    71:c3:4f:29:fe:a0:d5:86:8f:55:ad:aa:ac:d6:e9:
                    ee:c1:c6:e3:ef:49:ab:67:10:55:07:13:fd:02:bc:
                    36:14:19:ab:50:82:63:9f:c1:78:b6:c4:d5:fa:45:
                    80:a0:1f:9b:fc:96:7c:3c:43:0b:0c:c5:14:11:58:
                    e2:63:99:21:d1:6c:a1:e6:c8:8d:0b:8f:c1:40:49:
                    fb:05:e3:a2:66:e8:de:15:0a:c7:20:01:6a:e6:fe:
                    e5:85:f2:a0:e8:46:29:00:6b:08:22:74:9c:db:0c:
                    97:65:4d:73:19:d7:c9:42:fe:6b:85:da:a3:04:7f:
                    72:5e:41:64:1b:ed:3f:94:2c:ce:82:ac:ca:da:7b:
                    6e:e3:8d:0f:9c:94:fe:99:05:e1:ca:cc:08:dd:69:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F3:BC:97:BC:F1:A3:32:7D:D9:AD:E5:57:9E:45:8B:8A:F0:02:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:63:8f:81:ac:80:3e:56:eb:25:79:92:77:93:b3:90:79:
         02:46:cf:bb:81:2a:d9:02:85:b4:85:ff:f8:f5:82:52:a8:6d:
         96:5e:46:05:31:c3:69:f2:0b:31:96:26:d2:96:7b:cc:86:26:
         2c:1a:0b:13:fb:c1:e4:8b:50:cf:42:e3:b6:df:95:d9:5d:00:
         f9:2a:49:be:31:a3:07:c9:08:4d:08:8c:32:90:12:92:d5:64:
         43:bc:45:32:cd:39:e2:64:39:68:ce:33:06:26:d4:3b:31:8d:
         16:df:f0:40:65:7c:d7:31:4a:72:81:21:43:3f:f6:90:5a:7b:
         be:2f:66:5d:ce:25:ff:2f:00:f3:ed:c9:8a:e5:af:c0:75:b8:
         62:7b:4a:4f:fd:d2:fc:c4:62:f4:db:fd:65:89:90:06:95:9f:
         7b:f9:fc:58:98:08:d7:ce:4e:23:28:98:d0:0f:4f:f1:dd:46:
         4f:dd:74:59:a2:a1:85:3e:c9:5b:78:64:1d:d2:77:06:3e:fe:
         5d:dd:e2:6c:53:95:bb:d2:33:02:68:17:e6:f9:46:df:d6:ec:
         b8:cf:e7:b8:36:cd:5c:18:eb:db:55:0b:c4:44:2d:13:b4:ab:
         e5:12:98:2b:f1:1d:96:39:c0:0f:ca:5e:1e:7d:10:7c:0e:36:
         35:a5:8a:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENf/Ykf9PaL9m4UtiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz
Y2ZlMB4XDTIzMDkyODE3MjQ1MFoXDTIzMTIyNzE4MjQ1MFowLzEtMCsGA1UEAxMk
MGFhYjg2ZWQtYzVhMy00OTYyLWFmN2MtYWQ5MDVlNmZkOWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWfwvSCg/mjoj2NNA+w1ApJCnkyjeVzrVCtx
b1FMIC751ix4Jc42g7DXCuWy5CkUhUW8g5rfSlxc4sL5emoKPlXgpecX9Nh6mrm9
3AhD7sjoa63uRWS+0J11CVvNj9QpYRYE/I+DXjpxw08p/qDVho9Vraqs1unuwcbj
70mrZxBVBxP9Arw2FBmrUIJjn8F4tsTV+kWAoB+b/JZ8PEMLDMUUEVjiY5kh0Wyh
5siNC4/BQEn7BeOiZujeFQrHIAFq5v7lhfKg6EYpAGsIInSc2wyXZU1zGdfJQv5r
hdqjBH9yXkFkG+0/lCzOgqzK2ntu440PnJT+mQXhyswI3WlejQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfzvJe88aMyfdmt5VeeRYuK8AItMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4
ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYzQ1MDRkM2ItYzI4MS0z
Y2E1LTlkN2ItMTRkMDc4NTNlYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj
M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5
M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4
MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP66MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACoeY4+BrIA+VusleZJ3k7OQeQJGz7uBKtkChbSF//j1glKobZZeRgUx
w2nyCzGWJtKWe8yGJiwaCxP7weSLUM9C47bfldldAPkqSb4xowfJCE0IjDKQEpLV
ZEO8RTLNOeJkOWjOMwYm1DsxjRbf8EBlfNcxSnKBIUM/9pBae74vZl3OJf8vAPPt
yYrlr8B1uGJ7Sk/90vzEYvTb/WWJkAaVn3v5/FiYCNfOTiMomNAPT/HdRk/ddFmi
oYU+yVt4ZB3SdwY+/l3d4mxTlbvSMwJoF+b5Rt/W7LjP57g2zVwY69tVC8RELRO0
q+USmCvxHZY5wA/KXh59EHwONjWliv0=
-----END CERTIFICATE-----