Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c821afa-8038-33cc-9c00-4a8d3adc4b26.roa
File:                     2c821afa-8038-33cc-9c00-4a8d3adc4b26.roa (raw, json)
Hash identifier:          7NacP5Y0DeuV6E1PqnW4XdmmL4V0WQb23U1yflKPCKw=
Subject key identifier:   CF:09:63:80:3C:7E:4A:BC:33:FA:1D:04:0B:50:A9:9F:33:3C:DF:21
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309ED3848090CB67623AD30C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c821afa-8038-33cc-9c00-4a8d3adc4b26.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        208.87.174.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:38:48:09:0c:b6:76:23:ad:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9b16fbe6-a6a8-4b49-a406-dd97b3170d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:53:6d:75:a0:dc:4b:43:b8:96:ca:22:4c:1c:
                    1b:91:46:54:7c:00:4b:8d:90:2d:01:c3:0a:e1:b2:
                    8e:25:cd:7e:d2:21:5c:f6:42:70:5b:2e:62:01:48:
                    05:f5:12:ed:f4:07:4c:d6:39:f3:7b:fa:1a:11:ea:
                    fa:ce:0f:d0:78:76:ad:bb:b2:8b:d4:bf:17:ab:e5:
                    8e:93:13:85:72:c6:4b:c0:67:aa:9d:87:21:21:cf:
                    a3:ac:82:f0:d7:e0:4d:6e:5c:9e:54:c2:05:01:f1:
                    21:f9:a6:cb:23:78:24:7f:ae:91:ce:7e:a4:b0:50:
                    91:bd:26:9e:0d:62:8d:d9:2a:f7:84:70:48:bc:45:
                    e2:40:aa:c8:da:ed:e9:60:6b:da:58:6f:9c:9f:2a:
                    f1:77:a5:38:d3:a1:23:c0:b9:c7:bb:78:8c:cd:29:
                    ce:80:69:83:0f:67:37:68:83:73:3c:fa:e9:0d:e6:
                    84:63:23:c6:94:3c:69:40:ed:aa:30:6b:f3:09:db:
                    87:94:62:3e:f3:46:30:89:c0:9a:88:8c:da:4f:79:
                    b3:53:16:d1:3f:57:ac:24:d5:ae:c8:74:2c:1c:a0:
                    e4:26:f3:36:c0:9e:cf:b0:d7:6f:24:fb:28:d5:80:
                    4c:13:cb:69:d0:3a:bb:43:d7:02:ed:c8:3c:48:42:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:63:80:3C:7E:4A:BC:33:FA:1D:04:0B:50:A9:9F:33:3C:DF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c821afa-8038-33cc-9c00-4a8d3adc4b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:8a:05:89:e2:69:8f:94:9d:79:21:5c:60:97:39:53:74:
         02:dc:76:3f:d3:62:eb:bd:5a:5a:40:4f:2a:53:0e:94:28:fe:
         d5:6f:f4:4f:5f:09:7b:c8:c0:02:4b:07:7d:12:82:77:60:1c:
         02:23:f6:c0:85:02:5d:8a:2f:17:71:ea:e4:31:c9:19:09:b5:
         1f:10:fb:78:c2:ac:32:1d:30:ba:58:de:19:8b:59:58:c1:0e:
         88:d5:75:cd:36:7d:eb:b0:f6:d9:4d:c7:d9:9d:e2:02:2c:bb:
         9d:10:c6:1e:07:65:68:3c:45:05:53:26:74:3f:d0:8d:52:84:
         b7:5a:f2:b0:d8:16:4d:19:d9:e6:7e:4c:82:47:1f:bc:86:7f:
         7e:63:5c:77:76:ce:04:18:73:ec:51:7c:3c:d4:5e:bb:b1:08:
         b6:d2:af:37:86:61:81:b9:18:0e:2a:4e:6f:04:84:70:35:0b:
         39:b7:2f:0e:f4:3c:50:35:b5:9e:4d:be:dd:27:a6:aa:e8:64:
         ea:51:e0:7a:e4:fa:cf:0b:cf:8a:aa:46:15:bf:e8:f6:92:86:
         79:ec:cb:07:95:5a:3c:0c:6d:ca:3c:26:7f:1e:71:0e:40:b6:
         b1:76:70:23:f6:20:4b:4f:aa:9c:e5:a5:3e:0d:ce:e7:bf:00:
         dc:64:fe:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7ThICQy2diOtMMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWIxNmZiZTYtYTZhOC00YjQ5LWE0MDYtZGQ5N2IzMTcwZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVNtdaDcS0O4lsoiTBwbkUZUfABLjZAtAcMK
4bKOJc1+0iFc9kJwWy5iAUgF9RLt9AdM1jnze/oaEer6zg/QeHatu7KL1L8Xq+WO
kxOFcsZLwGeqnYchIc+jrILw1+BNblyeVMIFAfEh+abLI3gkf66Rzn6ksFCRvSae
DWKN2Sr3hHBIvEXiQKrI2u3pYGvaWG+cnyrxd6U406EjwLnHu3iMzSnOgGmDD2c3
aINzPPrpDeaEYyPGlDxpQO2qMGvzCduHlGI+80YwicCaiIzaT3mzUxbRP1esJNWu
yHQsHKDkJvM2wJ7PsNdvJPso1YBME8tp0Dq7Q9cC7cg8SEL3jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8JY4A8fkq8M/odBAtQqZ8zPN8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmM4MjFhZmEtODAzOC0z
M2NjLTljMDAtNGE4ZDNhZGM0YjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FeuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAC1igWJ4mmPlJ15IVxglzlTdALcdj/TYuu9WlpATypTDpQo/tVv9E9f
CXvIwAJLB30SgndgHAIj9sCFAl2KLxdx6uQxyRkJtR8Q+3jCrDIdMLpY3hmLWVjB
DojVdc02feuw9tlNx9md4gIsu50Qxh4HZWg8RQVTJnQ/0I1ShLda8rDYFk0Z2eZ+
TIJHH7yGf35jXHd2zgQYc+xRfDzUXruxCLbSrzeGYYG5GA4qTm8EhHA1Czm3Lw70
PFA1tZ5Nvt0npqroZOpR4Hrk+s8Lz4qqRhW/6PaShnnsyweVWjwMbco8Jn8ecQ5A
trF2cCP2IEtPqpzlpT4Nzue/ANxk/jw=
-----END CERTIFICATE-----