Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dca93688-7a77-39a7-bb5a-5610984a1912.roa
File:                     dca93688-7a77-39a7-bb5a-5610984a1912.roa (raw, json)
Hash identifier:          R9vystt4tFuOKjiThePgOmAYpfVJfKMt+zqBJY92CWo=
Subject key identifier:   F5:BC:DE:35:8F:AD:3F:54:AD:E4:2B:21:FE:AC:6D:4A:A9:35:70:31
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A1B0C6A071B3113E9366000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dca93688-7a77-39a7-bb5a-5610984a1912.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1b:0c:6a:07:1b:31:13:e9:36:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5c5aa3d4-8581-4500-896b-2f1fe82a654b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:29:df:e5:84:d1:de:ea:9d:d3:ef:5d:9f:
                    00:c0:9a:93:28:8a:7b:c3:cd:17:d5:64:a4:65:fc:
                    56:36:63:57:1b:5e:a7:95:9f:f8:86:75:c1:53:8e:
                    77:da:45:18:37:5a:83:37:e8:16:f9:4d:a5:c5:e6:
                    d4:8e:d9:78:77:0d:41:48:51:1e:22:ce:e9:1c:c6:
                    5d:37:ec:2e:6a:6c:2a:0a:69:4d:d3:7e:5e:12:73:
                    a4:05:8b:ad:a1:ab:ef:4c:95:e8:69:7f:5a:92:b0:
                    95:99:52:d4:70:74:f1:70:82:9a:e2:61:38:2f:1c:
                    28:c6:28:21:74:20:c8:cf:90:2f:dd:fa:6b:4c:bc:
                    b4:85:24:79:44:e0:03:18:c8:d8:74:8b:41:4f:2c:
                    50:7a:a9:bd:0b:38:60:c6:40:fa:f2:7f:93:a5:83:
                    31:f2:96:7d:0e:69:61:ee:5b:56:37:9c:7d:8a:26:
                    eb:8c:0b:5e:50:10:6a:b5:e0:31:52:6b:65:66:bf:
                    33:5b:97:92:f4:b6:ee:c4:8c:aa:de:0f:f6:ba:8f:
                    f6:9a:72:18:76:77:ff:cd:2f:fc:e8:08:1e:19:c2:
                    e8:df:8e:9c:f9:f7:83:ba:5b:c5:ae:72:a1:54:23:
                    de:77:c4:ed:0c:f0:44:85:88:81:85:6f:48:ef:ed:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BC:DE:35:8F:AD:3F:54:AD:E4:2B:21:FE:AC:6D:4A:A9:35:70:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dca93688-7a77-39a7-bb5a-5610984a1912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:41:b5:c2:a8:0e:37:af:0b:13:b2:62:f2:fb:be:11:a2:2d:
         d5:25:97:e1:f0:07:4a:fb:3b:99:eb:7b:dd:b9:4a:2f:3d:41:
         62:e5:fb:29:16:2c:dc:4a:6a:3d:3b:43:2a:a0:a7:16:0a:8b:
         f4:2c:41:e0:51:06:7f:02:10:46:f6:14:08:19:52:69:d6:8a:
         5a:e3:a3:39:3e:09:18:c4:f9:10:3c:8c:fd:4b:c9:74:9d:b7:
         b1:45:62:d9:59:17:fe:df:c5:42:34:f7:e9:ce:c0:03:b0:d3:
         4f:ea:77:fc:6c:1a:27:0d:ac:f0:1d:87:78:3e:15:2f:e3:cc:
         69:3e:d0:24:39:55:6e:1b:01:74:45:bd:84:c9:80:90:60:20:
         5e:58:01:e7:1d:13:20:7c:f0:46:60:cc:1c:9b:91:dc:8b:3b:
         e0:88:4c:50:b9:6e:dd:94:ab:6f:78:18:a3:85:18:07:1c:d7:
         c7:ea:eb:25:41:1c:f7:30:e7:10:c3:b9:96:29:f7:52:79:ea:
         60:a7:89:9d:55:82:60:c4:fd:73:5a:39:2f:b7:7c:c5:6d:b7:
         68:a6:20:93:7f:e7:8d:71:63:b4:1c:37:17:7d:16:2d:e1:5e:
         bd:9b:2e:29:bc:3b:95:0f:db:4c:75:0b:d1:5f:fd:0d:27:63:
         90:49:62:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGwxqBxsxE+k2YAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWM1YWEzZDQtODU4MS00NTAwLTg5NmItMmYxZmU4MmE2NTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEp3+WE0d7qndPvXZ8AwJqTKIp7w80X1WSk
ZfxWNmNXG16nlZ/4hnXBU4532kUYN1qDN+gW+U2lxebUjtl4dw1BSFEeIs7pHMZd
N+wuamwqCmlN035eEnOkBYutoavvTJXoaX9akrCVmVLUcHTxcIKa4mE4Lxwoxigh
dCDIz5Av3fprTLy0hSR5ROADGMjYdItBTyxQeqm9CzhgxkD68n+TpYMx8pZ9Dmlh
7ltWN5x9iibrjAteUBBqteAxUmtlZr8zW5eS9LbuxIyq3g/2uo/2mnIYdnf/zS/8
6AgeGcLo346c+feDulvFrnKhVCPed8TtDPBEhYiBhW9I7+2P6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPW83jWPrT9UreQrIf6sbUqpNXAxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGNhOTM2ODgtN2E3Ny0z
OWE3LWJiNWEtNTYxMDk4NGExOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFBtcKoDjevCxOyYvL7vhGiLdUll+HwB0r7O5nre925Si89QWLl+ykW
LNxKaj07QyqgpxYKi/QsQeBRBn8CEEb2FAgZUmnWilrjozk+CRjE+RA8jP1LyXSd
t7FFYtlZF/7fxUI09+nOwAOw00/qd/xsGicNrPAdh3g+FS/jzGk+0CQ5VW4bAXRF
vYTJgJBgIF5YAecdEyB88EZgzBybkdyLO+CITFC5bt2Uq294GKOFGAcc18fq6yVB
HPcw5xDDuZYp91J56mCniZ1VgmDE/XNaOS+3fMVtt2imIJN/541xY7QcNxd9Fi3h
Xr2bLim8O5UP20x1C9Ff/Q0nY5BJYoU=
-----END CERTIFICATE-----