Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9abf96d-9f33-3ac2-82ac-63536797bf4d.roa
File:                     f9abf96d-9f33-3ac2-82ac-63536797bf4d.roa (raw, json)
Hash identifier:          ZFsy0swsAtAukw8YJa9yq4UjXZ8U6lyUBCZ4MCm5FSI=
Subject key identifier:   C5:CF:E6:2C:AC:82:D6:81:DB:61:C0:F3:95:3A:AF:15:FC:95:63:19
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A1A3D4382DD1BE702803D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9abf96d-9f33-3ac2-82ac-63536797bf4d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        108.170.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1a:3d:43:82:dd:1b:e7:02:80:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=647652ec-4be8-4844-8820-33f9e91bfe6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8c:86:6d:86:36:92:61:06:d6:94:ab:2f:42:
                    c4:10:c5:18:a9:85:48:2c:d2:d6:59:2e:fc:7a:68:
                    0e:02:65:61:5f:04:61:b4:25:bd:18:cf:cb:f5:90:
                    ba:ca:5a:f7:63:28:bc:08:11:03:fc:9a:f4:ae:e1:
                    d2:0b:86:97:32:14:e2:71:4e:33:52:0e:91:ea:a0:
                    ae:da:4d:e7:7e:cb:f4:f0:cf:99:dc:14:fa:c4:5f:
                    18:bd:0f:39:2d:2c:4e:95:cb:d0:0d:43:fa:2c:8b:
                    7a:cb:b7:c2:3e:98:d1:b3:93:fe:c3:12:bd:6b:97:
                    33:d2:49:72:5f:1c:62:9d:43:9b:8b:2b:c6:a1:36:
                    92:8b:ba:89:d2:cf:53:02:6d:55:54:be:da:8d:70:
                    19:fb:7b:e8:0a:47:27:a0:5e:e0:c6:c5:63:56:54:
                    d1:ef:6f:42:8c:8a:fa:85:57:97:8d:09:06:b0:0e:
                    94:05:6c:ed:57:80:a0:24:f3:af:9e:b4:b4:37:5b:
                    24:12:86:41:63:07:e1:bb:95:fa:3a:3b:08:f7:0a:
                    0b:1c:6d:c2:33:b2:de:f1:c1:76:b8:6a:d0:e1:46:
                    cf:9a:ff:01:c7:af:60:b6:22:35:01:b3:ca:a0:41:
                    37:bd:47:d2:47:3a:59:0c:3d:c1:36:4a:cc:02:e9:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CF:E6:2C:AC:82:D6:81:DB:61:C0:F3:95:3A:AF:15:FC:95:63:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9abf96d-9f33-3ac2-82ac-63536797bf4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:fb:c1:5d:5d:7e:4b:59:d3:41:bb:e1:db:b5:bd:02:d2:
         2d:36:03:65:b0:e2:d7:40:92:5a:75:6b:ae:a9:41:d9:5e:d5:
         ee:10:ba:1e:3c:3e:a9:e7:39:56:a6:0f:37:95:11:03:39:1a:
         c3:db:36:74:5b:bd:41:fb:38:62:d5:56:7e:35:d1:1a:89:ee:
         08:bd:25:43:95:b5:60:f6:48:4b:70:a0:66:ea:e1:55:3c:17:
         d2:76:ca:15:c7:ee:53:93:ea:69:a3:65:ae:7f:62:06:ba:a2:
         aa:9d:44:d6:86:0c:65:05:a7:e0:e5:45:1b:42:2d:36:82:35:
         d4:ed:f3:8a:2a:e4:a8:a9:70:48:0c:dd:ee:e4:e0:33:88:1e:
         36:11:fe:cd:9c:1f:3e:99:a8:78:a6:d4:08:35:c2:ea:97:24:
         31:c1:b6:53:49:e0:a9:62:7f:9b:58:9d:46:d0:b5:b9:c7:e8:
         f6:e6:e0:86:30:9a:89:5d:78:d2:98:3b:26:33:c1:a3:f6:8c:
         d7:0c:33:cb:75:ba:1c:b5:7f:03:21:72:ea:40:06:84:13:e3:
         5c:4d:d3:e1:44:fd:9b:3a:e3:5a:79:56:03:3e:73:0f:db:e6:
         4a:71:c1:17:14:81:1f:dc:c2:e5:18:32:97:53:b7:2a:4d:5d:
         49:f3:c6:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGj1Dgt0b5wKAPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjQ3NjUyZWMtNGJlOC00ODQ0LTg4MjAtMzNmOWU5MWJmZTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIyGbYY2kmEG1pSrL0LEEMUYqYVILNLWWS78
emgOAmVhXwRhtCW9GM/L9ZC6ylr3Yyi8CBED/Jr0ruHSC4aXMhTicU4zUg6R6qCu
2k3nfsv08M+Z3BT6xF8YvQ85LSxOlcvQDUP6LIt6y7fCPpjRs5P+wxK9a5cz0kly
XxxinUObiyvGoTaSi7qJ0s9TAm1VVL7ajXAZ+3voCkcnoF7gxsVjVlTR729CjIr6
hVeXjQkGsA6UBWztV4CgJPOvnrS0N1skEoZBYwfhu5X6OjsI9woLHG3CM7Le8cF2
uGrQ4UbPmv8Bx69gtiI1AbPKoEE3vUfSRzpZDD3BNkrMAunhWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXP5iysgtaB22HA85U6rxX8lWMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjlhYmY5NmQtOWYzMy0z
YWMyLTgyYWMtNjM1MzY3OTdiZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtR+8FdXX5LWdNBu+Hbtb0C0i02A2Ww4tdAklp1a66pQdle1e4Quh48
PqnnOVamDzeVEQM5GsPbNnRbvUH7OGLVVn410RqJ7gi9JUOVtWD2SEtwoGbq4VU8
F9J2yhXH7lOT6mmjZa5/Yga6oqqdRNaGDGUFp+DlRRtCLTaCNdTt84oq5KipcEgM
3e7k4DOIHjYR/s2cHz6ZqHim1Ag1wuqXJDHBtlNJ4Klif5tYnUbQtbnH6Pbm4IYw
moldeNKYOyYzwaP2jNcMM8t1uhy1fwMhcupABoQT41xN0+FE/Zs641p5VgM+cw/b
5kpxwRcUgR/cwuUYMpdTtypNXUnzxno=
-----END CERTIFICATE-----