Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/f99c2875-1c67-38c0-9dfe-08559604424c.roa
File:                     f99c2875-1c67-38c0-9dfe-08559604424c.roa (raw, json)
Hash identifier:          wT36Wp8woFRMeW79//2uDpur/KRIfGuQZYO8mtMCVXc=
Subject key identifier:   3E:A9:C0:81:BD:B2:E8:47:B3:81:0A:E6:71:1E:5D:FA:6D:E0:11:EF
Certificate issuer:       /CN=08ed5d26-737b-4818-a76d-ac026d331614
Certificate serial:       010D0C9F4328583F8890B7E664B18F71FA6CCC00
Authority key identifier: B8:54:5F:B0:9B:1A:05:9C:0F:03:AE:4F:1D:3A:0A:17:9F:0D:D9:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/f99c2875-1c67-38c0-9dfe-08559604424c.roa
Signing time:             Mon 10 Oct 2022 18:46:40 +0000
ROA not before:           Mon 10 Oct 2022 18:46:40 +0000
ROA not after:            Sun 12 Jan 2025 05:00:00 +0000
asID:                     43350
IP address blocks:        128.254.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:88:90:b7:e6:64:b1:8f:71:fa:6c:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08ed5d26-737b-4818-a76d-ac026d331614
        Validity
            Not Before: Oct 10 18:46:40 2022 GMT
            Not After : Jan 12 05:00:00 2025 GMT
        Subject: CN=99472be2-ce57-44a2-96b2-08bec497b2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:20:33:67:37:b5:f9:f2:9c:dc:08:4a:68:
                    b7:5b:0e:5b:32:19:ab:ac:17:76:44:32:ca:7e:59:
                    89:ef:7f:02:60:c7:32:ac:0e:da:04:df:ee:85:a1:
                    95:c6:9d:87:38:f8:11:51:ab:6e:1f:0f:f3:d8:d6:
                    55:6f:56:e6:79:c2:9d:c2:09:c2:ff:15:e7:2d:51:
                    d0:77:56:bb:22:79:09:97:5c:2a:6e:87:45:c2:20:
                    90:6f:d5:a7:c7:62:26:03:b9:c7:3f:8a:d9:36:0c:
                    e8:8b:75:74:6d:9b:4f:a5:bb:95:32:ee:0e:22:6f:
                    c8:f7:b6:2f:62:73:fa:9e:a2:be:cb:57:cf:bb:c9:
                    b3:8b:0e:59:2e:8a:3c:4a:b4:d5:d7:54:98:d3:05:
                    3c:d0:f7:5f:d0:78:69:e2:aa:66:bd:df:d3:25:7b:
                    b1:1c:39:a1:64:c7:8a:58:4f:18:50:8a:f6:4a:3e:
                    df:ee:03:7f:9f:60:4c:1c:30:70:06:57:f9:4a:2c:
                    cf:6e:6f:bb:a2:b6:11:cd:89:f3:dd:39:3b:df:5b:
                    88:65:8f:40:0f:43:09:d9:46:7d:86:73:00:8b:2c:
                    6a:88:e3:53:b1:61:cb:ba:80:23:c7:1f:13:1d:88:
                    26:fa:ed:2b:92:7a:f9:4d:e3:55:36:0d:50:39:3a:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A9:C0:81:BD:B2:E8:47:B3:81:0A:E6:71:1E:5D:FA:6D:E0:11:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/f99c2875-1c67-38c0-9dfe-08559604424c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/08ed5d26-737b-4818-a76d-ac026d331614.crl

            X509v3 Authority Key Identifier:
                keyid:B8:54:5F:B0:9B:1A:05:9C:0F:03:AE:4F:1D:3A:0A:17:9F:0D:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:b0:99:bd:a3:6a:19:26:c6:8c:9a:3a:d0:e8:0c:08:fb:
         7e:45:46:d0:b2:de:83:70:5e:65:e3:b8:d6:61:f2:77:62:16:
         fe:9f:20:ef:f4:d1:1c:f3:bd:28:be:cb:ca:fc:65:8e:7d:2d:
         4a:4a:48:42:bb:87:d8:41:6a:23:21:c0:74:ba:dd:e4:49:cd:
         9b:1a:42:86:b2:b1:8c:d0:80:3b:23:53:ce:b1:af:28:24:70:
         71:dc:84:54:0f:9e:5c:c7:30:47:08:aa:d9:37:9f:81:da:f4:
         6c:80:bb:76:60:a5:eb:0d:e5:c5:2c:fc:12:0d:2f:a1:f7:6b:
         e6:1f:9f:eb:86:2d:22:62:a7:e0:55:8e:68:e6:ad:85:68:5e:
         33:d8:7a:34:df:af:38:5b:a9:98:f8:b5:a1:98:80:57:01:9b:
         31:f9:ad:c9:f6:28:ef:96:49:46:b8:19:8c:2f:ec:ef:26:bb:
         10:90:4d:5e:fd:79:be:75:87:ee:aa:74:7c:43:f4:c9:9b:3a:
         29:a5:77:b3:f1:2f:7c:c7:4a:84:b2:58:1e:40:f6:ee:2e:5b:
         60:12:b7:66:e7:a9:64:03:b1:c3:9c:68:36:a1:53:6c:bb:cd:
         0e:11:df:69:c4:e2:25:d7:53:51:ec:40:72:7c:cc:03:e0:2e:
         81:60:77:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+IkLfmZLGPcfpszAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhlZDVkMjYtNzM3Yi00ODE4LWE3NmQtYWMwMjZkMzMx
NjE0MB4XDTIyMTAxMDE4NDY0MFoXDTI1MDExMjA1MDAwMFowLzEtMCsGA1UEAxMk
OTk0NzJiZTItY2U1Ny00NGEyLTk2YjItMDhiZWM0OTdiMmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgUgM2c3tfnynNwISmi3Ww5bMhmrrBd2RDLK
flmJ738CYMcyrA7aBN/uhaGVxp2HOPgRUatuHw/z2NZVb1bmecKdwgnC/xXnLVHQ
d1a7InkJl1wqbodFwiCQb9Wnx2ImA7nHP4rZNgzoi3V0bZtPpbuVMu4OIm/I97Yv
YnP6nqK+y1fPu8mziw5ZLoo8SrTV11SY0wU80Pdf0Hhp4qpmvd/TJXuxHDmhZMeK
WE8YUIr2Sj7f7gN/n2BMHDBwBlf5SizPbm+7orYRzYnz3Tk731uIZY9AD0MJ2UZ9
hnMAiyxqiONTsWHLuoAjxx8THYgm+u0rknr5TeNVNg1QOTrHIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6pwIG9suhHs4EK5nEeXfpt4BHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOGVk
NWQyNi03MzdiLTQ4MTgtYTc2ZC1hYzAyNmQzMzE2MTQvZjk5YzI4NzUtMWM2Ny0z
OGMwLTlkZmUtMDg1NTk2MDQ0MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDhlZDVkMjYtNzM3Yi00ODE4LWE3
NmQtYWMwMjZkMzMxNjE0LzA4ZWQ1ZDI2LTczN2ItNDgxOC1hNzZkLWFjMDI2ZDMz
MTYxNC5jcmwwHwYDVR0jBBgwFoAUuFRfsJsaBZwPA65PHToKF58N2SAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOGVkNWQyNi03MzdiLTQ4MTgtYTc2ZC1hYzAy
NmQzMzE2MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP6xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjzsJm9o2oZJsaMmjrQ6AwI+35FRtCy3oNwXmXjuNZh8ndiFv6fIO/0
0RzzvSi+y8r8ZY59LUpKSEK7h9hBaiMhwHS63eRJzZsaQoaysYzQgDsjU86xrygk
cHHchFQPnlzHMEcIqtk3n4Ha9GyAu3ZgpesN5cUs/BINL6H3a+Yfn+uGLSJip+BV
jmjmrYVoXjPYejTfrzhbqZj4taGYgFcBmzH5rcn2KO+WSUa4GYwv7O8muxCQTV79
eb51h+6qdHxD9MmbOimld7PxL3zHSoSyWB5A9u4uW2ASt2bnqWQDscOcaDahU2y7
zQ4R32nE4iXXU1HsQHJ8zAPgLoFgd2s=
-----END CERTIFICATE-----