Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/c16cf4ae-8f56-3aa3-8a7e-8d727ff0f542.roa
File:                     c16cf4ae-8f56-3aa3-8a7e-8d727ff0f542.roa (raw, json)
Hash identifier:          BiEE9QSnrfw+rGNVJn+T2x/bx3m+GghkOEWIINBGetA=
Subject key identifier:   5B:6C:66:92:A5:65:80:81:D6:C7:84:BD:CC:5A:A0:47:9A:75:AA:51
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F4328583D0710CF554C58E0DF4C6F7580
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/c16cf4ae-8f56-3aa3-8a7e-8d727ff0f542.roa
Signing time:             Tue 22 Feb 2022 05:00:00 +0000
ROA not before:           Tue 22 Feb 2022 05:00:00 +0000
ROA not after:            Tue 28 May 2024 04:00:00 +0000
asID:                     14296
IP address blocks:        23.169.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:07:10:cf:55:4c:58:e0:df:4c:6f:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: Feb 22 05:00:00 2022 GMT
            Not After : May 28 04:00:00 2024 GMT
        Subject: CN=ba16acdc-7507-44c8-85ca-7c0c80abcaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:c8:64:de:36:ed:72:2c:6a:97:cc:6e:4d:
                    65:60:7c:82:14:cc:62:d3:3c:26:99:c8:8e:eb:31:
                    e3:04:43:96:94:d2:e2:9e:a9:b3:cd:f7:7f:6c:b8:
                    8f:91:9d:ba:7a:e1:db:eb:05:d6:e2:fd:bc:5a:2a:
                    e9:8d:c6:c3:b9:7b:49:93:b4:20:cc:36:41:c3:a0:
                    08:ed:03:95:0a:72:ae:ed:e2:55:62:3c:46:fb:b3:
                    1a:c9:23:fc:3b:f7:11:34:44:2a:b3:ff:f8:65:2a:
                    95:15:9e:5b:fc:79:67:8f:03:d8:7b:e8:51:56:a5:
                    90:36:31:d5:99:e8:fc:cc:b0:19:e3:85:53:e0:c8:
                    b6:d8:a1:65:30:70:ce:42:2a:32:f9:41:eb:fc:39:
                    f3:99:8a:ca:01:51:8b:c5:1b:af:d8:70:71:a5:8a:
                    49:72:f0:21:db:bd:ac:71:2d:56:29:63:f0:6f:13:
                    2b:a0:da:73:ea:f6:7c:7e:0d:7d:94:fc:ef:88:e1:
                    21:e5:bd:d2:47:b9:4e:3c:c1:cf:ba:59:df:d2:09:
                    e8:c9:4e:36:77:29:88:b1:2f:fe:b2:72:b1:8a:db:
                    6d:45:42:15:09:25:2e:e4:05:fc:08:a9:7b:90:54:
                    d5:bf:b7:34:be:c2:cd:72:21:b0:46:fc:6a:4c:65:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6C:66:92:A5:65:80:81:D6:C7:84:BD:CC:5A:A0:47:9A:75:AA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/c16cf4ae-8f56-3aa3-8a7e-8d727ff0f542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:6c:d4:dc:ea:8e:c4:88:83:a8:f4:4a:c3:a9:ad:b8:0f:
         c8:5f:4b:57:99:da:01:40:85:bc:cc:57:02:3a:19:13:7e:1e:
         1a:57:d4:97:cf:ed:2b:57:c6:ef:f4:e9:d9:87:32:d8:e4:56:
         46:51:3f:7a:92:eb:b2:14:12:25:35:47:f3:ce:f5:63:91:b3:
         56:a1:04:86:bd:89:45:c6:2b:8f:42:00:94:e9:58:bb:fd:63:
         7e:f1:91:7f:85:12:c0:18:3d:d8:c2:27:f7:67:8b:a4:61:cf:
         8a:96:95:fe:62:6b:fc:95:11:9b:99:59:6b:ec:b0:7d:d7:05:
         0f:9b:f8:b2:42:50:2d:65:2a:d4:eb:1b:f8:06:34:44:e3:63:
         2c:4a:fe:30:5c:71:0a:77:c9:9b:d6:9f:20:95:cc:c0:aa:bc:
         70:16:c1:9f:02:bc:c2:a8:4f:18:df:a2:0b:bf:34:2d:b4:96:
         28:91:97:db:5c:1f:d7:2c:3c:cf:ea:08:3e:4e:52:02:c6:d9:
         58:37:04:31:09:24:b6:d0:6a:ce:ab:09:f6:42:5b:86:b5:ae:
         1e:65:76:e1:69:79:30:1c:cd:00:54:ce:47:12:58:57:82:bb:
         77:07:87:06:03:e5:f3:8a:ff:33:9a:4a:32:db:e9:ad:86:b0:
         ee:d0:ad:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0HEM9VTFjg30xvdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY2YTYxMjEtNzc4NC00Y2U0LWFmMzQtMGU1NjUzMGNl
M2MxMB4XDTIyMDIyMjA1MDAwMFoXDTI0MDUyODA0MDAwMFowLzEtMCsGA1UEAxMk
YmExNmFjZGMtNzUwNy00NGM4LTg1Y2EtN2MwYzgwYWJjYWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6jIZN427XIsapfMbk1lYHyCFMxi0zwmmciO
6zHjBEOWlNLinqmzzfd/bLiPkZ26euHb6wXW4v28WirpjcbDuXtJk7QgzDZBw6AI
7QOVCnKu7eJVYjxG+7MaySP8O/cRNEQqs//4ZSqVFZ5b/HlnjwPYe+hRVqWQNjHV
mej8zLAZ44VT4Mi22KFlMHDOQioy+UHr/DnzmYrKAVGLxRuv2HBxpYpJcvAh272s
cS1WKWPwbxMroNpz6vZ8fg19lPzviOEh5b3SR7lOPMHPulnf0gnoyU42dymIsS/+
snKxitttRUIVCSUu5AX8CKl7kFTVv7c0vsLNciGwRvxqTGWwfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtsZpKlZYCB1seEvcxaoEeadapRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZh
NjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2NTMwY2UzYzEvYzE2Y2Y0YWUtOGY1Ni0z
YWEzLThhN2UtOGQ3MjdmZjBmNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY2YTYxMjEtNzc4NC00Y2U0LWFm
MzQtMGU1NjUzMGNlM2MxL2U2NmE2MTIxLTc3ODQtNGNlNC1hZjM0LTBlNTY1MzBj
ZTNjMS5jcmwwHwYDVR0jBBgwFoAUOi/POciCCweDJWU6WhBWA3QH/+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZhNjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2
NTMwY2UzYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6n1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbKbNTc6o7EiIOo9ErDqa24D8hfS1eZ2gFAhbzMVwI6GRN+HhpX1JfP
7StXxu/06dmHMtjkVkZRP3qS67IUEiU1R/PO9WORs1ahBIa9iUXGK49CAJTpWLv9
Y37xkX+FEsAYPdjCJ/dni6Rhz4qWlf5ia/yVEZuZWWvssH3XBQ+b+LJCUC1lKtTr
G/gGNETjYyxK/jBccQp3yZvWnyCVzMCqvHAWwZ8CvMKoTxjfogu/NC20liiRl9tc
H9csPM/qCD5OUgLG2Vg3BDEJJLbQas6rCfZCW4a1rh5lduFpeTAczQBUzkcSWFeC
u3cHhwYD5fOK/zOaSjLb6a2GsO7Qrdc=
-----END CERTIFICATE-----