Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/9cc092ce-71c9-3fc8-a132-5c35c354f0ef.roa
File:                     9cc092ce-71c9-3fc8-a132-5c35c354f0ef.roa (raw, json)
Hash identifier:          4FiKJX4Kj9/VobOEWCfh7Ee3B/akaVNj1Vnrd+lUYS4=
Subject key identifier:   98:71:AC:7C:A7:D1:9B:AA:3D:A9:50:68:0B:F0:A5:13:6D:D0:00:91
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F432858428B9176319D405AF56FFA2200
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/9cc092ce-71c9-3fc8-a132-5c35c354f0ef.roa
Signing time:             Fri 14 Jul 2023 15:15:43 +0000
ROA not before:           Fri 14 Jul 2023 15:15:43 +0000
ROA not after:            Thu 12 Oct 2023 15:15:43 +0000
asID:                     23470
IP address blocks:        206.168.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8b:91:76:31:9d:40:5a:f5:6f:fa:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Jul 14 15:15:43 2023 GMT
            Not After : Oct 12 15:15:43 2023 GMT
        Subject: CN=e040e839-c9ed-455c-a7df-9149913f035c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:5f:69:bc:44:db:93:c1:76:60:aa:bf:5b:
                    4e:fe:1a:d1:2a:1d:8e:69:66:24:9a:b5:28:5c:1c:
                    a7:d4:c1:86:44:e3:27:f3:18:65:1d:f3:9f:9c:e2:
                    ff:98:8c:78:18:eb:3d:1d:c3:65:48:ae:53:5a:8c:
                    fa:d9:a2:ba:c2:77:aa:9e:07:b0:86:30:84:10:d5:
                    26:28:1c:64:77:dd:da:e9:a1:fc:13:33:83:f5:85:
                    0b:76:a8:8b:60:17:1e:13:d6:98:ff:a5:86:e4:ed:
                    4c:bc:73:74:80:0f:dc:c4:8c:78:4a:7b:e4:02:54:
                    fc:bd:9c:c5:f0:dd:f9:3d:cb:7e:1f:16:ac:bd:69:
                    bb:8e:b4:8a:2f:94:30:51:e5:c5:c3:81:d7:d4:64:
                    b9:fe:7e:18:c1:fe:74:66:c9:0a:e6:4b:a6:1e:78:
                    18:57:52:e1:d9:7a:46:53:3e:c8:dd:3d:a6:46:3d:
                    24:cb:ec:bb:66:d1:8c:ae:58:ab:f1:57:4e:1c:09:
                    40:45:5c:d7:97:36:61:06:99:1d:37:ed:28:16:a0:
                    8c:cb:1a:19:64:3a:1a:15:3c:8d:0b:d7:9e:4b:6d:
                    c7:be:bc:62:a3:79:15:ee:7d:f5:f1:b1:72:20:12:
                    23:f2:08:67:69:a1:15:f9:9f:22:a7:a8:46:f4:ad:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:71:AC:7C:A7:D1:9B:AA:3D:A9:50:68:0B:F0:A5:13:6D:D0:00:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/9cc092ce-71c9-3fc8-a132-5c35c354f0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:08:42:82:dd:58:31:4c:60:64:0c:51:6c:84:a4:6d:c3:
         b3:38:b5:82:eb:25:6c:6f:25:b6:42:06:81:15:84:e9:6f:30:
         1a:09:94:21:d7:9d:0e:f6:84:4e:15:50:ec:68:b3:6e:a0:e6:
         48:e1:af:4f:a6:e3:94:64:b7:2e:64:2e:24:6c:18:24:be:ef:
         e0:b5:2a:c7:0e:1d:28:14:12:e7:3a:5d:60:40:9b:b2:f4:9d:
         4d:a1:34:14:27:2a:60:01:6c:56:9c:7b:55:f8:f7:15:39:77:
         0c:e6:be:f1:1a:ad:35:a2:7a:34:00:38:51:94:4d:99:6b:f8:
         f2:c6:07:1d:80:6f:86:69:4f:3f:2d:e8:a7:8b:cc:9c:14:38:
         23:fe:e8:16:d7:c9:bd:39:5d:05:db:cc:51:f3:fc:0b:dd:74:
         8c:0a:65:28:c3:18:12:48:e7:9e:22:fb:23:78:59:4b:f9:62:
         4c:4f:29:48:94:8f:d2:e8:f7:46:5c:bc:6d:32:55:c1:5c:80:
         a1:ac:54:ac:bf:b4:3b:4f:50:a8:fd:2b:95:1b:34:73:45:3b:
         72:e9:90:0a:84:2d:c3:3f:9a:08:58:93:1e:9b:77:1e:02:0d:
         e5:2e:1a:de:cb:99:d4:5d:53:39:16:ad:94:c4:bf:e4:a4:15:
         4e:45:74:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKLkXYxnUBa9W/6IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY1MDdiNDUtYjczYi00MjA4LWI0M2QtYjdkYzdhNmZi
ZmE5MB4XDTIzMDcxNDE1MTU0M1oXDTIzMTAxMjE1MTU0M1owLzEtMCsGA1UEAxMk
ZTA0MGU4MzktYzllZC00NTVjLWE3ZGYtOTE0OTkxM2YwMzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWRfabxE25PBdmCqv1tO/hrRKh2OaWYkmrUo
XByn1MGGROMn8xhlHfOfnOL/mIx4GOs9HcNlSK5TWoz62aK6wneqngewhjCEENUm
KBxkd93a6aH8EzOD9YULdqiLYBceE9aY/6WG5O1MvHN0gA/cxIx4SnvkAlT8vZzF
8N35Pct+HxasvWm7jrSKL5QwUeXFw4HX1GS5/n4Ywf50ZskK5kumHngYV1Lh2XpG
Uz7I3T2mRj0ky+y7ZtGMrlir8VdOHAlARVzXlzZhBpkdN+0oFqCMyxoZZDoaFTyN
C9eeS23Hvrxio3kV7n318bFyIBIj8ghnaaEV+Z8ip6hG9K3B7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhxrHyn0ZuqPalQaAvwpRNt0ACRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjUw
N2I0NS1iNzNiLTQyMDgtYjQzZC1iN2RjN2E2ZmJmYTkvOWNjMDkyY2UtNzFjOS0z
ZmM4LWExMzItNWMzNWMzNTRmMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY1MDdiNDUtYjczYi00MjA4LWI0
M2QtYjdkYzdhNmZiZmE5LzA2NTA3YjQ1LWI3M2ItNDIwOC1iNDNkLWI3ZGM3YTZm
YmZhOS5jcmwwHwYDVR0jBBgwFoAUNiOnsnShCFoNRSDVeLzLNIiou5gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjUwN2I0NS1iNzNiLTQyMDgtYjQzZC1iN2Rj
N2E2ZmJmYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBOCEKC3VgxTGBkDFFshKRtw7M4tYLrJWxvJbZCBoEVhOlvMBoJlCHX
nQ72hE4VUOxos26g5kjhr0+m45Rkty5kLiRsGCS+7+C1KscOHSgUEuc6XWBAm7L0
nU2hNBQnKmABbFace1X49xU5dwzmvvEarTWiejQAOFGUTZlr+PLGBx2Ab4ZpTz8t
6KeLzJwUOCP+6BbXyb05XQXbzFHz/AvddIwKZSjDGBJI554i+yN4WUv5YkxPKUiU
j9Lo90ZcvG0yVcFcgKGsVKy/tDtPUKj9K5UbNHNFO3LpkAqELcM/mghYkx6bdx4C
DeUuGt7LmdRdUzkWrZTEv+SkFU5FdFA=
-----END CERTIFICATE-----