Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33277b43-0999-3fc4-bbc6-bace3eb2425b.roa
File:                     33277b43-0999-3fc4-bbc6-bace3eb2425b.roa (raw, json)
Hash identifier:          4rVciH7VyIsOklSrSFCT4Vko++04+kLJEZmTMF50CUA=
Subject key identifier:   33:05:3C:10:22:5F:15:EA:BA:F3:C0:53:DE:07:FD:98:3B:82:A6:84
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842AB69248BBD59D71C73839CE0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33277b43-0999-3fc4-bbc6-bace3eb2425b.roa
Signing time:             Wed 26 Jul 2023 01:00:16 +0000
ROA not before:           Wed 26 Jul 2023 01:00:16 +0000
ROA not after:            Tue 24 Oct 2023 01:00:16 +0000
asID:                     50867
IP address blocks:        172.94.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ab:69:24:8b:bd:59:d7:1c:73:83:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 26 01:00:16 2023 GMT
            Not After : Oct 24 01:00:16 2023 GMT
        Subject: CN=b86f9d56-2c8d-4e66-89e5-0dd9fee8af34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:a5:2d:70:58:9b:b3:44:e1:4b:48:13:02:
                    25:34:93:40:68:26:03:8d:77:af:20:1a:b0:87:70:
                    3d:10:b8:ea:56:06:e0:4d:4f:52:60:62:bb:d6:fd:
                    3e:1b:04:d3:a0:c3:a8:26:dd:9d:71:f8:70:43:5c:
                    e2:1d:00:c3:09:42:2c:30:c5:df:39:10:49:c1:01:
                    51:79:ff:3b:ef:1c:3c:3a:e7:91:38:c8:d9:47:79:
                    c5:51:d4:8e:5b:20:54:69:0d:7e:fe:72:e4:73:1d:
                    7b:29:7c:21:8a:42:5c:74:48:49:5d:b4:86:0c:cc:
                    99:8f:4b:d0:30:cd:aa:ae:e4:4e:8e:83:f1:b8:be:
                    74:3f:8f:dd:e6:98:b8:68:16:c7:ae:90:0d:44:fe:
                    c1:0d:6a:d9:3f:f0:1a:ca:2a:a5:51:57:40:b9:25:
                    84:05:76:c0:03:05:c2:b6:77:52:b8:b5:f8:8d:36:
                    98:08:aa:0d:ab:98:66:70:d5:94:8e:00:b6:f3:e4:
                    26:e5:a0:2e:20:01:54:2b:ca:4f:73:93:aa:a7:17:
                    6e:8c:a1:4b:54:a3:3f:3d:f9:5d:ac:fb:e9:23:45:
                    9f:05:5a:1b:6b:fe:53:57:b9:a8:ba:ea:3d:51:33:
                    1d:4f:37:10:f1:48:e1:e0:c0:bc:31:02:39:42:dd:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:05:3C:10:22:5F:15:EA:BA:F3:C0:53:DE:07:FD:98:3B:82:A6:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33277b43-0999-3fc4-bbc6-bace3eb2425b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:4b:90:cd:9b:54:bc:d4:6b:13:22:16:4b:76:4d:78:bf:
         5b:bc:27:4a:ba:18:10:51:5d:bc:25:81:a0:9f:0c:f1:80:b1:
         98:00:1d:7e:25:16:ae:61:2e:e2:c9:05:ca:39:49:16:d8:29:
         04:8a:70:06:a2:53:67:f2:32:57:1e:d1:b5:d2:ce:b3:5a:ab:
         20:63:f9:4c:8e:aa:b1:eb:8e:3c:37:04:49:93:d4:b6:e7:e2:
         49:e7:7f:47:a5:29:43:a0:f2:c5:53:eb:e9:dc:bd:2f:f1:36:
         79:0c:07:36:50:19:7a:17:d4:ea:67:d4:17:a7:3d:72:b1:2c:
         f1:a8:c1:2b:c5:fb:85:d0:64:94:59:ec:ab:13:02:f6:76:5c:
         76:b0:07:af:f1:1f:8c:b2:aa:05:50:d0:14:b3:b5:47:f0:c9:
         cd:7c:be:a6:fd:cc:19:f8:ee:dc:c6:bf:cf:43:9c:24:c9:e2:
         a8:18:7b:0a:1e:f8:3a:e4:49:e3:61:49:34:99:ee:a2:dd:35:
         9a:ab:fe:33:88:62:c5:d6:38:0a:fe:40:53:16:63:85:2f:5c:
         93:87:f6:71:fe:b3:90:75:f5:7a:d4:bf:d3:4b:ef:64:a8:d5:
         e9:2f:cf:58:27:fc:aa:f9:e8:7d:04:b1:5e:9a:5d:93:8b:72:
         42:29:3a:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKraSSLvVnXHHODnOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDcyNjAxMDAxNloXDTIzMTAyNDAxMDAxNlowLzEtMCsGA1UEAxMk
Yjg2ZjlkNTYtMmM4ZC00ZTY2LTg5ZTUtMGRkOWZlZThhZjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NKlLXBYm7NE4UtIEwIlNJNAaCYDjXevIBqw
h3A9ELjqVgbgTU9SYGK71v0+GwTToMOoJt2dcfhwQ1ziHQDDCUIsMMXfORBJwQFR
ef877xw8OueROMjZR3nFUdSOWyBUaQ1+/nLkcx17KXwhikJcdEhJXbSGDMyZj0vQ
MM2qruROjoPxuL50P4/d5pi4aBbHrpANRP7BDWrZP/AayiqlUVdAuSWEBXbAAwXC
tndSuLX4jTaYCKoNq5hmcNWUjgC28+Qm5aAuIAFUK8pPc5OqpxdujKFLVKM/Pfld
rPvpI0WfBVoba/5TV7mouuo9UTMdTzcQ8Ujh4MC8MQI5Qt0qxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMFPBAiXxXquvPAU94H/Zg7gqaEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzMyNzdiNDMtMDk5OS0z
ZmM0LWJiYzYtYmFjZTNlYjI0MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMaS5DNm1S81GsTIhZLdk14v1u8J0q6GBBRXbwlgaCfDPGAsZgAHX4l
Fq5hLuLJBco5SRbYKQSKcAaiU2fyMlce0bXSzrNaqyBj+UyOqrHrjjw3BEmT1Lbn
4knnf0elKUOg8sVT6+ncvS/xNnkMBzZQGXoX1Opn1BenPXKxLPGowSvF+4XQZJRZ
7KsTAvZ2XHawB6/xH4yyqgVQ0BSztUfwyc18vqb9zBn47tzGv89DnCTJ4qgYewoe
+DrkSeNhSTSZ7qLdNZqr/jOIYsXWOAr+QFMWY4UvXJOH9nH+s5B19XrUv9NL72So
1ekvz1gn/Kr56H0EsV6aXZOLckIpOhI=
-----END CERTIFICATE-----