Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ac178b44-dc9e-3858-a02b-b9bcedd034e8.roa
File:                     ac178b44-dc9e-3858-a02b-b9bcedd034e8.roa (raw, json)
Hash identifier:          QceoawajqttGlJfmvW8ziEzmX9RQM+I1o8uqldD1IiQ=
Subject key identifier:   1C:22:4F:04:44:C5:0E:1F:FE:B5:12:2B:F2:DA:F1:A6:40:2C:D4:DE
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285841961479599188714C128E5C80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ac178b44-dc9e-3858-a02b-b9bcedd034e8.roa
Signing time:             Thu 30 Mar 2023 12:00:00 +0000
ROA not before:           Thu 30 Mar 2023 12:00:00 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     11232
IP address blocks:        24.143.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:96:14:79:59:91:88:71:4c:12:8e:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 30 12:00:00 2023 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=766d47b6-2747-41ef-9035-acd3e2f3f3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:06:5d:28:47:e2:45:04:0a:dd:c1:73:95:
                    ed:0d:30:e6:9c:2f:32:99:83:fd:20:d3:83:aa:fc:
                    1f:5d:e4:ad:26:bd:9c:94:0e:33:35:a2:36:05:cb:
                    c8:49:5c:a4:f5:81:5d:4c:8a:6e:76:5c:16:90:aa:
                    fe:0d:37:bc:43:56:dc:32:67:64:5e:40:56:b8:45:
                    65:d8:06:60:5c:a5:26:01:33:f1:f7:86:62:67:8f:
                    c5:fc:db:79:89:9b:fd:42:02:83:7c:0b:59:f6:be:
                    35:85:9d:51:b6:37:02:48:48:af:98:26:78:48:0e:
                    cf:29:80:21:b3:da:20:cb:5f:ee:35:e1:7f:78:63:
                    0e:c5:55:cd:8a:48:98:8a:0e:80:21:1a:67:a2:5a:
                    13:e7:b4:54:a9:db:dc:c5:cc:84:8d:19:13:c3:c0:
                    cc:49:0d:56:93:10:e7:77:9c:d4:0d:83:08:1b:7a:
                    c4:67:5d:f3:1c:9b:ff:85:30:b5:f9:f7:76:6d:75:
                    92:71:04:47:9a:6d:91:a8:86:12:67:ac:35:72:00:
                    31:eb:c9:de:75:ee:dd:83:74:ce:50:97:f1:bc:69:
                    9e:c8:07:61:f6:be:c2:d8:d0:b5:56:05:ee:90:ed:
                    fd:93:db:6f:89:8b:5a:e3:7e:7f:60:68:50:33:e4:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:4F:04:44:C5:0E:1F:FE:B5:12:2B:F2:DA:F1:A6:40:2C:D4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ac178b44-dc9e-3858-a02b-b9bcedd034e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.143.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:1c:6c:7b:72:97:3c:31:31:38:e5:1a:c6:c2:f4:af:41:
         12:2a:6d:fb:83:b1:c0:b7:5d:99:d9:6d:f2:91:e2:8b:7c:c4:
         cd:29:34:00:09:7f:90:2c:34:34:0f:d6:c7:36:a1:4a:b6:f0:
         68:23:62:80:c2:76:83:f4:10:df:4a:32:fa:3d:ac:9f:f4:df:
         ac:01:e7:a9:b6:c4:7f:86:79:2b:8d:40:c2:d9:75:a7:f7:06:
         64:e2:05:a1:44:25:c2:20:06:cf:9a:2e:c3:13:d2:4d:87:d5:
         52:fe:f0:1a:51:10:d7:35:88:ba:ea:e9:6e:08:bd:c0:57:4d:
         e8:aa:2b:a7:71:70:88:41:4b:ae:53:a6:59:6a:61:df:4b:88:
         3d:91:04:73:3b:7c:10:3c:18:fb:a3:fe:b1:77:fd:af:21:07:
         a5:df:4e:76:2c:2f:c1:e7:bd:49:ce:91:d8:de:a6:8d:80:3e:
         bf:93:e1:66:71:62:7d:e8:61:73:9b:b2:3b:1d:fe:a2:1a:6b:
         d2:1a:80:43:8f:54:68:ae:b0:28:49:f4:dd:82:fa:2f:11:09:
         6d:93:2a:31:a8:ad:e9:1e:8e:45:d3:93:8c:2e:82:25:f9:5e:
         45:00:ac:8c:db:99:4a:a0:52:85:7d:a9:e1:50:e8:12:04:37:
         ca:39:7f:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGWFHlZkYhxTBKOXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTIzMDMzMDEyMDAwMFoXDTI1MDYxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NzY2ZDQ3YjYtMjc0Ny00MWVmLTkwMzUtYWNkM2UyZjNmM2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzAGXShH4kUECt3Bc5XtDTDmnC8ymYP9INOD
qvwfXeStJr2clA4zNaI2BcvISVyk9YFdTIpudlwWkKr+DTe8Q1bcMmdkXkBWuEVl
2AZgXKUmATPx94ZiZ4/F/Nt5iZv9QgKDfAtZ9r41hZ1RtjcCSEivmCZ4SA7PKYAh
s9ogy1/uNeF/eGMOxVXNikiYig6AIRpnoloT57RUqdvcxcyEjRkTw8DMSQ1WkxDn
d5zUDYMIG3rEZ13zHJv/hTC1+fd2bXWScQRHmm2RqIYSZ6w1cgAx68nede7dg3TO
UJfxvGmeyAdh9r7C2NC1VgXukO39k9tviYta435/YGhQM+RezQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwiTwRExQ4f/rUSK/La8aZALNTeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYWMxNzhiNDQtZGM5ZS0z
ODU4LWEwMmItYjliY2VkZDAzNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGI8+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnYHGx7cpc8MTE45RrGwvSvQRIqbfuDscC3XZnZbfKR4ot8xM0pNAAJ
f5AsNDQP1sc2oUq28GgjYoDCdoP0EN9KMvo9rJ/036wB56m2xH+GeSuNQMLZdaf3
BmTiBaFEJcIgBs+aLsMT0k2H1VL+8BpRENc1iLrq6W4IvcBXTeiqK6dxcIhBS65T
pllqYd9LiD2RBHM7fBA8GPuj/rF3/a8hB6XfTnYsL8HnvUnOkdjepo2APr+T4WZx
Yn3oYXObsjsd/qIaa9IagEOPVGiusChJ9N2C+i8RCW2TKjGorekejkXTk4wugiX5
XkUArIzbmUqgUoV9qeFQ6BIEN8o5f8E=
-----END CERTIFICATE-----