Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/8d756f32-1932-3dde-a362-54fe5d609440.roa
File:                     8d756f32-1932-3dde-a362-54fe5d609440.roa (raw, json)
Hash identifier:          oGjLKnBcOd0Yh4F7vJexr3EzvuI2LyCeiyjrwICemXk=
Subject key identifier:   75:86:5F:D2:48:D1:D1:F3:6B:3B:24:2F:0A:3E:C5:12:8F:DC:1D:E8
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F43285842E44A15414AD2C845D85FFE80
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/8d756f32-1932-3dde-a362-54fe5d609440.roa
Signing time:             Tue 15 Aug 2023 09:58:50 +0000
ROA not before:           Tue 15 Aug 2023 09:58:50 +0000
ROA not after:            Mon 13 Nov 2023 10:58:50 +0000
asID:                     834
IP address blocks:        208.99.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e4:4a:15:41:4a:d2:c8:45:d8:5f:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Aug 15 09:58:50 2023 GMT
            Not After : Nov 13 10:58:50 2023 GMT
        Subject: CN=993e8822-e338-4a8f-a8fd-717030694340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:04:c1:0e:db:a5:75:74:47:90:25:a0:d5:
                    cf:91:60:9d:72:7d:54:1e:e8:7b:a8:ed:01:8c:95:
                    bc:81:62:3f:b0:4c:ab:a3:6f:d5:f0:5b:0e:88:22:
                    14:7d:e8:c0:d3:33:d0:fb:08:b3:07:f7:3f:40:62:
                    88:37:4f:c8:e3:7d:45:e8:53:09:bd:58:d2:16:ef:
                    28:cf:18:d9:d2:32:2d:86:75:7e:19:50:98:b8:01:
                    b5:16:70:2d:c1:cb:ef:87:4e:c3:4c:52:fe:fd:d3:
                    39:89:1e:04:05:97:b5:9b:66:be:8f:45:c8:7a:48:
                    e6:ce:69:72:2f:4b:57:ce:49:71:a0:e4:13:5a:67:
                    d1:4b:57:d3:be:79:13:89:eb:49:b4:5f:2f:e1:f4:
                    bd:9f:18:18:66:6c:1b:4d:1a:18:62:38:75:29:dd:
                    97:73:64:71:58:6a:45:ab:07:42:9d:73:bf:0c:18:
                    ad:98:e2:00:e1:cd:91:b4:d8:21:8b:ae:f0:7d:a4:
                    25:e7:3c:01:50:10:38:42:f3:2d:dc:5b:05:d6:d4:
                    b5:73:cd:f0:83:34:47:f0:34:40:85:ce:34:ee:54:
                    2c:20:b9:d9:dd:bc:8c:b8:d2:bb:76:8a:fd:b3:52:
                    20:b6:71:c0:b5:85:07:54:a9:fa:4d:63:be:ac:88:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:86:5F:D2:48:D1:D1:F3:6B:3B:24:2F:0A:3E:C5:12:8F:DC:1D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/8d756f32-1932-3dde-a362-54fe5d609440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9b:d4:15:02:ba:39:e3:10:0c:a3:f1:ce:49:66:d0:e7:a7:
         57:df:35:4e:5e:a1:25:f8:21:41:60:b8:18:21:23:d1:79:43:
         74:2b:23:ff:28:e5:30:7e:bd:30:ad:0d:35:cd:09:b5:18:c1:
         08:d3:11:81:d7:4f:45:b8:fd:9c:4e:75:bf:57:9e:1b:a4:d1:
         f0:9c:fd:f1:e9:c7:c1:b7:7b:0b:16:42:47:b2:5d:f4:9b:f2:
         2b:4e:4a:32:37:a4:24:dd:6e:1f:51:79:d5:47:ce:59:e6:2d:
         d1:04:f0:7f:32:5f:8e:e6:fb:57:5f:2a:ce:2b:24:71:ee:70:
         2f:25:30:87:60:fe:8c:33:87:03:18:ae:85:d7:25:8f:03:36:
         0c:93:76:77:7d:c3:95:47:1b:fb:04:4a:dd:56:5e:cd:af:b1:
         59:fa:07:4e:00:fe:35:de:18:ea:fa:97:6c:ce:2b:cf:b9:8e:
         0a:45:7a:72:f0:38:3b:dc:b4:27:7f:af:a8:8f:88:2a:ab:a2:
         e6:71:b1:f0:07:89:8f:a0:16:17:a4:b8:9d:23:15:af:77:e1:
         fd:e5:a6:a2:c3:7b:c2:a4:15:13:19:b6:42:c3:c6:f8:cf:fb:
         fa:12:65:c4:8d:ed:00:d0:27:bb:7f:c5:45:5c:72:93:a7:ef:
         ad:ce:94:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELkShVBStLIRdhf/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc2MzliMTUtMjE1YS00ODgxLWIxYTQtNzMxZTA0NmJm
NTFjMB4XDTIzMDgxNTA5NTg1MFoXDTIzMTExMzEwNTg1MFowLzEtMCsGA1UEAxMk
OTkzZTg4MjItZTMzOC00YThmLWE4ZmQtNzE3MDMwNjk0MzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx4EwQ7bpXV0R5AloNXPkWCdcn1UHuh7qO0B
jJW8gWI/sEyro2/V8FsOiCIUfejA0zPQ+wizB/c/QGKIN0/I431F6FMJvVjSFu8o
zxjZ0jIthnV+GVCYuAG1FnAtwcvvh07DTFL+/dM5iR4EBZe1m2a+j0XIekjmzmly
L0tXzklxoOQTWmfRS1fTvnkTietJtF8v4fS9nxgYZmwbTRoYYjh1Kd2Xc2RxWGpF
qwdCnXO/DBitmOIA4c2RtNghi67wfaQl5zwBUBA4QvMt3FsF1tS1c83wgzRH8DRA
hc407lQsILnZ3byMuNK7dor9s1IgtnHAtYUHVKn6TWO+rIgq1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWGX9JI0dHzazskLwo+xRKP3B3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NzYz
OWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFlMDQ2YmY1MWMvOGQ3NTZmMzItMTkzMi0z
ZGRlLWEzNjItNTRmZTVkNjA5NDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTc2MzliMTUtMjE1YS00ODgxLWIx
YTQtNzMxZTA0NmJmNTFjLzk3NjM5YjE1LTIxNWEtNDg4MS1iMWE0LTczMWUwNDZi
ZjUxYy5jcmwwHwYDVR0jBBgwFoAUt0iV8CVDnSLLgJsLm2oc3Ae413swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NzYzOWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFl
MDQ2YmY1MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6b1BUCujnjEAyj8c5JZtDnp1ffNU5eoSX4IUFguBghI9F5Q3QrI/8o
5TB+vTCtDTXNCbUYwQjTEYHXT0W4/ZxOdb9Xnhuk0fCc/fHpx8G3ewsWQkeyXfSb
8itOSjI3pCTdbh9RedVHzlnmLdEE8H8yX47m+1dfKs4rJHHucC8lMIdg/owzhwMY
roXXJY8DNgyTdnd9w5VHG/sESt1WXs2vsVn6B04A/jXeGOr6l2zOK8+5jgpFenLw
ODvctCd/r6iPiCqrouZxsfAHiY+gFhekuJ0jFa934f3lpqLDe8KkFRMZtkLDxvjP
+/oSZcSN7QDQJ7t/xUVccpOn763OlHc=