Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/936339ae-4904-3b2d-a31b-c0e645d3cba1.roa
File:                     936339ae-4904-3b2d-a31b-c0e645d3cba1.roa (raw, json)
Hash identifier:          fxms3nlEWe3gFDBz9TGIwFz4JFoXP4XOcsdB9QpHaNs=
Subject key identifier:   97:EC:1C:00:E9:3E:3D:DC:C1:25:C2:EC:19:F1:E3:20:02:88:50:CA
Certificate issuer:       /CN=52ea6b76-dff6-436f-a12e-51baa3c3abdf
Certificate serial:       010D0C9F4328584294B0692203540B7026953940
Authority key identifier: B3:58:FE:AF:CA:BD:9F:BA:5C:BB:1A:5F:03:8F:CE:BC:4C:47:13:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/936339ae-4904-3b2d-a31b-c0e645d3cba1.roa
Signing time:             Mon 17 Jul 2023 21:40:21 +0000
ROA not before:           Mon 17 Jul 2023 21:40:21 +0000
ROA not after:            Sun 15 Oct 2023 21:40:21 +0000
asID:                     26801
IP address blocks:        74.81.96.0/19 maxlen: 24
                          173.246.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:94:b0:69:22:03:54:0b:70:26:95:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ea6b76-dff6-436f-a12e-51baa3c3abdf
        Validity
            Not Before: Jul 17 21:40:21 2023 GMT
            Not After : Oct 15 21:40:21 2023 GMT
        Subject: CN=e11b2578-b103-436c-afd3-73f998e824cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:9a:e8:7a:4f:ff:5f:1a:df:64:f6:5f:b4:
                    26:d4:40:76:e3:1a:49:8e:dd:98:dd:bd:1a:98:3c:
                    81:51:ec:29:73:4e:19:77:8d:9f:bf:08:1f:a5:74:
                    b1:5d:43:d6:b6:14:7e:48:ab:b7:65:8e:d5:22:d7:
                    4c:c8:74:29:79:b7:9e:27:b8:21:c9:b8:70:67:4f:
                    0d:66:70:f2:33:26:aa:dc:9d:33:25:63:29:44:1a:
                    f3:ca:6e:c6:7b:e5:21:1a:07:f8:eb:86:dc:ec:11:
                    c9:2a:09:86:e3:44:4f:dc:01:29:89:5d:08:41:0c:
                    d0:61:4f:70:8d:9f:42:92:e7:45:87:f0:93:5a:b6:
                    8f:05:3d:9f:63:84:61:c6:56:3e:41:ba:ab:60:e4:
                    0a:79:cb:4d:61:16:ca:f9:6f:b0:c2:d7:6e:ee:10:
                    06:36:ad:5a:70:8d:1b:b0:10:3e:85:6d:6e:9a:7b:
                    e4:6c:90:18:b0:67:77:92:11:77:7f:bb:fe:1c:cc:
                    12:a1:0a:83:5c:c9:bc:f8:32:e1:56:73:56:b3:92:
                    79:2b:9f:51:a9:14:36:11:e6:e0:1b:d5:39:b2:d5:
                    9b:c0:1d:a4:53:c0:73:7f:96:e7:8d:8b:33:97:df:
                    12:49:3d:37:9b:f2:11:f9:69:d3:30:0d:66:6a:ec:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:1C:00:E9:3E:3D:DC:C1:25:C2:EC:19:F1:E3:20:02:88:50:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/936339ae-4904-3b2d-a31b-c0e645d3cba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/52ea6b76-dff6-436f-a12e-51baa3c3abdf.crl

            X509v3 Authority Key Identifier:
                keyid:B3:58:FE:AF:CA:BD:9F:BA:5C:BB:1A:5F:03:8F:CE:BC:4C:47:13:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.96.0/19
                  173.246.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:80:18:fb:21:23:74:72:c1:08:9e:d5:09:50:b7:ba:5d:
         3d:c6:86:88:3a:fe:e9:33:26:e7:5b:df:bd:e2:b6:33:41:71:
         48:80:cc:9c:78:a8:71:32:e1:9c:40:df:28:f4:af:99:33:58:
         0a:30:25:85:ba:55:17:9c:b1:a9:a4:ea:16:b8:6e:78:e5:04:
         8b:cd:61:3b:a5:df:91:55:65:20:7d:99:eb:ff:d0:4a:7a:85:
         4e:94:32:f1:ed:fb:c0:7b:61:07:f6:50:56:6e:b8:83:b7:ac:
         f5:99:b2:f9:91:17:7a:86:35:a4:21:09:b9:f0:8f:d8:3d:76:
         6c:b4:a0:0e:10:da:89:be:fa:25:bd:d3:f4:13:da:32:9c:65:
         ea:5a:c7:d7:5a:ff:ee:48:42:5f:64:54:85:39:99:76:c6:bc:
         04:9a:aa:39:8a:fa:06:ee:6d:f8:6b:b8:1b:85:f2:b8:d3:f9:
         95:b1:33:cc:cc:28:e1:13:18:93:ed:cb:d0:f4:95:d8:45:13:
         5a:2b:71:ca:dd:5e:57:b9:27:17:10:e8:41:b4:d1:d4:af:08:
         c3:07:6c:f1:46:62:c6:76:4b:a6:a7:d0:36:4e:32:1f:4d:a2:
         f9:28:a8:44:c1:6d:47:3d:f0:a6:42:87:bc:1a:e9:b1:c4:0e:
         e5:94:74:4e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEKUsGkiA1QLcCaVOUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlYTZiNzYtZGZmNi00MzZmLWExMmUtNTFiYWEzYzNh
YmRmMB4XDTIzMDcxNzIxNDAyMVoXDTIzMTAxNTIxNDAyMVowLzEtMCsGA1UEAxMk
ZTExYjI1NzgtYjEwMy00MzZjLWFmZDMtNzNmOTk4ZTgyNGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRKa6HpP/18a32T2X7Qm1EB24xpJjt2Y3b0a
mDyBUewpc04Zd42fvwgfpXSxXUPWthR+SKu3ZY7VItdMyHQpebeeJ7ghybhwZ08N
ZnDyMyaq3J0zJWMpRBrzym7Ge+UhGgf464bc7BHJKgmG40RP3AEpiV0IQQzQYU9w
jZ9CkudFh/CTWraPBT2fY4RhxlY+QbqrYOQKectNYRbK+W+wwtdu7hAGNq1acI0b
sBA+hW1umnvkbJAYsGd3khF3f7v+HMwSoQqDXMm8+DLhVnNWs5J5K59RqRQ2Eebg
G9U5stWbwB2kU8Bzf5bnjYszl98SST03m/IR+WnTMA1mauydSwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJfsHADpPj3cwSXC7Bnx4yACiFDKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MmVh
NmI3Ni1kZmY2LTQzNmYtYTEyZS01MWJhYTNjM2FiZGYvOTM2MzM5YWUtNDkwNC0z
YjJkLWEzMWItYzBlNjQ1ZDNjYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTJlYTZiNzYtZGZmNi00MzZmLWEx
MmUtNTFiYWEzYzNhYmRmLzUyZWE2Yjc2LWRmZjYtNDM2Zi1hMTJlLTUxYmFhM2Mz
YWJkZi5jcmwwHwYDVR0jBBgwFoAUs1j+r8q9n7pcuxpfA4/OvExHE6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MmVhNmI3Ni1kZmY2LTQzNmYtYTEyZS01MWJh
YTNjM2FiZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFSlFgAwQF
rfbgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH5HgBj7ISN0csEIntUJULe6XT3Ghog6/ukzJudb373itjNB
cUiAzJx4qHEy4ZxA3yj0r5kzWAowJYW6VRecsamk6ha4bnjlBIvNYTul35FVZSB9
mev/0Ep6hU6UMvHt+8B7YQf2UFZuuIO3rPWZsvmRF3qGNaQhCbnwj9g9dmy0oA4Q
2om++iW90/QT2jKcZepax9da/+5IQl9kVIU5mXbGvASaqjmK+gbubfhruBuF8rjT
+ZWxM8zMKOETGJPty9D0ldhFE1orccrdXle5JxcQ6EG00dSvCMMHbPFGYsZ2S6an
0DZOMh9NovkoqETBbUc98KZCh7wa6bHEDuWUdE4=
-----END CERTIFICATE-----