Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa
File:                     14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa (raw, json)
Hash identifier:          pnyJBRBPm/K3hTea659E41+Bk2vH8bL38gInUCw1lGY=
Subject key identifier:   24:16:FE:00:02:33:13:A3:A0:9A:6E:7E:68:96:42:53:DB:22:12:76
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285843F923BC7E93016908733CF230
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa
Signing time:             Wed 22 Nov 2023 14:00:21 +0000
ROA not before:           Wed 22 Nov 2023 14:00:21 +0000
ROA not after:            Tue 20 Feb 2024 14:00:21 +0000
asID:                     14353
IP address blocks:        65.38.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f9:23:bc:7e:93:01:69:08:73:3c:f2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Nov 22 14:00:21 2023 GMT
            Not After : Feb 20 14:00:21 2024 GMT
        Subject: CN=adef85dc-d2a5-4dfd-b7fa-829625c67742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:33:84:51:b9:ae:ef:10:40:f0:4f:07:70:
                    3b:c1:94:b2:e1:e1:cb:38:99:a2:b6:80:e1:f9:77:
                    cc:8b:28:55:b5:6d:b3:9d:d6:45:15:95:5c:22:0b:
                    4f:4a:4e:41:40:3b:e1:bc:7c:ce:1f:46:8d:1f:e9:
                    8f:7d:fd:b0:ff:d8:15:e4:aa:ef:11:9f:b6:e4:f3:
                    34:ca:ec:59:a7:26:4a:db:57:e6:bb:b6:5c:17:92:
                    d4:b7:e3:5c:15:69:d3:d0:bb:d2:3c:d9:2b:9b:f5:
                    8d:68:77:71:fb:46:6a:ff:6f:88:32:f4:e3:b2:6e:
                    ec:01:09:79:4f:0a:24:f1:74:03:55:54:cf:98:77:
                    53:7f:a7:60:17:c4:64:54:c1:43:ab:60:28:1c:1e:
                    42:93:80:4b:5f:1f:e0:81:eb:91:b7:ff:a7:0c:c5:
                    69:45:91:08:28:98:5a:11:07:34:d5:2d:45:d3:b2:
                    44:67:8a:b0:d8:09:0c:b9:d6:99:da:0a:95:49:4d:
                    99:43:f9:a9:f4:94:51:87:cc:77:76:ac:0a:13:54:
                    2a:c6:89:a2:2a:26:6d:0b:19:4a:95:ea:1b:77:12:
                    dc:20:3f:ea:32:eb:93:fd:59:20:52:72:01:8d:79:
                    ea:fe:6a:a1:34:73:6d:92:ee:bc:d4:8b:b5:e0:9f:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:FE:00:02:33:13:A3:A0:9A:6E:7E:68:96:42:53:DB:22:12:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:31:ac:b6:8d:c5:83:e7:ea:9b:78:f2:96:78:86:ae:a7:
         a3:18:5d:0b:3b:a9:ef:93:11:d6:82:a8:f9:c6:da:17:9a:9a:
         38:8a:7e:bb:3a:97:42:43:c1:44:49:fc:d8:e1:4e:6f:1a:02:
         e5:58:4e:56:71:0e:b2:1b:36:a9:e5:9a:ea:b5:09:e1:0c:36:
         ee:12:49:95:8a:ee:a5:87:ff:d1:78:86:08:29:d4:66:89:bc:
         41:05:d1:b3:5e:6a:56:27:fb:78:e0:bd:81:f3:3b:e4:32:95:
         e0:48:54:1b:f1:af:79:bd:ba:d3:0b:3f:91:89:28:33:2b:69:
         99:3f:fd:18:20:02:b8:09:0c:10:a9:9a:38:58:04:5a:cc:c1:
         be:29:12:47:65:00:4d:75:ce:f5:7f:f7:77:54:79:5b:17:21:
         6d:b3:66:24:21:4f:b4:7a:18:69:2f:81:67:4e:7d:0e:ac:1a:
         75:e3:98:6d:86:95:17:be:e6:a7:73:8f:61:d6:17:8a:11:0f:
         ca:25:3f:fe:ab:15:53:50:53:74:61:75:70:db:0f:d0:8c:c6:
         f8:27:ea:37:af:02:68:83:47:ca:2f:8a:21:73:65:d8:66:86:
         86:96:7d:7a:a5:36:7d:2b:36:94:f8:e4:b4:cc:1e:1f:9e:e3:
         ea:ff:04:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEP5I7x+kwFpCHM88jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl
NWVjMB4XDTIzMTEyMjE0MDAyMVoXDTI0MDIyMDE0MDAyMVowLzEtMCsGA1UEAxMk
YWRlZjg1ZGMtZDJhNS00ZGZkLWI3ZmEtODI5NjI1YzY3NzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsREzhFG5ru8QQPBPB3A7wZSy4eHLOJmitoDh
+XfMiyhVtW2zndZFFZVcIgtPSk5BQDvhvHzOH0aNH+mPff2w/9gV5KrvEZ+25PM0
yuxZpyZK21fmu7ZcF5LUt+NcFWnT0LvSPNkrm/WNaHdx+0Zq/2+IMvTjsm7sAQl5
Twok8XQDVVTPmHdTf6dgF8RkVMFDq2AoHB5Ck4BLXx/ggeuRt/+nDMVpRZEIKJha
EQc01S1F07JEZ4qw2AkMudaZ2gqVSU2ZQ/mp9JRRh8x3dqwKE1QqxomiKiZtCxlK
leobdxLcID/qMuuT/VkgUnIBjXnq/mqhNHNtku681Iu14J/h/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQW/gACMxOjoJpufmiWQlPbIhJ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4
ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvMTRmYjNmYTgtYWEwYy0z
YWFlLThkOGQtNWRmMGY2MjE5ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk
NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4
ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj
MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtkMay2jcWD5+qbePKWeIaup6MYXQs7qe+TEdaCqPnG2heamjiKfrs6
l0JDwURJ/NjhTm8aAuVYTlZxDrIbNqnlmuq1CeEMNu4SSZWK7qWH/9F4hggp1GaJ
vEEF0bNealYn+3jgvYHzO+QyleBIVBvxr3m9utMLP5GJKDMraZk//RggArgJDBCp
mjhYBFrMwb4pEkdlAE11zvV/93dUeVsXIW2zZiQhT7R6GGkvgWdOfQ6sGnXjmG2G
lRe+5qdzj2HWF4oRD8olP/6rFVNQU3RhdXDbD9CMxvgn6jevAmiDR8oviiFzZdhm
hoaWfXqlNn0rNpT45LTMHh+e4+r/BMo=
-----END CERTIFICATE-----