Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/06f087be-bf42-38a3-b08e-67f90a4cb24a.roa
File:                     06f087be-bf42-38a3-b08e-67f90a4cb24a.roa (raw, json)
Hash identifier:          8XXdNnUBj+IxSxc3RweAUy92sRX2ZjAH1we+YLpxvtw=
Subject key identifier:   82:FF:B9:08:F1:E4:30:41:89:FB:0D:38:8A:DA:27:25:A4:4D:9F:83
Certificate issuer:       /CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
Certificate serial:       010D0C9F43285842A4FEBD9E2632A4FB43A1E240
Authority key identifier: 71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/06f087be-bf42-38a3-b08e-67f90a4cb24a.roa
Signing time:             Sun 23 Jul 2023 17:51:06 +0000
ROA not before:           Sun 23 Jul 2023 17:51:06 +0000
ROA not after:            Sat 21 Oct 2023 17:51:06 +0000
asID:                     15296
IP address blocks:        198.161.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a4:fe:bd:9e:26:32:a4:fb:43:a1:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
        Validity
            Not Before: Jul 23 17:51:06 2023 GMT
            Not After : Oct 21 17:51:06 2023 GMT
        Subject: CN=835a6d41-0950-44ad-aa0a-85d3d63d5e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:f3:b1:89:64:04:7d:dc:e3:e9:00:d8:d8:
                    0d:8a:3d:61:1a:18:36:59:a7:a5:50:ed:cf:71:ce:
                    cc:1f:b9:7c:46:ac:9d:a3:47:16:bc:e0:99:03:a1:
                    aa:96:12:64:14:fb:f1:f8:10:fa:21:8b:07:bc:bd:
                    6a:5d:7d:91:5e:81:26:90:e2:65:9e:16:b4:3d:0e:
                    56:ae:68:38:46:1a:3a:e8:e1:7e:a2:9d:8f:c5:17:
                    bc:a9:2c:f1:e1:de:9d:af:01:74:df:a5:34:a6:93:
                    38:79:ec:9d:32:71:11:1a:7a:b5:7f:31:59:1d:fd:
                    06:6f:a4:52:ed:d5:73:93:c8:0d:c3:1c:cc:94:99:
                    9a:95:95:e2:1d:f8:04:78:9a:8e:e3:72:c0:55:f6:
                    1c:27:6b:9c:1a:be:f4:32:78:33:85:1d:10:8e:3a:
                    8b:d7:e6:f6:d6:ad:f7:3d:b5:09:c5:25:ca:a1:61:
                    1d:a6:c8:a9:7a:29:8b:a0:93:34:2f:5e:96:f1:8a:
                    8c:3d:e8:ca:c0:83:b0:1e:70:62:2a:e5:5b:78:f8:
                    5f:17:ca:65:cb:49:af:0c:66:70:f8:8b:3e:da:d2:
                    7f:7c:6d:1a:2b:c8:b8:c5:00:12:81:8a:cd:da:e2:
                    3f:c0:ec:2c:6e:8a:87:21:92:dd:ca:de:72:b1:b8:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:B9:08:F1:E4:30:41:89:FB:0D:38:8A:DA:27:25:A4:4D:9F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/06f087be-bf42-38a3-b08e-67f90a4cb24a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl

            X509v3 Authority Key Identifier:
                keyid:71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:1d:89:f5:2c:f6:fe:9c:64:2a:5b:58:58:88:29:bd:31:
         01:56:c9:20:6e:a7:7a:25:43:23:3b:4d:9b:00:d0:1f:38:df:
         7c:72:b6:9b:d5:1c:17:e8:8b:9a:b0:dc:eb:d7:38:c1:83:13:
         42:e8:0f:30:cb:d7:56:87:04:84:57:53:fe:28:56:5d:69:18:
         f7:70:f2:26:1d:a3:ff:9c:05:2d:34:60:43:37:4d:07:af:40:
         93:7b:8f:fe:32:6e:a5:ed:60:a3:4b:10:c8:50:6f:85:7a:6a:
         ad:6a:63:66:4e:05:fb:45:02:52:0a:0d:7a:21:3f:e4:46:94:
         56:70:f7:1e:9b:7f:a7:4f:43:b2:e1:4b:40:a8:10:9f:e0:33:
         29:9b:be:d1:38:28:87:19:a4:eb:8c:3b:f4:30:e2:d7:d7:53:
         36:ab:e1:c4:e8:44:41:4a:e4:7e:30:26:0f:21:72:0c:c1:09:
         c2:14:92:c5:95:c1:a4:67:ad:70:1c:c6:55:87:cf:3a:39:35:
         74:4c:9f:cd:a0:98:31:a8:ce:5f:c4:5e:cd:3e:fe:30:0d:1f:
         d4:1c:44:6f:29:87:74:79:0e:79:d4:5d:82:21:63:eb:69:d3:
         df:64:6a:55:81:b2:6a:94:af:d2:15:0e:3a:4e:97:2f:f2:cf:
         62:5f:a9:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKk/r2eJjKk+0Oh4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU1NGNjOTEtYTJjYy00YTBkLTk5ODktZjI0YTVjMThk
Yjk5MB4XDTIzMDcyMzE3NTEwNloXDTIzMTAyMTE3NTEwNlowLzEtMCsGA1UEAxMk
ODM1YTZkNDEtMDk1MC00NGFkLWFhMGEtODVkM2Q2M2Q1ZTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pPzsYlkBH3c4+kA2NgNij1hGhg2WaelUO3P
cc7MH7l8Rqydo0cWvOCZA6GqlhJkFPvx+BD6IYsHvL1qXX2RXoEmkOJlnha0PQ5W
rmg4Rho66OF+op2PxRe8qSzx4d6drwF036U0ppM4eeydMnERGnq1fzFZHf0Gb6RS
7dVzk8gNwxzMlJmalZXiHfgEeJqO43LAVfYcJ2ucGr70MngzhR0QjjqL1+b21q33
PbUJxSXKoWEdpsipeimLoJM0L16W8YqMPejKwIOwHnBiKuVbePhfF8ply0mvDGZw
+Is+2tJ/fG0aK8i4xQASgYrN2uI/wOwsboqHIZLdyt5ysbg3+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIL/uQjx5DBBifsNOIraJyWkTZ+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hNTU0
Y2M5MS1hMmNjLTRhMGQtOTk4OS1mMjRhNWMxOGRiOTkvMDZmMDg3YmUtYmY0Mi0z
OGEzLWIwOGUtNjdmOTBhNGNiMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTU1NGNjOTEtYTJjYy00YTBkLTk5
ODktZjI0YTVjMThkYjk5L2E1NTRjYzkxLWEyY2MtNGEwZC05OTg5LWYyNGE1YzE4
ZGI5OS5jcmwwHwYDVR0jBBgwFoAUcT0g6HqJKj31GD0PBCD8LPBMvmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hNTU0Y2M5MS1hMmNjLTRhMGQtOTk4OS1mMjRh
NWMxOGRiOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqF5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+WHYn1LPb+nGQqW1hYiCm9MQFWySBup3olQyM7TZsA0B8433xytpvV
HBfoi5qw3OvXOMGDE0LoDzDL11aHBIRXU/4oVl1pGPdw8iYdo/+cBS00YEM3TQev
QJN7j/4ybqXtYKNLEMhQb4V6aq1qY2ZOBftFAlIKDXohP+RGlFZw9x6bf6dPQ7Lh
S0CoEJ/gMymbvtE4KIcZpOuMO/Qw4tfXUzar4cToREFK5H4wJg8hcgzBCcIUksWV
waRnrXAcxlWHzzo5NXRMn82gmDGozl/EXs0+/jANH9QcRG8ph3R5DnnUXYIhY+tp
099kalWBsmqUr9IVDjpOly/yz2JfqQU=
-----END CERTIFICATE-----