Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b565e82a-9f2a-33f0-a1fd-1b1733d318a0.roa
File:                     b565e82a-9f2a-33f0-a1fd-1b1733d318a0.roa (raw, json)
Hash identifier:          03wqGHageMKFqZdglszocUjZfqp8C6Z/DPnPDij0eEQ=
Subject key identifier:   4A:89:BC:E6:1C:E1:1C:C4:1C:D5:D2:B0:F2:EF:7A:EA:A5:1E:FA:08
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F43285840E8E0A314D17109D6B4319680
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b565e82a-9f2a-33f0-a1fd-1b1733d318a0.roa
Signing time:             Thu 27 Aug 2020 16:37:55 +0000
ROA not before:           Thu 27 Aug 2020 16:37:55 +0000
ROA not after:            Mon 19 May 2025 04:00:00 +0000
asID:                     207326
IP address blocks:        199.101.194.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Mar 2023 17:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e8:e0:a3:14:d1:71:09:d6:b4:31:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Aug 27 16:37:55 2020 GMT
            Not After : May 19 04:00:00 2025 GMT
        Subject: CN=7d0582dc-988e-4585-a396-f513ddce2ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:94:60:94:d7:3a:30:3c:c7:95:b9:47:7f:
                    9b:2d:94:cf:ff:4c:c6:6c:69:6f:8b:fb:e6:b1:23:
                    bf:32:3f:ac:3a:9a:15:0c:96:0e:35:d0:b5:8e:c9:
                    0b:65:12:92:4b:00:6b:31:e9:30:98:3c:2f:01:e4:
                    5b:1d:81:d2:01:1e:dd:87:dd:5a:46:03:fa:e1:de:
                    d9:0f:11:47:54:9d:28:f8:b2:d3:11:9f:05:10:b4:
                    80:22:8b:76:76:04:43:c3:a0:d1:41:90:82:90:ed:
                    0f:00:a6:22:51:4e:91:48:0e:a4:5c:6d:43:e4:b6:
                    e2:c3:ea:df:c4:1b:4e:15:8f:42:c1:d1:4e:d8:dd:
                    db:ef:f6:61:68:13:d8:8a:e7:c8:25:ff:b9:e4:86:
                    79:df:53:21:46:00:40:02:c4:de:6d:ed:28:f2:2a:
                    01:41:b4:6c:2c:71:b0:55:cf:01:c8:07:63:95:9d:
                    40:d8:65:97:60:ea:be:a1:5f:a5:6b:30:51:d0:a1:
                    06:72:0f:0f:e3:16:20:c2:28:50:3a:29:c6:9d:5d:
                    56:f3:58:92:fc:c2:9a:6f:ce:f6:35:ec:08:3f:49:
                    de:8a:2f:91:ec:ea:21:9f:c9:75:35:6f:65:0f:8a:
                    fc:ae:60:cb:34:cc:69:61:d3:46:06:3d:4f:a9:14:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:BC:E6:1C:E1:1C:C4:1C:D5:D2:B0:F2:EF:7A:EA:A5:1E:FA:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b565e82a-9f2a-33f0-a1fd-1b1733d318a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:fd:52:f9:87:54:36:5a:d7:65:fd:15:76:15:de:d3:96:
         c1:f5:a5:d9:1e:4f:b3:c4:6e:6a:5d:cb:d6:6f:24:0b:ba:a4:
         a1:b5:3d:32:93:f4:31:91:60:e2:78:57:6a:df:4f:f8:b5:1d:
         29:ca:6c:9c:58:34:d9:ac:16:2c:ab:f7:7b:2c:b8:7c:2d:46:
         42:20:d1:51:2c:bb:41:f8:b4:96:d8:30:21:39:c5:1a:49:8d:
         2f:d6:0a:d1:06:62:7f:fc:e5:1f:0c:47:d2:c7:05:37:63:20:
         ea:f8:09:45:0d:87:9f:74:dc:d1:2e:87:cd:87:f3:9b:5a:33:
         d2:2d:e6:46:b4:ee:a3:fa:a8:e0:f5:dd:27:71:55:fb:4e:e3:
         40:00:6e:e9:67:bc:24:9b:01:ed:dc:8c:81:b6:13:8b:e4:6c:
         62:d5:75:89:f7:42:50:4d:eb:94:70:21:94:ad:77:76:bb:ad:
         09:49:6a:2a:e7:bb:0a:b2:cc:5a:de:e3:00:db:72:95:59:66:
         4d:f7:ee:7c:fd:2c:86:b6:54:23:91:3c:34:50:ee:45:c3:7b:
         43:62:4c:4d:1b:5b:e7:3e:2c:50:65:fd:e2:5c:1b:ac:b4:e1:
         9f:0d:e6:f8:5c:10:d9:5a:2d:4d:39:7b:09:5a:7e:d8:49:1e:
         a6:c5:77:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDo4KMU0XEJ1rQxloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0
MmNhMB4XDTIwMDgyNzE2Mzc1NVoXDTI1MDUxOTA0MDAwMFowLzEtMCsGA1UEAxMk
N2QwNTgyZGMtOTg4ZS00NTg1LWEzOTYtZjUxM2RkY2UyY2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktGUYJTXOjA8x5W5R3+bLZTP/0zGbGlvi/vm
sSO/Mj+sOpoVDJYONdC1jskLZRKSSwBrMekwmDwvAeRbHYHSAR7dh91aRgP64d7Z
DxFHVJ0o+LLTEZ8FELSAIot2dgRDw6DRQZCCkO0PAKYiUU6RSA6kXG1D5Lbiw+rf
xBtOFY9CwdFO2N3b7/ZhaBPYiufIJf+55IZ531MhRgBAAsTebe0o8ioBQbRsLHGw
Vc8ByAdjlZ1A2GWXYOq+oV+lazBR0KEGcg8P4xYgwihQOinGnV1W81iS/MKab872
NewIP0neii+R7Oohn8l1NW9lD4r8rmDLNMxpYdNGBj1PqRTiIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqJvOYc4RzEHNXSsPLveuqlHvoIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk
ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYjU2NWU4MmEtOWYyYS0z
M2YwLWExZmQtMWIxNzMzZDMxOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3
MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk
NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj
MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2XCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACh6/VL5h1Q2Wtdl/RV2Fd7TlsH1pdkeT7PEbmpdy9ZvJAu6pKG1PTKT
9DGRYOJ4V2rfT/i1HSnKbJxYNNmsFiyr93ssuHwtRkIg0VEsu0H4tJbYMCE5xRpJ
jS/WCtEGYn/85R8MR9LHBTdjIOr4CUUNh5903NEuh82H85taM9It5ka07qP6qOD1
3SdxVftO40AAbulnvCSbAe3cjIG2E4vkbGLVdYn3QlBN65RwIZStd3a7rQlJairn
uwqyzFre4wDbcpVZZk337nz9LIa2VCORPDRQ7kXDe0NiTE0bW+c+LFBl/eJcG6y0
4Z8N5vhcENlaLU05ewlafthJHqbFd3M=
-----END CERTIFICATE-----