Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b2059b11-5fea-39bb-b2ff-c2ff063e5165.roa
File:                     b2059b11-5fea-39bb-b2ff-c2ff063e5165.roa (raw, json)
Hash identifier:          pWF4PHoQ3YPWS/KiRbbCR8he62yAoQ+Bupbi9TNUPKc=
Subject key identifier:   21:79:90:7E:F0:4C:CD:5F:1B:EF:BD:2B:CD:B1:A2:64:6D:E9:31:C1
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A02763153D2323D8DB731E0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b2059b11-5fea-39bb-b2ff-c2ff063e5165.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:02:76:31:53:d2:32:3d:8d:b7:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ca0c4381-1865-417c-a639-7cb4779c68c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:80:66:dc:64:25:96:d2:c1:16:e2:d0:7d:
                    6b:ca:99:d7:18:84:37:2d:d0:93:9a:a3:ab:0b:85:
                    0b:54:37:2e:16:6a:3d:b6:e0:b1:bc:d3:88:14:05:
                    d0:73:c0:a9:0f:fe:e7:de:d2:49:0b:ae:f2:d0:96:
                    83:46:67:e6:e2:d1:f2:2e:e0:1c:e8:bf:1f:b6:64:
                    e0:07:98:56:88:61:c9:43:0d:f4:65:e1:be:dd:31:
                    3a:50:01:14:ad:1b:67:3a:52:17:f1:65:46:64:aa:
                    05:2f:b3:1f:70:40:e2:df:3b:c5:f9:73:79:ac:7c:
                    80:d6:89:8f:cf:99:95:ed:6b:0a:7f:7b:72:76:f7:
                    11:9b:93:91:0d:c9:e9:2b:4d:c6:e7:08:bb:a4:8c:
                    07:e8:81:9c:4e:c5:11:21:2a:e1:81:71:b0:8b:41:
                    35:7c:bc:23:19:13:2f:52:17:38:c0:ac:f3:13:a7:
                    45:e6:1f:79:53:8d:07:e9:6c:e2:a8:89:d9:83:aa:
                    31:e7:ab:3e:b5:01:b5:cd:98:b9:79:bf:a4:59:58:
                    d7:98:f3:b3:d2:c7:a3:06:f2:72:2a:8a:e2:d9:75:
                    77:e4:b7:e6:e1:a3:88:f3:56:4d:d5:f1:28:12:fb:
                    7f:e0:ab:8a:13:a1:70:9f:1e:a5:ca:c2:ac:df:9d:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:90:7E:F0:4C:CD:5F:1B:EF:BD:2B:CD:B1:A2:64:6D:E9:31:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b2059b11-5fea-39bb-b2ff-c2ff063e5165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:d3:74:9e:86:2c:4e:5d:d6:f1:79:46:02:42:7a:c3:e6:
         89:dd:a4:9a:bb:84:dd:4c:61:c1:e1:89:4c:82:8d:49:2c:7b:
         65:bb:ad:b2:09:9d:59:be:06:15:07:89:a2:1c:60:fc:4c:36:
         ad:79:11:1d:7d:44:f3:1f:d5:1c:43:95:98:c1:8f:45:77:c2:
         ce:a8:2b:70:07:7e:65:ba:7b:45:3e:18:74:0b:63:4f:1d:91:
         38:d0:4b:7d:d8:7c:c6:72:06:d3:b7:be:33:f2:f3:3a:5a:6f:
         73:d6:86:1b:18:2b:6a:88:88:7e:8f:77:f1:7d:fb:ae:31:0d:
         5a:b5:90:a6:ec:93:e2:e6:17:58:66:9b:b9:66:64:5f:d3:76:
         51:e0:bb:16:0b:7d:7a:a9:53:88:51:ff:8c:70:9e:81:84:dd:
         3c:83:21:08:d0:4e:9d:f3:65:39:3f:b0:c7:28:9b:b0:b6:fe:
         cd:54:bf:0a:08:53:20:9c:0e:9f:8b:57:d3:69:66:95:63:1c:
         62:f6:33:c9:91:32:bc:4e:b2:7a:f4:c0:7a:02:f9:b9:6a:7c:
         56:89:50:69:cd:ed:57:8c:a0:1a:a1:f9:ce:a6:75:33:6a:0a:
         a6:8a:d4:02:e6:ec:bd:91:39:c4:89:14:31:a9:fd:e5:fd:8b:
         cc:b2:85:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKAnYxU9IyPY23MeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2EwYzQzODEtMTg2NS00MTdjLWE2MzktN2NiNDc3OWM2OGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1mAZtxkJZbSwRbi0H1rypnXGIQ3LdCTmqOr
C4ULVDcuFmo9tuCxvNOIFAXQc8CpD/7n3tJJC67y0JaDRmfm4tHyLuAc6L8ftmTg
B5hWiGHJQw30ZeG+3TE6UAEUrRtnOlIX8WVGZKoFL7MfcEDi3zvF+XN5rHyA1omP
z5mV7WsKf3tydvcRm5ORDcnpK03G5wi7pIwH6IGcTsURISrhgXGwi0E1fLwjGRMv
Uhc4wKzzE6dF5h95U40H6WziqInZg6ox56s+tQG1zZi5eb+kWVjXmPOz0sejBvJy
Kori2XV35Lfm4aOI81ZN1fEoEvt/4KuKE6Fwnx6lysKs352G6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCF5kH7wTM1fG++9K82xomRt6THBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYjIwNTliMTEtNWZlYS0z
OWJiLWIyZmYtYzJmZjA2M2U1MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+Q03SehixOXdbxeUYCQnrD5ondpJq7hN1MYcHhiUyCjUkse2W7rbIJ
nVm+BhUHiaIcYPxMNq15ER19RPMf1RxDlZjBj0V3ws6oK3AHfmW6e0U+GHQLY08d
kTjQS33YfMZyBtO3vjPy8zpab3PWhhsYK2qIiH6Pd/F9+64xDVq1kKbsk+LmF1hm
m7lmZF/TdlHguxYLfXqpU4hR/4xwnoGE3TyDIQjQTp3zZTk/sMcom7C2/s1UvwoI
UyCcDp+LV9NpZpVjHGL2M8mRMrxOsnr0wHoC+blqfFaJUGnN7VeMoBqh+c6mdTNq
CqaK1ALm7L2ROcSJFDGp/eX9i8yyhZw=
-----END CERTIFICATE-----