Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb695a15-e993-373f-a822-8a443043c138.roa
File:                     cb695a15-e993-373f-a822-8a443043c138.roa (raw, json)
Hash identifier:          Gt5ppqPhzz6tV4VdiPoXCd8EyWIJb0YuLeWIsWTXrPk=
Subject key identifier:   3C:27:FD:A8:27:77:0B:59:70:6E:1D:38:E1:AB:34:35:E0:56:87:94
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A1199B375C561B942CD9800
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb695a15-e993-373f-a822-8a443043c138.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:99:b3:75:c5:61:b9:42:cd:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a303f93b-70dd-4aa4-b3f0-9897e30aa689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:e3:bc:95:70:0e:03:ef:49:10:b1:26:26:
                    46:6e:3a:0c:e1:76:97:cd:72:dd:11:39:b9:af:23:
                    d8:9f:91:5b:60:12:67:3a:c0:01:7c:ca:e7:35:22:
                    2e:cb:e2:64:55:97:8d:54:cf:55:58:8a:c1:90:9f:
                    07:75:c7:79:5e:68:4f:c9:37:12:ab:74:9b:88:af:
                    3c:56:64:46:5e:2c:cc:b9:50:65:82:12:1e:ad:d7:
                    31:04:a1:80:e9:9e:a1:72:7f:3c:3b:91:08:df:2d:
                    56:05:ef:3e:04:74:7c:2e:01:74:1d:8f:5e:aa:e2:
                    79:93:95:07:e1:1b:61:33:06:d9:78:54:eb:dd:70:
                    0f:77:aa:1f:8e:80:92:e3:cc:ed:86:72:29:eb:47:
                    37:0d:8d:14:ed:a9:84:31:a3:ad:98:0f:1d:ac:0a:
                    6f:83:b1:91:dd:6b:2b:99:26:43:12:a8:2f:2e:66:
                    aa:88:c3:5f:fa:f9:58:75:8a:a9:23:d9:df:d9:64:
                    ef:09:d7:1a:a0:b1:12:ed:d4:7f:7e:ca:34:42:33:
                    57:69:db:ce:1d:dc:0f:6d:4e:88:58:1c:97:56:99:
                    7c:a4:f5:22:ec:3f:e3:ae:fa:96:bb:42:00:a5:5f:
                    7c:5d:d6:96:05:a0:8a:1e:1e:9f:fb:42:63:fb:8c:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:FD:A8:27:77:0B:59:70:6E:1D:38:E1:AB:34:35:E0:56:87:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb695a15-e993-373f-a822-8a443043c138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:90:4c:26:67:f3:2c:d3:b4:a2:05:46:2a:bf:a8:1c:ee:
         10:ac:b1:4a:f6:dd:ab:e0:29:23:f6:ed:e9:53:4f:1c:c3:ba:
         bd:0d:71:63:94:b6:98:00:b4:2f:cf:8b:a8:aa:44:34:31:f9:
         ee:7b:ae:1c:94:8a:6c:98:a8:74:e9:67:9b:67:93:4b:04:fe:
         46:65:2f:1f:cd:a7:28:b5:4d:d2:01:e8:1b:b6:a2:58:46:0e:
         ba:51:ab:b5:8c:0d:ee:7b:cf:87:0c:9f:36:47:d5:b9:e0:10:
         95:52:b4:1b:be:f1:b8:74:7d:6c:b7:36:5b:aa:74:70:52:a0:
         e8:a5:d3:95:96:e8:df:36:bb:25:7f:ca:01:1f:af:d7:e9:a3:
         ae:34:2b:29:37:9d:1f:48:e7:4c:06:2a:82:4f:cb:9e:83:a0:
         76:65:36:0f:d0:0e:e9:24:a7:08:70:db:e5:e5:1f:33:46:29:
         b3:7f:8e:26:52:17:70:c3:48:a3:e0:a6:a0:53:37:15:f5:20:
         0d:5a:02:0b:79:c9:74:30:c8:14:bd:0d:09:79:19:00:4a:ed:
         29:f2:bc:8d:9f:3b:e8:b0:75:88:41:61:fe:f5:58:e1:e9:f5:
         35:37:c8:37:92:78:d7:06:8c:12:c6:7f:a0:55:8d:15:f8:9e:
         4e:3e:ca:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEZmzdcVhuULNmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTMwM2Y5M2ItNzBkZC00YWE0LWIzZjAtOTg5N2UzMGFhNjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+LjvJVwDgPvSRCxJiZGbjoM4XaXzXLdETm5
ryPYn5FbYBJnOsABfMrnNSIuy+JkVZeNVM9VWIrBkJ8Hdcd5XmhPyTcSq3SbiK88
VmRGXizMuVBlghIerdcxBKGA6Z6hcn88O5EI3y1WBe8+BHR8LgF0HY9equJ5k5UH
4RthMwbZeFTr3XAPd6ofjoCS48zthnIp60c3DY0U7amEMaOtmA8drApvg7GR3Wsr
mSZDEqgvLmaqiMNf+vlYdYqpI9nf2WTvCdcaoLES7dR/fso0QjNXadvOHdwPbU6I
WByXVpl8pPUi7D/jrvqWu0IApV98XdaWBaCKHh6f+0Jj+4zAuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwn/agndwtZcG4dOOGrNDXgVoeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvY2I2OTVhMTUtZTk5My0z
NzNmLWE4MjItOGE0NDMwNDNjMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALKZkEwmZ/Ms07SiBUYqv6gc7hCssUr23avgKSP27elTTxzDur0NcWOU
tpgAtC/Pi6iqRDQx+e57rhyUimyYqHTpZ5tnk0sE/kZlLx/Npyi1TdIB6Bu2olhG
DrpRq7WMDe57z4cMnzZH1bngEJVStBu+8bh0fWy3NluqdHBSoOil05WW6N82uyV/
ygEfr9fpo640Kyk3nR9I50wGKoJPy56DoHZlNg/QDukkpwhw2+XlHzNGKbN/jiZS
F3DDSKPgpqBTNxX1IA1aAgt5yXQwyBS9DQl5GQBK7SnyvI2fO+iwdYhBYf71WOHp
9TU3yDeSeNcGjBLGf6BVjRX4nk4+ylE=
-----END CERTIFICATE-----