Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fa3f325b-ab63-3d18-8e31-b1cf2ae70086.roa
File:                     fa3f325b-ab63-3d18-8e31-b1cf2ae70086.roa (raw, json)
Hash identifier:          tnuZCHwVm53xFk4kL05bOceeYbobrvUxGeaYWX601Mc=
Subject key identifier:   76:F0:3A:CA:95:6A:A9:70:8F:5F:68:E1:A5:10:A5:64:1B:9A:5A:72
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A013CE2C1365BEF0785B8D8
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fa3f325b-ab63-3d18-8e31-b1cf2ae70086.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:01:3c:e2:c1:36:5b:ef:07:85:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d5949781-e945-427c-9ede-90f94b82dbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:2b:58:aa:7b:cd:ec:e3:c7:02:5e:e7:a1:
                    3c:f0:e4:b5:cf:24:63:4f:20:a1:d5:78:dd:3a:e0:
                    d2:d6:80:b0:76:d0:32:8d:95:4e:bc:9c:b6:e7:b1:
                    e8:7b:4f:5a:ee:de:f6:79:3e:ea:de:02:44:dc:07:
                    16:9a:f2:3f:2c:96:d2:aa:57:25:de:c9:18:f2:83:
                    52:f4:3a:13:58:2c:fb:75:fc:c5:cf:09:af:bf:88:
                    36:54:42:1f:42:a3:46:74:b4:76:a1:ef:0b:94:bf:
                    c9:bd:6f:3e:c6:e0:66:45:46:f5:b2:96:2e:3e:7b:
                    37:46:20:b5:d9:1b:81:f7:52:2a:15:3b:be:32:ea:
                    5c:5d:8f:32:b1:4b:bb:bb:79:66:a0:13:ce:a4:7b:
                    b9:0c:23:40:d8:51:5f:90:c1:2a:14:9b:d6:e1:59:
                    5a:01:9b:8b:fd:cf:d6:be:8d:2f:6f:49:d4:74:32:
                    c1:93:3f:16:68:63:41:ed:ce:b5:fd:bb:03:25:21:
                    18:2d:2f:bd:00:5f:f4:ea:ea:4f:bf:3c:0d:ef:69:
                    01:ad:0d:30:86:a8:b6:17:e5:23:70:d6:84:b8:8b:
                    66:47:a3:ef:6a:11:82:02:89:ad:ba:f3:29:d3:72:
                    66:9b:0e:7a:db:b3:35:f8:5a:f2:b4:cf:7b:ba:d7:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F0:3A:CA:95:6A:A9:70:8F:5F:68:E1:A5:10:A5:64:1B:9A:5A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fa3f325b-ab63-3d18-8e31-b1cf2ae70086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:5d:cd:5a:d3:78:9e:4c:8c:0d:3c:12:82:3a:99:46:bb:
         13:b8:68:8f:71:d8:fd:c4:6a:3f:8d:59:20:bd:21:c3:0b:d6:
         d5:99:36:2e:77:81:d5:26:d5:1e:4a:ba:9c:78:4a:34:31:96:
         cf:5f:26:47:f7:4f:d9:f9:cb:f5:05:e2:3b:7f:ed:bd:4a:87:
         03:02:1f:7a:be:6e:37:0d:3c:25:05:ab:5b:55:3c:60:e7:01:
         33:c9:2d:ac:18:3e:b7:4c:34:57:60:8c:23:67:64:8e:d6:be:
         d1:40:89:e8:59:29:3f:b5:46:bd:36:68:fe:6f:38:94:d6:a0:
         1b:1d:e3:3b:db:bb:1e:08:d9:5f:2a:88:54:ea:ca:14:b1:4b:
         9a:e4:93:ae:95:7e:21:7c:99:d9:b6:56:d9:91:bd:5a:16:46:
         1f:99:a9:cb:05:e3:54:08:4f:d4:74:5c:f9:4e:6f:01:43:a5:
         8b:39:cf:9d:24:35:cc:a0:90:6e:fb:9f:2f:eb:7d:94:bf:e1:
         79:53:06:08:40:bf:65:c5:16:69:12:4b:df:31:85:02:51:0f:
         4d:b1:55:4d:c6:35:c5:bd:29:64:93:bf:ff:5f:f9:b3:9a:60:
         a5:f0:83:13:60:47:eb:46:ec:fa:ab:2f:3d:be:84:a8:ab:ac:
         25:20:4d:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKATziwTZb7weFuNgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDU5NDk3ODEtZTk0NS00MjdjLTllZGUtOTBmOTRiODJkYmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TwrWKp7zezjxwJe56E88OS1zyRjTyCh1Xjd
OuDS1oCwdtAyjZVOvJy257Hoe09a7t72eT7q3gJE3AcWmvI/LJbSqlcl3skY8oNS
9DoTWCz7dfzFzwmvv4g2VEIfQqNGdLR2oe8LlL/JvW8+xuBmRUb1spYuPns3RiC1
2RuB91IqFTu+MupcXY8ysUu7u3lmoBPOpHu5DCNA2FFfkMEqFJvW4VlaAZuL/c/W
vo0vb0nUdDLBkz8WaGNB7c61/bsDJSEYLS+9AF/06upPvzwN72kBrQ0whqi2F+Uj
cNaEuItmR6PvahGCAomtuvMp03Jmmw5627M1+FrytM97utfyHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbwOsqVaqlwj19o4aUQpWQbmlpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZmEzZjMyNWItYWI2My0z
ZDE4LThlMzEtYjFjZjJhZTcwMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1PXc1a03ieTIwNPBKCOplGuxO4aI9x2P3Eaj+NWSC9IcML1tWZNi53
gdUm1R5Kupx4SjQxls9fJkf3T9n5y/UF4jt/7b1KhwMCH3q+bjcNPCUFq1tVPGDn
ATPJLawYPrdMNFdgjCNnZI7WvtFAiehZKT+1Rr02aP5vOJTWoBsd4zvbux4I2V8q
iFTqyhSxS5rkk66VfiF8mdm2VtmRvVoWRh+ZqcsF41QIT9R0XPlObwFDpYs5z50k
NcygkG77ny/rfZS/4XlTBghAv2XFFmkSS98xhQJRD02xVU3GNcW9KWSTv/9f+bOa
YKXwgxNgR+tG7PqrLz2+hKirrCUgTcE=
-----END CERTIFICATE-----