Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/be18e9c1-8689-381d-b5d4-ed0947cf10ff.roa
File:                     be18e9c1-8689-381d-b5d4-ed0947cf10ff.roa (raw, json)
Hash identifier:          MV39rZg0ZvTPl9eEUHHUlr2MbD8enLTGPrDRh37/dc0=
Subject key identifier:   1B:08:BC:72:6F:38:83:73:DA:F3:D4:3B:24:85:E8:C3:03:6A:D5:8B
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285842B263E1B094D56F6FFD548980
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/be18e9c1-8689-381d-b5d4-ed0947cf10ff.roa
Signing time:             Fri 28 Jul 2023 13:00:19 +0000
ROA not before:           Fri 28 Jul 2023 13:00:19 +0000
ROA not after:            Thu 26 Oct 2023 13:00:19 +0000
asID:                     834
IP address blocks:        208.123.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b2:63:e1:b0:94:d5:6f:6f:fd:54:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jul 28 13:00:19 2023 GMT
            Not After : Oct 26 13:00:19 2023 GMT
        Subject: CN=499e1b34-981c-4175-9752-3a648b7fa04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:7e:5b:d3:2c:25:c9:a5:b1:0f:2f:3f:a1:
                    b4:9f:fc:c7:02:d1:36:3c:f3:b3:02:ff:50:59:23:
                    26:ed:4c:fe:ac:24:6d:fb:17:a5:c5:5e:e5:6a:b5:
                    33:9f:ff:bb:e4:03:94:cd:c6:de:5e:64:da:b5:74:
                    00:ea:0d:92:58:c1:c9:9c:bb:c8:7b:f2:73:cd:56:
                    78:bc:33:70:35:e8:7d:5c:3b:25:ca:7d:6d:2a:05:
                    dd:3c:65:7a:e3:34:15:89:7f:43:d0:ef:21:05:a8:
                    53:49:6f:46:41:2b:98:3d:10:1d:62:e1:ad:4e:02:
                    99:a3:52:ef:4a:ba:14:3e:c0:dc:a7:86:a4:2c:f8:
                    3f:b3:45:2d:fc:af:2c:51:c0:7d:0e:a8:57:7a:02:
                    34:29:bd:bc:09:b7:69:79:50:80:57:bd:50:54:22:
                    e8:87:8f:b3:47:b4:6e:8d:16:73:3f:d8:a8:45:d7:
                    b7:3e:48:68:cd:21:a7:7c:c4:7e:c8:79:c4:c6:2f:
                    c0:84:17:c6:9b:ea:21:86:b5:23:c9:f8:95:30:d6:
                    80:70:aa:47:b1:7d:29:8c:a3:a2:61:aa:dd:e4:a4:
                    00:95:f0:a6:f6:0c:ab:4a:03:47:66:61:f7:8b:3f:
                    49:95:78:b7:68:7f:74:bb:2b:4d:ce:4e:46:0e:ed:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:08:BC:72:6F:38:83:73:DA:F3:D4:3B:24:85:E8:C3:03:6A:D5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/be18e9c1-8689-381d-b5d4-ed0947cf10ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:23:15:ef:bf:8c:07:80:ed:24:ea:12:41:1c:24:a6:3d:5c:
         07:6b:8b:3f:34:65:f3:94:0d:04:c3:ce:68:8f:0c:7b:4f:2e:
         8f:a2:b6:39:c3:db:8a:ea:07:f8:54:b9:c5:4d:7a:96:4f:16:
         f3:b6:d1:23:c1:f9:5b:a1:47:0c:cb:9e:2d:2c:c0:92:b4:e0:
         c5:7b:56:10:df:cf:2c:02:30:f5:eb:cf:72:cf:e7:ad:37:83:
         54:63:fb:d4:06:bd:72:73:bb:ae:d1:e2:90:59:1a:3c:a8:c9:
         dc:0c:a8:f9:b8:7c:8e:24:bd:0c:9b:71:9d:7d:cc:8f:45:63:
         62:c8:79:12:ff:d6:75:ed:b7:1b:b0:18:ca:36:0a:1c:05:6a:
         7f:f5:ad:26:e3:c3:98:ae:4a:a0:56:f7:f6:79:da:fc:3a:f0:
         de:26:f5:1f:cf:dd:fa:54:48:4b:75:30:47:04:7f:ad:92:f4:
         ba:23:42:8b:dd:0a:29:61:8d:af:ec:b1:23:1a:fb:c3:50:93:
         90:71:cb:8c:77:27:dd:52:0f:7e:75:64:99:cf:e0:17:39:e9:
         95:4d:4c:25:54:81:74:cf:a1:8c:13:cc:82:d3:55:49:e2:5b:
         54:e5:7e:ce:77:f7:8b:f6:b4:48:58:34:de:e1:cf:55:1c:64:
         a6:24:2c:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKyY+GwlNVvb/1UiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTIzMDcyODEzMDAxOVoXDTIzMTAyNjEzMDAxOVowLzEtMCsGA1UEAxMk
NDk5ZTFiMzQtOTgxYy00MTc1LTk3NTItM2E2NDhiN2ZhMDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJd+W9MsJcmlsQ8vP6G0n/zHAtE2PPOzAv9Q
WSMm7Uz+rCRt+xelxV7larUzn/+75AOUzcbeXmTatXQA6g2SWMHJnLvIe/JzzVZ4
vDNwNeh9XDslyn1tKgXdPGV64zQViX9D0O8hBahTSW9GQSuYPRAdYuGtTgKZo1Lv
SroUPsDcp4akLPg/s0Ut/K8sUcB9DqhXegI0Kb28CbdpeVCAV71QVCLoh4+zR7Ru
jRZzP9ioRde3PkhozSGnfMR+yHnExi/AhBfGm+ohhrUjyfiVMNaAcKpHsX0pjKOi
Yard5KQAlfCm9gyrSgNHZmH3iz9JlXi3aH90uytNzk5GDu0TzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsIvHJvOINz2vPUOySF6MMDatWLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYmUxOGU5YzEtODY4OS0z
ODFkLWI1ZDQtZWQwOTQ3Y2YxMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgjFe+/jAeA7STqEkEcJKY9XAdriz80ZfOUDQTDzmiPDHtPLo+itjnD
24rqB/hUucVNepZPFvO20SPB+VuhRwzLni0swJK04MV7VhDfzywCMPXrz3LP5603
g1Rj+9QGvXJzu67R4pBZGjyoydwMqPm4fI4kvQybcZ19zI9FY2LIeRL/1nXttxuw
GMo2ChwFan/1rSbjw5iuSqBW9/Z52vw68N4m9R/P3fpUSEt1MEcEf62S9LojQovd
Cilhja/ssSMa+8NQk5Bxy4x3J91SD351ZJnP4Bc56ZVNTCVUgXTPoYwTzILTVUni
W1Tlfs5394v2tEhYNN7hz1UcZKYkLDc=
-----END CERTIFICATE-----