Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b27aae0-e3f6-3786-87d9-30df7a61f222.roa
File:                     2b27aae0-e3f6-3786-87d9-30df7a61f222.roa (raw, json)
Hash identifier:          W8tVXWFeZpdpw8UMuZr+JCiXgXxhW85UzMFLt9XSIxI=
Subject key identifier:   E1:B8:AC:E2:BD:2A:51:4F:F8:48:39:63:06:EE:92:DC:81:7A:4D:A7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841ED198FB3412267C7A8FB9C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b27aae0-e3f6-3786-87d9-30df7a61f222.roa
Signing time:             Thu 18 May 2023 20:56:24 +0000
ROA not before:           Thu 18 May 2023 20:56:24 +0000
ROA not after:            Wed 16 Aug 2023 20:56:24 +0000
asID:                     13335
IP address blocks:        216.74.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ed:19:8f:b3:41:22:67:c7:a8:fb:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 18 20:56:24 2023 GMT
            Not After : Aug 16 20:56:24 2023 GMT
        Subject: CN=9f361581-9579-4433-81e0-0d84a3b71553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:0d:a8:bc:2c:e8:b6:40:98:c1:a6:43:00:
                    a0:e2:53:6f:0b:40:17:eb:b0:d1:dc:23:7c:e3:4d:
                    53:e5:a0:29:da:56:2a:01:a0:9d:bd:d5:f5:56:c6:
                    44:67:f2:53:3f:50:d7:e1:21:a5:b7:d1:64:15:db:
                    33:dc:5b:27:36:97:e9:c5:1f:40:ef:2d:3c:ce:e8:
                    fa:c9:0f:77:79:77:21:f8:ff:ee:09:5c:cf:8d:c6:
                    46:61:2a:c3:89:37:3c:87:a1:cc:6c:a3:ee:c2:7a:
                    17:a9:b1:05:d5:56:06:a9:4a:80:c3:85:69:b8:2a:
                    0c:5e:83:9a:5b:9b:2a:81:73:ab:85:29:2e:26:96:
                    0d:be:f7:7c:c6:fd:56:76:b3:12:30:bd:b3:5b:bb:
                    67:c8:48:17:ca:52:ee:52:b9:6f:96:65:30:f6:73:
                    86:a2:dc:b3:73:d9:03:b0:a2:58:11:dd:de:22:2f:
                    45:88:7d:2a:c1:ca:23:91:a8:4f:bc:7e:da:20:a4:
                    38:f2:da:dc:88:4a:34:c6:89:1b:08:d1:b6:bd:3e:
                    a5:13:d2:50:91:0e:f4:c1:4c:71:98:90:1a:3d:c7:
                    67:41:19:8f:b0:69:99:aa:54:ce:02:2b:0a:96:42:
                    0c:e6:71:36:18:90:45:bc:f0:e8:dc:c1:58:aa:c4:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B8:AC:E2:BD:2A:51:4F:F8:48:39:63:06:EE:92:DC:81:7A:4D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b27aae0-e3f6-3786-87d9-30df7a61f222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:04:29:c0:e9:0a:d1:7a:30:32:a1:54:61:99:50:26:cb:87:
         08:4b:5d:9d:08:64:2d:78:bf:ab:94:4f:fd:af:92:e5:31:bb:
         f5:84:64:e4:3a:96:d7:fc:cb:60:2b:77:2c:0b:27:d9:37:5b:
         93:91:89:3a:43:f6:6b:17:0b:8d:39:e7:c7:81:39:bb:bb:bc:
         1e:02:ec:a2:cb:4c:fe:58:36:0e:cf:9c:3e:a1:8d:64:e3:ac:
         3b:bb:d5:a9:51:59:74:60:f7:11:a2:5e:db:b2:90:8a:5f:97:
         80:c1:08:6a:08:af:14:92:de:19:83:60:8d:6f:23:c4:87:78:
         a5:9b:ca:e0:d4:d8:c2:68:7b:c4:55:a7:e5:e5:0e:3d:b3:03:
         31:7d:06:b3:3c:b4:d4:b5:a2:cc:c2:44:77:2c:92:05:63:ae:
         30:73:16:00:48:24:e2:40:80:f5:8e:35:cf:50:32:d6:48:4e:
         64:61:dc:a3:6e:83:a9:e2:f7:fd:50:92:71:41:4c:18:76:03:
         04:8e:d8:a1:85:67:ec:7b:02:16:2a:0c:c1:bf:94:c2:91:f0:
         1a:1c:5c:d0:19:0e:ab:6f:f0:a7:30:ee:18:03:75:a4:65:79:
         ae:37:c4:db:03:fa:61:a6:8e:7c:52:9e:a9:0f:d8:54:dc:46:
         e3:b7:34:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHtGY+zQSJnx6j7nAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMDUxODIwNTYyNFoXDTIzMDgxNjIwNTYyNFowLzEtMCsGA1UEAxMk
OWYzNjE1ODEtOTU3OS00NDMzLTgxZTAtMGQ4NGEzYjcxNTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU4NqLws6LZAmMGmQwCg4lNvC0AX67DR3CN8
401T5aAp2lYqAaCdvdX1VsZEZ/JTP1DX4SGlt9FkFdsz3FsnNpfpxR9A7y08zuj6
yQ93eXch+P/uCVzPjcZGYSrDiTc8h6HMbKPuwnoXqbEF1VYGqUqAw4VpuCoMXoOa
W5sqgXOrhSkuJpYNvvd8xv1WdrMSML2zW7tnyEgXylLuUrlvlmUw9nOGotyzc9kD
sKJYEd3eIi9FiH0qwcojkahPvH7aIKQ48trciEo0xokbCNG2vT6lE9JQkQ70wUxx
mJAaPcdnQRmPsGmZqlTOAisKlkIM5nE2GJBFvPDo3MFYqsRQtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOG4rOK9KlFP+Eg5YwbuktyBek2nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMmIyN2FhZTAtZTNmNi0z
Nzg2LTg3ZDktMzBkZjdhNjFmMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ep8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM0EKcDpCtF6MDKhVGGZUCbLhwhLXZ0IZC14v6uUT/2vkuUxu/WEZOQ6
ltf8y2ArdywLJ9k3W5ORiTpD9msXC40558eBObu7vB4C7KLLTP5YNg7PnD6hjWTj
rDu71alRWXRg9xGiXtuykIpfl4DBCGoIrxSS3hmDYI1vI8SHeKWbyuDU2MJoe8RV
p+XlDj2zAzF9BrM8tNS1oszCRHcskgVjrjBzFgBIJOJAgPWONc9QMtZITmRh3KNu
g6ni9/1QknFBTBh2AwSO2KGFZ+x7AhYqDMG/lMKR8BocXNAZDqtv8Kcw7hgDdaRl
ea43xNsD+mGmjnxSnqkP2FTcRuO3NH8=
-----END CERTIFICATE-----