Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/508da3ee-9136-377f-af69-af011cb49a7e.roa
File:                     508da3ee-9136-377f-af69-af011cb49a7e.roa (raw, json)
Hash identifier:          MBqsKPLCmk6ZKTWmqlI2R/m57k6z5tnMw1rNy0lJ0fk=
Subject key identifier:   D0:EE:73:BC:C1:EA:D5:B7:63:2D:6C:5A:5A:0A:1D:12:64:95:A4:0C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840B124D705301D118164656B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/508da3ee-9136-377f-af69-af011cb49a7e.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 29 Apr 2025 04:00:00 +0000
asID:                     210539
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b1:24:d7:05:30:1d:11:81:64:65:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Apr 29 04:00:00 2025 GMT
        Subject: CN=99f275ad-ea1e-4082-8072-a69d5195884f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3c:b3:72:68:81:53:63:bc:aa:e0:57:ee:f5:
                    26:75:4d:bc:f4:4b:60:b3:27:fc:d6:83:78:f1:ef:
                    79:4e:8a:0e:c5:1f:51:4b:3c:0a:e7:65:c5:97:08:
                    12:38:df:1a:e1:c8:8c:da:5e:59:98:1e:f2:f4:66:
                    ca:77:00:b9:f5:04:a6:10:85:a2:20:53:40:e4:8e:
                    48:23:b5:ed:4f:59:b0:5d:69:9c:41:5b:48:35:ef:
                    2a:7f:92:67:f9:ab:9e:8a:17:2c:aa:d6:be:32:95:
                    a8:d6:46:ab:01:43:68:63:34:1a:0d:0b:53:86:49:
                    66:f2:62:5c:64:cc:20:3f:19:46:91:90:20:a8:c1:
                    63:7f:50:10:1a:9b:32:21:f3:3b:dc:d9:3e:58:08:
                    5a:33:24:58:25:81:93:88:46:bf:dc:b8:48:c4:68:
                    5b:93:f8:51:dd:d8:87:8b:45:7e:46:cd:5a:89:d4:
                    a2:b2:22:e4:81:19:46:ae:50:16:0c:fe:a8:85:4d:
                    43:54:67:ae:b3:f3:70:03:eb:4d:56:e8:5c:12:e5:
                    34:5d:73:86:9c:fb:f4:ec:86:ae:fd:b3:28:de:1f:
                    84:38:d8:57:bb:cf:26:f7:da:5b:53:13:a8:f8:9b:
                    30:9d:23:4b:02:b2:fa:f6:37:1c:4e:87:5f:63:99:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:73:BC:C1:EA:D5:B7:63:2D:6C:5A:5A:0A:1D:12:64:95:A4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/508da3ee-9136-377f-af69-af011cb49a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2b:10:97:fd:34:9b:a1:62:94:4f:25:8c:4f:32:4a:f2:70:
         ff:a2:ea:80:13:72:68:fc:ec:3c:cd:dd:f0:a3:df:55:ec:52:
         a9:d3:35:5d:03:6a:87:8d:ef:65:f5:2e:99:48:5a:c3:8e:2e:
         33:50:34:7a:1a:58:2e:46:1e:39:af:8a:5c:e4:6d:d8:41:d7:
         a3:be:19:a4:52:2e:3b:4d:d6:ab:96:58:14:8c:9d:81:0b:e1:
         24:e7:6d:32:9b:52:c0:c3:5f:ae:72:70:a6:50:01:05:7b:18:
         a4:96:96:15:ab:ef:de:d6:b4:92:da:0c:9b:06:0e:9c:cc:4d:
         1d:35:36:e1:85:13:d2:5d:bf:64:9d:18:14:71:50:a7:a1:d9:
         6e:ca:62:8e:7c:2b:b3:d9:3b:51:92:d7:2f:79:2b:59:f3:fe:
         c9:01:6f:1c:e3:38:9e:4d:ce:bf:8e:8c:42:e0:38:3f:c8:f8:
         9a:0c:92:bc:94:47:b0:6d:0e:9d:d1:78:cc:b7:5b:b7:34:2a:
         9b:d5:f6:33:53:df:db:9c:b0:4b:d8:87:4c:3b:79:df:6a:d6:
         27:af:f5:67:dd:8b:ed:15:2b:8f:9a:83:40:3a:ac:68:97:2e:
         f8:8c:6d:46:f5:d7:c0:77:15:77:07:4b:ec:e7:04:d8:07:43:
         ce:d7:d3:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECxJNcFMB0RgWRla4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIyMTIxMzE4MjcwOVoXDTI1MDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
OTlmMjc1YWQtZWExZS00MDgyLTgwNzItYTY5ZDUxOTU4ODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzyzcmiBU2O8quBX7vUmdU289Etgsyf81oN4
8e95TooOxR9RSzwK52XFlwgSON8a4ciM2l5ZmB7y9GbKdwC59QSmEIWiIFNA5I5I
I7XtT1mwXWmcQVtINe8qf5Jn+aueihcsqta+MpWo1karAUNoYzQaDQtThklm8mJc
ZMwgPxlGkZAgqMFjf1AQGpsyIfM73Nk+WAhaMyRYJYGTiEa/3LhIxGhbk/hR3diH
i0V+Rs1aidSisiLkgRlGrlAWDP6ohU1DVGeus/NwA+tNVuhcEuU0XXOGnPv07Iau
/bMo3h+EONhXu88m99pbUxOo+JswnSNLArL69jccTodfY5kAFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDuc7zB6tW3Yy1sWloKHRJklaQMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTA4ZGEzZWUtOTEzNi0z
NzdmLWFmNjktYWYwMTFjYjQ5YTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Hq7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwrEJf9NJuhYpRPJYxPMkrycP+i6oATcmj87DzN3fCj31XsUqnTNV0D
aoeN72X1LplIWsOOLjNQNHoaWC5GHjmvilzkbdhB16O+GaRSLjtN1quWWBSMnYEL
4STnbTKbUsDDX65ycKZQAQV7GKSWlhWr797WtJLaDJsGDpzMTR01NuGFE9Jdv2Sd
GBRxUKeh2W7KYo58K7PZO1GS1y95K1nz/skBbxzjOJ5Nzr+OjELgOD/I+JoMkryU
R7BtDp3ReMy3W7c0KpvV9jNT39ucsEvYh0w7ed9q1iev9Wfdi+0VK4+ag0A6rGiX
LviMbUb118B3FXcHS+znBNgHQ87X09A=
-----END CERTIFICATE-----