Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/527e32d2-71d9-37f7-8f74-652fe28ed4f6.roa
File:                     527e32d2-71d9-37f7-8f74-652fe28ed4f6.roa (raw, json)
Hash identifier:          Y6l6Jvimz8YIPTKJEPWRDG0qAYUKEPOOKOdrGaIwb7Y=
Subject key identifier:   F1:D3:46:C1:52:72:94:29:BC:7E:22:50:A1:1E:50:3F:FE:0D:76:54
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858418278D0F6B46870208245F480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/527e32d2-71d9-37f7-8f74-652fe28ed4f6.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sun 13 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        206.206.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Apr 2023 16:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:82:78:d0:f6:b4:68:70:20:82:45:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jul 13 04:00:00 2025 GMT
        Subject: CN=7c7d44f1-77fc-4565-b063-2f42c9ec3bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:48:5f:a5:0c:41:54:9e:83:e5:83:38:7d:
                    64:95:72:4e:16:9e:eb:5b:61:4e:c4:03:58:99:11:
                    c5:63:6e:45:f3:f9:68:d1:71:51:ca:2c:82:af:d3:
                    6d:b0:dd:bd:72:07:39:20:cb:92:47:36:f3:3a:71:
                    b5:05:04:69:fb:6c:e1:a6:4e:c2:1e:82:c4:b2:06:
                    93:73:af:96:d0:cb:da:a8:cb:04:91:3f:b3:e9:9d:
                    66:d8:09:c0:7e:49:89:a8:b9:27:f3:48:18:5d:d5:
                    58:74:a9:92:79:07:4b:db:9c:3f:ba:ae:c8:6b:4c:
                    5f:96:20:8c:c6:df:1f:f6:12:d3:bb:14:a0:b4:c2:
                    da:2b:80:6c:e5:ab:07:46:3a:c5:fb:0a:c3:3a:06:
                    22:e3:7c:68:5e:39:9a:f6:a6:67:bd:03:b1:84:99:
                    e4:f3:7b:90:c9:09:98:73:64:a9:be:d2:ae:e8:f1:
                    86:58:09:e1:d1:5a:e6:d2:28:e0:54:73:1c:17:4a:
                    69:19:51:e0:7b:33:13:e4:9f:4b:ae:40:d7:9f:c5:
                    e1:77:3e:56:d4:b3:77:db:cf:e5:2e:e1:54:3e:39:
                    8f:49:1b:52:f8:46:52:6c:f2:b8:36:8c:72:0a:34:
                    5c:09:16:72:27:94:76:fe:27:5f:22:57:c0:84:c8:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:46:C1:52:72:94:29:BC:7E:22:50:A1:1E:50:3F:FE:0D:76:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/527e32d2-71d9-37f7-8f74-652fe28ed4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:90:8c:6b:23:c5:12:d6:52:08:2a:eb:22:28:03:59:9e:a3:
         d6:58:69:5e:c1:81:c9:cc:31:45:7e:b1:58:29:be:30:c8:8f:
         b6:1c:d6:a7:ec:e7:d7:ba:b2:b8:0b:0d:0b:be:df:83:7f:5e:
         95:19:57:a6:49:14:05:44:68:3d:12:ed:3c:90:bf:a3:7e:91:
         45:5f:1e:03:f4:4c:87:83:16:84:c6:31:d7:e5:20:8e:0a:b0:
         ae:bb:ef:f4:5e:95:27:2c:f2:9d:0e:f7:4d:ca:8b:be:ad:7a:
         8b:15:98:3f:7e:32:34:2d:9a:f0:62:dc:65:85:ed:04:3f:bd:
         c8:07:4f:38:33:ad:79:7d:9d:05:ff:eb:20:f8:83:e1:6a:4b:
         e8:b0:d7:f8:10:ca:c7:cb:c3:a7:62:d1:71:49:73:6d:5f:6d:
         38:41:80:d1:f8:a4:f6:74:b8:68:30:9d:e7:af:00:f4:cd:63:
         c5:95:7a:9a:b0:2c:c4:67:99:7d:63:47:46:63:b3:b4:6b:ab:
         b5:6c:2c:9a:e2:21:25:c1:14:f3:94:39:9e:27:48:97:ff:9d:
         b6:32:1d:f2:fe:cb:4e:53:b3:c2:34:9e:36:6c:b0:92:e8:35:
         e3:4f:48:30:68:2e:81:22:e3:b7:02:02:22:43:e0:b5:5b:a0:
         5d:bc:74:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGCeND2tGhwIIJF9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIyMTIxMzE4MjcwOVoXDTI1MDcxMzA0MDAwMFowLzEtMCsGA1UEAxMk
N2M3ZDQ0ZjEtNzdmYy00NTY1LWIwNjMtMmY0MmM5ZWMzYmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd5IX6UMQVSeg+WDOH1klXJOFp7rW2FOxANY
mRHFY25F8/lo0XFRyiyCr9NtsN29cgc5IMuSRzbzOnG1BQRp+2zhpk7CHoLEsgaT
c6+W0MvaqMsEkT+z6Z1m2AnAfkmJqLkn80gYXdVYdKmSeQdL25w/uq7Ia0xfliCM
xt8f9hLTuxSgtMLaK4Bs5asHRjrF+wrDOgYi43xoXjma9qZnvQOxhJnk83uQyQmY
c2SpvtKu6PGGWAnh0Vrm0ijgVHMcF0ppGVHgezMT5J9LrkDXn8Xhdz5W1LN328/l
LuFUPjmPSRtS+EZSbPK4NoxyCjRcCRZyJ5R2/idfIlfAhMiVEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHTRsFScpQpvH4iUKEeUD/+DXZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTI3ZTMyZDItNzFkOS0z
N2Y3LThmNzQtNjUyZmUyOGVkNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2QjGsjxRLWUggq6yIoA1meo9ZYaV7BgcnMMUV+sVgpvjDIj7Yc1qfs
59e6srgLDQu+34N/XpUZV6ZJFAVEaD0S7TyQv6N+kUVfHgP0TIeDFoTGMdflII4K
sK677/RelScs8p0O903Ki76teosVmD9+MjQtmvBi3GWF7QQ/vcgHTzgzrXl9nQX/
6yD4g+FqS+iw1/gQysfLw6di0XFJc21fbThBgNH4pPZ0uGgwneevAPTNY8WVepqw
LMRnmX1jR0Zjs7Rrq7VsLJriISXBFPOUOZ4nSJf/nbYyHfL+y05Ts8I0njZssJLo
NeNPSDBoLoEi47cCAiJD4LVboF28dBo=
-----END CERTIFICATE-----