Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b29d556-3373-3594-8708-940975d8e9fa.roa
File:                     5b29d556-3373-3594-8708-940975d8e9fa.roa (raw, json)
Hash identifier:          PDZxKckdl+ds1hraRJMjub9Oup5rMaMnFhpyKx5Yqko=
Subject key identifier:   6D:22:C9:F2:9C:B4:F8:A4:BA:EF:88:ED:B3:29:C3:3F:3B:BB:D4:BB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E22A4B7FB1C53EF182D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b29d556-3373-3594-8708-940975d8e9fa.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 20 Jul 2023 23:20:39 +0000
asID:                     1299
IP address blocks:        206.206.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:22:a4:b7:fb:1c:53:ef:18:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 20 23:20:39 2023 GMT
        Subject: CN=a6d7b550-10c5-49df-9670-4075d35b8a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:f3:73:1e:7e:a0:7e:19:cb:dc:78:31:0e:
                    ce:07:72:34:c5:cb:12:54:43:b9:a3:8f:7a:54:00:
                    a7:4c:28:d2:7f:90:e1:df:00:bf:2c:ab:20:0f:b9:
                    96:28:f6:d5:6f:af:47:57:83:38:99:c2:f7:81:d8:
                    69:4f:d2:d7:b8:61:de:ad:67:c6:a0:6a:36:95:3c:
                    04:a3:a7:db:84:36:cc:09:f5:70:48:5e:9e:d3:f7:
                    cf:3f:8f:21:8e:8e:79:12:30:55:50:98:a2:ea:43:
                    e2:89:7b:48:ff:ee:59:0c:f1:3a:86:d2:0b:ab:94:
                    ac:dc:8b:73:fc:99:bd:8b:99:5b:ce:f4:d4:71:68:
                    7a:1d:f5:10:48:a8:71:26:3e:7e:70:e5:4e:55:4d:
                    23:f8:2e:0e:66:28:9a:8d:d8:0b:20:7f:9e:13:5b:
                    ec:09:04:f5:2d:8c:d3:41:6e:f6:00:51:09:ea:a3:
                    9f:59:74:50:11:58:46:f8:c2:3d:07:3d:22:cf:01:
                    7e:5a:12:23:83:33:56:45:3b:53:06:d0:6a:8e:27:
                    b9:5b:b5:da:4c:5a:70:09:cf:47:e4:25:5c:e4:22:
                    0b:18:6e:8b:aa:e7:c9:cf:83:9c:4d:a1:0e:93:a1:
                    5d:7e:60:75:c0:58:52:68:07:37:47:6c:94:e8:4f:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:22:C9:F2:9C:B4:F8:A4:BA:EF:88:ED:B3:29:C3:3F:3B:BB:D4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b29d556-3373-3594-8708-940975d8e9fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d3:f4:05:9d:d8:7f:d6:2e:26:d6:32:2a:b6:75:48:83:77:
         aa:f2:96:79:aa:b7:a4:5c:2f:ec:a3:76:60:33:74:90:59:d7:
         fc:cd:ab:63:60:53:eb:38:df:e4:ce:c2:14:f0:9d:44:88:4d:
         5a:3b:7d:06:67:b0:a7:a4:ff:83:2e:2d:ad:03:c7:0c:c0:12:
         3b:45:67:24:d2:d8:c4:88:e7:83:8e:ea:a3:7e:ac:62:8a:7b:
         92:a6:23:ba:52:c6:91:d3:42:47:f6:f6:93:42:0c:7c:a5:40:
         b7:f1:4e:03:97:63:ac:8c:3e:8d:6b:72:c4:4d:81:08:c9:ba:
         ad:2e:2c:91:0b:a3:95:dd:c4:59:dc:a7:65:2a:84:b9:f3:24:
         3d:1f:8a:00:b8:85:82:d1:88:56:fe:98:b4:fd:d8:4a:e0:0a:
         e1:34:c1:6c:d6:bd:e0:6f:82:7e:53:11:db:6d:f8:ee:6e:df:
         6a:a8:28:48:1e:99:bb:4b:56:04:d2:a0:b0:5c:0f:86:28:8c:
         29:75:12:44:e5:7f:1e:b7:ba:5a:2e:e2:9c:30:fd:c8:a0:44:
         77:57:da:b3:9b:c2:07:3b:3c:b0:8e:4b:3e:11:0e:6e:2c:6e:
         11:b9:2f:8f:fa:b8:1a:e3:7a:c8:00:17:92:1e:5d:7a:e2:49:
         57:f5:7c:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbiKkt/scU+8YLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcyMDIzMjAzOVowLzEtMCsGA1UEAxMk
YTZkN2I1NTAtMTBjNS00OWRmLTk2NzAtNDA3NWQzNWI4YTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMXzcx5+oH4Zy9x4MQ7OB3I0xcsSVEO5o496
VACnTCjSf5Dh3wC/LKsgD7mWKPbVb69HV4M4mcL3gdhpT9LXuGHerWfGoGo2lTwE
o6fbhDbMCfVwSF6e0/fPP48hjo55EjBVUJii6kPiiXtI/+5ZDPE6htILq5Ss3Itz
/Jm9i5lbzvTUcWh6HfUQSKhxJj5+cOVOVU0j+C4OZiiajdgLIH+eE1vsCQT1LYzT
QW72AFEJ6qOfWXRQEVhG+MI9Bz0izwF+WhIjgzNWRTtTBtBqjie5W7XaTFpwCc9H
5CVc5CILGG6LqufJz4OcTaEOk6FdfmB1wFhSaAc3R2yU6E/NlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG0iyfKctPikuu+I7bMpwz87u9S7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWIyOWQ1NTYtMzM3My0z
NTk0LTg3MDgtOTQwOTc1ZDhlOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALjT9AWd2H/WLibWMiq2dUiDd6rylnmqt6RcL+yjdmAzdJBZ1/zNq2Ng
U+s43+TOwhTwnUSITVo7fQZnsKek/4MuLa0DxwzAEjtFZyTS2MSI54OO6qN+rGKK
e5KmI7pSxpHTQkf29pNCDHylQLfxTgOXY6yMPo1rcsRNgQjJuq0uLJELo5XdxFnc
p2UqhLnzJD0figC4hYLRiFb+mLT92ErgCuE0wWzWveBvgn5TEdtt+O5u32qoKEge
mbtLVgTSoLBcD4YojCl1EkTlfx63ulou4pww/cigRHdX2rObwgc7PLCOSz4RDm4s
bhG5L4/6uBrjesgAF5IeXXriSVf1fF8=
-----END CERTIFICATE-----