Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89e4db04-0ada-3283-8510-c819d48db6bc.roa
File:                     89e4db04-0ada-3283-8510-c819d48db6bc.roa (raw, json)
Hash identifier:          qafBkH7XUWXXCk/MZRSYTyI0GpgULng+MH4E6NzgGTY=
Subject key identifier:   E8:CF:C2:2D:D4:F3:31:DE:EB:2B:D6:66:1D:CC:35:CB:7E:C9:DF:A4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584410DE80D393CEEB9C63B09160
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89e4db04-0ada-3283-8510-c819d48db6bc.roa
Signing time:             Fri 01 Dec 2023 02:00:15 +0000
ROA not before:           Fri 01 Dec 2023 02:00:15 +0000
ROA not after:            Thu 29 Feb 2024 02:00:15 +0000
asID:                     398465
IP address blocks:        206.206.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:10:de:80:d3:93:ce:eb:9c:63:b0:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec  1 02:00:15 2023 GMT
            Not After : Feb 29 02:00:15 2024 GMT
        Subject: CN=afa0660b-7a10-4e88-ba00-17dce6d878bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:64:49:9a:c7:24:61:fc:fb:5a:db:9b:9a:
                    67:7f:41:fe:d1:cc:81:ad:df:b3:8f:5b:ca:bc:fb:
                    ad:89:a6:9f:bb:6c:dd:ef:bc:63:a4:fa:ab:d3:53:
                    dc:df:64:be:f4:bc:22:1c:8f:8e:2e:a5:1f:3b:ad:
                    43:87:53:44:f7:57:ba:53:ab:3f:85:6b:4f:e1:8d:
                    b4:05:dc:3a:af:13:2a:45:db:df:fa:91:80:e2:cd:
                    ce:34:46:19:15:b4:84:76:5f:ce:ab:76:37:5e:77:
                    c2:d7:ee:ea:cb:e5:33:cb:8d:a3:68:02:55:32:07:
                    fa:49:53:62:f1:7e:41:aa:80:82:a7:63:5a:8a:d1:
                    76:5c:e1:58:45:9b:24:42:cb:6b:49:cd:56:8f:5d:
                    75:1b:09:6a:d0:2e:48:7f:99:f4:8a:16:9d:63:c2:
                    ea:4f:fe:7a:a9:2a:fa:24:ce:ea:3b:04:9d:e7:fd:
                    e9:e8:22:2a:45:f1:d6:e6:17:0a:bd:4e:73:db:66:
                    0a:7d:b8:ad:c6:69:46:9a:aa:49:e9:f0:31:65:c1:
                    7f:09:15:b3:6e:24:d2:ac:9a:24:8a:f0:cd:dc:83:
                    3a:17:63:93:b5:b6:4c:43:fb:01:8a:1b:23:3d:dd:
                    44:4c:8d:e0:56:8b:85:23:de:4f:60:29:0f:66:3c:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:C2:2D:D4:F3:31:DE:EB:2B:D6:66:1D:CC:35:CB:7E:C9:DF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89e4db04-0ada-3283-8510-c819d48db6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:79:4f:0a:3a:1a:c7:73:6f:71:dd:cf:a1:1d:c5:be:2b:
         7d:cc:d6:de:2a:2b:23:54:2f:62:51:6d:79:6a:e4:7d:3b:62:
         7e:74:96:83:78:07:ce:9f:03:00:b9:9a:2a:a3:75:b3:e8:a1:
         55:b1:51:99:f2:40:66:c5:96:86:61:32:eb:44:d6:6b:4b:1a:
         4d:20:ae:c1:d2:90:9d:ca:da:e4:ad:3c:5e:13:4b:c9:0d:ae:
         c9:98:63:b4:1e:b5:70:18:23:51:ec:aa:51:b7:ea:a2:9b:98:
         86:e4:33:15:dc:b2:e4:8c:c0:50:70:44:ef:ef:39:c0:9b:db:
         e6:3f:52:3e:fb:4a:9a:5c:91:78:36:12:fa:c5:82:5e:72:b7:
         7e:07:70:f2:46:a0:d7:f1:7a:48:7c:41:a9:15:7c:16:c1:ac:
         a8:d7:18:49:86:e0:08:0d:99:a2:56:2c:1d:d6:01:d2:c3:3e:
         b3:9d:f7:3c:a9:10:1b:68:92:18:47:51:4c:e9:91:f8:05:b0:
         26:ea:f8:92:df:20:f1:d9:b7:94:09:f4:5c:11:35:eb:86:5b:
         91:62:79:99:cb:3f:a0:5a:f7:63:8d:80:aa:88:22:a4:19:c3:
         fc:01:fc:32:bb:05:8e:2e:d8:72:1c:6b:4f:72:d9:df:a8:c3:
         b0:d3:10:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQQ3oDTk87rnGOwkWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMTIwMTAyMDAxNVoXDTI0MDIyOTAyMDAxNVowLzEtMCsGA1UEAxMk
YWZhMDY2MGItN2ExMC00ZTg4LWJhMDAtMTdkY2U2ZDg3OGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNtkSZrHJGH8+1rbm5pnf0H+0cyBrd+zj1vK
vPutiaafu2zd77xjpPqr01Pc32S+9LwiHI+OLqUfO61Dh1NE91e6U6s/hWtP4Y20
Bdw6rxMqRdvf+pGA4s3ONEYZFbSEdl/Oq3Y3XnfC1+7qy+Uzy42jaAJVMgf6SVNi
8X5BqoCCp2NaitF2XOFYRZskQstrSc1Wj111Gwlq0C5If5n0ihadY8LqT/56qSr6
JM7qOwSd5/3p6CIqRfHW5hcKvU5z22YKfbitxmlGmqpJ6fAxZcF/CRWzbiTSrJok
ivDN3IM6F2OTtbZMQ/sBihsjPd1ETI3gVouFI95PYCkPZjyvNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjPwi3U8zHe6yvWZh3MNct+yd+kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvODllNGRiMDQtMGFkYS0z
MjgzLTg1MTAtYzgxOWQ0OGRiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzPeU8KOhrHc29x3c+hHcW+K33M1t4qKyNUL2JRbXlq5H07Yn50loN4
B86fAwC5miqjdbPooVWxUZnyQGbFloZhMutE1mtLGk0grsHSkJ3K2uStPF4TS8kN
rsmYY7QetXAYI1HsqlG36qKbmIbkMxXcsuSMwFBwRO/vOcCb2+Y/Uj77SppckXg2
EvrFgl5yt34HcPJGoNfxekh8QakVfBbBrKjXGEmG4AgNmaJWLB3WAdLDPrOd9zyp
EBtokhhHUUzpkfgFsCbq+JLfIPHZt5QJ9FwRNeuGW5FieZnLP6Ba92ONgKqIIqQZ
w/wB/DK7BY4u2HIca09y2d+ow7DTEJY=
-----END CERTIFICATE-----