Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b77f39e8-550f-3f08-b810-d2154359f492.roa
File:                     b77f39e8-550f-3f08-b810-d2154359f492.roa (raw, json)
Hash identifier:          YCP+rQy1Vfnif+7qXgDPWEB/gTP+ydrcZPE84c9YbSA=
Subject key identifier:   0E:EE:01:F8:1B:9A:AA:A3:2D:59:6F:FE:CF:35:A4:8C:5B:D8:5F:C0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584221C0D0562D61F0E33102FDA0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b77f39e8-550f-3f08-b810-d2154359f492.roa
Signing time:             Tue 06 Jun 2023 17:35:26 +0000
ROA not before:           Tue 06 Jun 2023 17:35:26 +0000
ROA not after:            Mon 04 Sep 2023 17:35:26 +0000
asID:                     834
IP address blocks:        206.206.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:c0:d0:56:2d:61:f0:e3:31:02:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  6 17:35:26 2023 GMT
            Not After : Sep  4 17:35:26 2023 GMT
        Subject: CN=faeff664-edcf-4fc2-bd25-a2aff2c07aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:63:a7:b7:21:e3:3b:86:22:61:5e:fc:84:
                    20:f2:aa:2b:c9:1b:21:cd:f2:2e:f0:e7:f1:9c:34:
                    5d:6c:db:f9:d4:e6:c3:33:89:7e:e7:e5:23:cc:bd:
                    67:74:ec:c7:f1:81:b3:b8:89:a8:ae:de:6c:3e:b8:
                    c3:bf:38:f9:26:fe:6b:27:27:db:ae:9b:e8:44:af:
                    01:6d:fa:90:0b:12:2c:fe:da:d2:12:c6:33:38:1b:
                    b4:30:00:a9:df:fd:68:02:ac:f3:15:6f:12:2f:6d:
                    26:09:81:ac:e1:c9:59:6a:b2:11:ba:5f:2d:56:0d:
                    a5:7a:1a:0e:e3:1f:45:a8:7d:44:73:f0:de:d2:2f:
                    ca:0a:50:e9:83:09:d3:40:5d:23:7d:27:14:df:d2:
                    f6:b7:cb:da:ea:8e:22:b9:97:50:8b:eb:2c:c8:50:
                    b0:f0:c6:4c:c3:43:da:a5:39:3a:03:1b:72:90:e3:
                    ec:b4:41:f5:5b:a6:bc:1a:ae:ef:de:7d:80:c1:8a:
                    5c:8b:b3:d7:64:dd:9d:e9:26:91:2c:00:34:98:79:
                    1c:8d:8d:e6:40:37:ac:0c:f8:fc:55:c1:4c:74:94:
                    3a:a5:b6:0b:48:c6:cb:cc:24:e0:4a:82:2a:8e:b8:
                    cd:15:3a:a0:85:ac:6e:aa:61:fe:33:86:12:b3:cb:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EE:01:F8:1B:9A:AA:A3:2D:59:6F:FE:CF:35:A4:8C:5B:D8:5F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b77f39e8-550f-3f08-b810-d2154359f492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:b4:1b:63:1b:75:a3:e9:49:9d:61:99:65:3d:a3:82:2d:
         39:44:ee:ff:e4:55:25:91:62:df:19:46:ef:46:ca:52:17:f9:
         d0:7a:87:9e:8c:90:ee:98:21:fa:58:c5:5c:c9:dd:87:b8:ca:
         a5:a1:c1:55:15:85:61:53:ae:96:d7:40:3e:ba:f7:97:1c:bd:
         f6:54:6c:51:e8:4e:81:b4:a1:98:3d:8b:14:63:81:e6:24:a1:
         66:68:96:10:7e:33:48:b2:3e:25:64:4c:b7:6b:60:c1:5a:ab:
         2a:86:04:10:85:75:ab:7b:e8:ed:1d:fd:f2:5e:b8:36:c6:d3:
         70:5e:d9:da:b4:dc:ed:77:9e:b5:88:50:07:7d:a3:c0:a6:23:
         32:66:91:71:b6:32:de:f2:af:02:3e:bb:e4:17:64:fe:ea:44:
         0a:a6:b7:50:5b:33:37:ea:25:1e:8a:70:7b:5a:b8:5e:63:6c:
         db:76:b5:54:6b:1d:fc:bd:0c:48:cc:6e:40:bd:d9:2e:7b:3f:
         70:52:cd:dc:c0:e5:83:4f:08:2f:36:8f:90:3d:15:42:e5:44:
         5b:27:83:79:23:b1:a8:74:cd:08:57:e5:13:48:2c:e9:1b:d3:
         92:51:ff:5b:b3:c1:87:95:6c:2c:93:d1:3e:41:94:ea:51:40:
         dd:84:e6:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIhwNBWLWHw4zEC/aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMDYwNjE3MzUyNloXDTIzMDkwNDE3MzUyNlowLzEtMCsGA1UEAxMk
ZmFlZmY2NjQtZWRjZi00ZmMyLWJkMjUtYTJhZmYyYzA3YWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqxjp7ch4zuGImFe/IQg8qoryRshzfIu8Ofx
nDRdbNv51ObDM4l+5+UjzL1ndOzH8YGzuImort5sPrjDvzj5Jv5rJyfbrpvoRK8B
bfqQCxIs/trSEsYzOBu0MACp3/1oAqzzFW8SL20mCYGs4clZarIRul8tVg2lehoO
4x9FqH1Ec/De0i/KClDpgwnTQF0jfScU39L2t8va6o4iuZdQi+ssyFCw8MZMw0Pa
pTk6AxtykOPstEH1W6a8Gq7v3n2AwYpci7PXZN2d6SaRLAA0mHkcjY3mQDesDPj8
VcFMdJQ6pbYLSMbLzCTgSoIqjrjNFTqghaxuqmH+M4YSs8s5yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7uAfgbmqqjLVlv/s81pIxb2F/AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYjc3ZjM5ZTgtNTUwZi0z
ZjA4LWI4MTAtZDIxNTQzNTlmNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrltBtjG3Wj6UmdYZllPaOCLTlE7v/kVSWRYt8ZRu9GylIX+dB6h56M
kO6YIfpYxVzJ3Ye4yqWhwVUVhWFTrpbXQD6695ccvfZUbFHoToG0oZg9ixRjgeYk
oWZolhB+M0iyPiVkTLdrYMFaqyqGBBCFdat76O0d/fJeuDbG03Be2dq03O13nrWI
UAd9o8CmIzJmkXG2Mt7yrwI+u+QXZP7qRAqmt1BbMzfqJR6KcHtauF5jbNt2tVRr
Hfy9DEjMbkC92S57P3BSzdzA5YNPCC82j5A9FULlRFsng3kjsah0zQhX5RNILOkb
05JR/1uzwYeVbCyT0T5BlOpRQN2E5nY=
-----END CERTIFICATE-----