Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b9f256ff-bea4-3b6f-b549-303ba2ed5432.roa
File:                     b9f256ff-bea4-3b6f-b549-303ba2ed5432.roa (raw, json)
Hash identifier:          OxJG9X3QUml9dvDVeDah+M99LWYn+nJOrhESxz83sqk=
Subject key identifier:   EB:38:6C:57:C4:D3:90:50:6F:A4:0F:ED:F8:0F:99:14:3D:72:9B:4C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840B40DBE1F67CC3452AA68E400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b9f256ff-bea4-3b6f-b549-303ba2ed5432.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Wed 30 Apr 2025 04:00:00 +0000
asID:                     210439
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 25 Feb 2023 19:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b4:0d:be:1f:67:cc:34:52:aa:68:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Apr 30 04:00:00 2025 GMT
        Subject: CN=e5bc3dd6-d44c-43df-a171-1c42f2e90134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:53:8a:e5:5a:80:dc:18:46:49:36:51:55:
                    06:d1:1b:26:ce:05:4f:88:f6:4a:93:4b:b6:c1:1d:
                    47:18:7c:f2:d3:c3:53:e7:42:47:47:a5:77:e2:47:
                    bb:cb:e2:c5:5c:35:53:d5:57:2e:06:1b:f7:86:54:
                    01:38:af:a1:7e:70:1c:1a:63:22:be:5d:41:58:24:
                    5c:47:85:14:20:da:bb:1d:fb:69:22:23:44:9b:36:
                    21:8b:d0:37:f2:9b:21:dd:e1:fe:6b:96:b2:49:ed:
                    f4:d7:d3:48:73:d5:05:82:79:7a:76:27:bb:83:58:
                    ec:0a:5a:8c:50:2d:26:a0:3a:ee:7a:62:b7:9f:b4:
                    a6:ce:4e:d6:05:7c:9d:4a:74:68:b0:d1:29:d4:6d:
                    f3:2b:16:bb:68:96:e5:e2:79:0b:0d:d2:43:8e:50:
                    7e:ca:f8:46:c0:1f:62:b2:a0:8d:ef:39:a2:02:92:
                    87:d4:48:68:2f:f7:b3:10:7d:0e:34:98:eb:e9:d1:
                    27:f1:5f:a3:7a:69:c1:eb:3d:48:a7:83:28:0a:79:
                    d0:29:a9:8d:51:89:27:6b:5a:33:5d:99:cd:69:5e:
                    ee:af:f9:13:83:7b:3d:9a:b6:da:60:c7:d2:4d:46:
                    fa:e1:1d:5f:d4:b2:31:64:f5:ea:87:d3:f6:c5:96:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:38:6C:57:C4:D3:90:50:6F:A4:0F:ED:F8:0F:99:14:3D:72:9B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b9f256ff-bea4-3b6f-b549-303ba2ed5432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:9c:66:60:f3:4b:ce:ae:81:f1:a9:db:9a:09:bd:d1:a8:
         76:71:5a:4c:a8:13:ef:23:b2:05:56:11:d2:d2:fd:0f:2d:bf:
         74:d5:fc:a1:b9:71:6b:4c:78:20:45:25:fe:c6:00:c1:7f:56:
         6b:df:7e:fc:4f:79:76:17:e0:83:79:4a:d6:2c:aa:11:31:0c:
         ad:df:64:fc:2f:21:73:18:67:bb:f9:89:24:1f:20:fb:ae:8c:
         d8:7e:8c:30:e7:79:38:b7:a5:b7:ab:03:73:09:59:9b:15:7a:
         a0:76:a8:51:e0:1a:34:17:08:49:e1:67:80:db:d9:93:b2:81:
         e4:2a:8c:dd:54:d8:7a:43:f1:e1:35:ab:61:f6:5e:8f:5f:cd:
         07:33:23:d7:62:84:c8:0d:55:72:0e:6b:d4:4d:27:ec:8b:8a:
         de:dc:4a:24:6a:b6:fe:db:29:05:51:c8:f7:f5:e2:e2:2b:f4:
         dd:fc:d2:e5:00:30:28:11:3a:e7:7d:22:fb:10:e5:6d:33:10:
         d2:ef:f6:f8:6a:94:58:ed:49:01:59:2e:dd:df:2b:9f:3b:38:
         0a:cf:36:6b:ee:46:d0:d1:a0:6e:95:6e:a0:a9:27:08:a1:7a:
         63:56:be:cc:85:ab:85:9f:92:cb:b9:32:f4:12:72:cc:8f:28:
         ae:6b:e6:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC0Db4fZ8w0Uqpo5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIyMTIxMzE4MjcwOVoXDTI1MDQzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTViYzNkZDYtZDQ0Yy00M2RmLWExNzEtMWM0MmYyZTkwMTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUxTiuVagNwYRkk2UVUG0RsmzgVPiPZKk0u2
wR1HGHzy08NT50JHR6V34ke7y+LFXDVT1VcuBhv3hlQBOK+hfnAcGmMivl1BWCRc
R4UUINq7HftpIiNEmzYhi9A38psh3eH+a5aySe3019NIc9UFgnl6die7g1jsClqM
UC0moDruemK3n7Smzk7WBXydSnRosNEp1G3zKxa7aJbl4nkLDdJDjlB+yvhGwB9i
sqCN7zmiApKH1EhoL/ezEH0ONJjr6dEn8V+jemnB6z1Ip4MoCnnQKamNUYkna1oz
XZnNaV7ur/kTg3s9mrbaYMfSTUb64R1f1LIxZPXqh9P2xZZslwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOs4bFfE05BQb6QP7fgPmRQ9cptMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYjlmMjU2ZmYtYmVhNC0z
YjZmLWI1NDktMzAzYmEyZWQ1NDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Hq7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIP2nGZg80vOroHxqduaCb3RqHZxWkyoE+8jsgVWEdLS/Q8tv3TV/KG5
cWtMeCBFJf7GAMF/VmvffvxPeXYX4IN5StYsqhExDK3fZPwvIXMYZ7v5iSQfIPuu
jNh+jDDneTi3pberA3MJWZsVeqB2qFHgGjQXCEnhZ4Db2ZOygeQqjN1U2HpD8eE1
q2H2Xo9fzQczI9dihMgNVXIOa9RNJ+yLit7cSiRqtv7bKQVRyPf14uIr9N380uUA
MCgROud9IvsQ5W0zENLv9vhqlFjtSQFZLt3fK587OArPNmvuRtDRoG6VbqCpJwih
emNWvsyFq4Wfksu5MvQScsyPKK5r5jY=
-----END CERTIFICATE-----