Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd5dcead-fe51-3a9d-a889-be0bcfe2198d.roa
File:                     bd5dcead-fe51-3a9d-a889-be0bcfe2198d.roa (raw, json)
Hash identifier:          EVUfkFySdAkzeuJoOQ8E4PlkC7mb0pqmxyfdbsIW1z4=
Subject key identifier:   9B:55:51:7C:32:EA:39:B8:D3:03:27:37:17:CD:28:91:4C:19:17:48
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845B5823E2115DC57E9085F2E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd5dcead-fe51-3a9d-a889-be0bcfe2198d.roa
Signing time:             Mon 29 Apr 2024 18:09:49 +0000
ROA not before:           Mon 29 Apr 2024 18:09:49 +0000
ROA not after:            Sun 28 Jul 2024 18:09:49 +0000
asID:                     139660
IP address blocks:        206.206.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 16:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b5:82:3e:21:15:dc:57:e9:08:5f:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 29 18:09:49 2024 GMT
            Not After : Jul 28 18:09:49 2024 GMT
        Subject: CN=d3ce4527-d157-463d-91bb-6fcadfd24431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b5:03:5c:79:bf:9e:6f:3f:9d:7d:5f:a3:20:
                    0e:a1:a3:df:26:6d:ea:e3:fd:ca:81:02:b9:80:61:
                    53:fd:24:87:ad:b4:79:2e:d9:6f:28:f0:dd:13:f6:
                    e5:b1:99:39:76:35:8f:a0:bb:b6:ad:ea:a3:a1:b9:
                    ac:5c:85:bc:8d:e9:79:a6:1c:7b:69:bd:fb:87:23:
                    7f:39:4f:53:c2:b6:38:ea:d3:26:88:c1:eb:7a:88:
                    43:ac:99:ea:a5:bc:bc:14:47:4e:d4:a7:42:73:f4:
                    46:8e:6f:ca:d3:af:2e:b7:27:66:79:fe:f6:87:e4:
                    d1:50:f2:33:ed:6c:c8:16:96:66:c4:dd:b0:e8:dc:
                    e4:9c:34:7a:59:59:0c:43:da:c2:e4:73:c2:5b:7c:
                    97:49:16:7e:27:b9:d1:1a:89:8b:a0:82:e2:53:a5:
                    aa:ad:bf:3e:d7:7b:a1:ae:56:30:20:96:4d:90:9d:
                    b1:2c:68:50:fd:9f:b9:9e:2a:42:0f:99:80:2b:bd:
                    ae:5e:cb:b3:df:f6:5c:38:12:79:53:42:c9:94:7c:
                    bb:2c:3e:db:b3:43:bc:ee:d8:80:00:9c:d0:76:e4:
                    43:43:e4:ec:2f:23:e6:04:65:c1:24:50:c2:b1:9f:
                    90:42:28:2b:33:0c:6d:c5:09:17:cb:e7:77:4d:01:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:55:51:7C:32:EA:39:B8:D3:03:27:37:17:CD:28:91:4C:19:17:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd5dcead-fe51-3a9d-a889-be0bcfe2198d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:44:74:03:6a:f4:83:29:0b:27:b5:e6:c4:e7:5e:9d:6b:f1:
         b3:22:04:1a:fe:80:8d:48:80:5b:85:a0:7a:8d:99:81:9d:97:
         7b:63:6f:af:5e:bd:2a:5b:9e:fc:95:a4:23:ab:5d:83:04:56:
         44:5a:a5:be:f8:93:e4:5d:bc:c0:4c:1f:1d:e6:66:5e:bf:a7:
         83:0a:e4:38:ea:94:4a:22:46:bc:e9:56:09:dd:28:9f:8f:7f:
         21:73:8f:80:7a:7b:fb:03:44:73:b6:2d:0a:cf:a0:7a:69:cf:
         c4:8a:ab:2c:37:62:e4:b8:7d:53:7a:52:6c:ed:75:23:3e:17:
         15:4f:b7:f6:ab:c1:a3:9f:f1:8b:fa:8b:65:48:0f:41:09:e6:
         fc:56:97:10:74:22:09:44:32:4a:6d:1c:b5:f4:6c:3c:d6:97:
         78:a7:8b:cb:d4:86:76:bc:53:69:93:f9:51:29:01:bd:b5:fd:
         d9:aa:87:25:eb:17:e8:8a:44:f0:c1:92:bb:44:ca:44:54:c0:
         ed:ed:e8:a8:46:20:4b:2f:c4:9f:34:f3:22:a8:86:eb:9f:2a:
         05:80:af:f7:a0:f9:a6:0e:6f:5a:ef:af:bf:51:9e:43:91:96:
         71:d9:e3:7c:49:46:61:9c:cb:61:f2:ed:ce:bb:df:96:41:98:
         f3:63:27:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW1gj4hFdxX6QhfLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDQyOTE4MDk0OVoXDTI0MDcyODE4MDk0OVowLzEtMCsGA1UEAxMk
ZDNjZTQ1MjctZDE1Ny00NjNkLTkxYmItNmZjYWRmZDI0NDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7UDXHm/nm8/nX1foyAOoaPfJm3q4/3KgQK5
gGFT/SSHrbR5LtlvKPDdE/blsZk5djWPoLu2reqjobmsXIW8jel5phx7ab37hyN/
OU9TwrY46tMmiMHreohDrJnqpby8FEdO1KdCc/RGjm/K068utydmef72h+TRUPIz
7WzIFpZmxN2w6NzknDR6WVkMQ9rC5HPCW3yXSRZ+J7nRGomLoILiU6Wqrb8+13uh
rlYwIJZNkJ2xLGhQ/Z+5nipCD5mAK72uXsuz3/ZcOBJ5U0LJlHy7LD7bs0O87tiA
AJzQduRDQ+TsLyPmBGXBJFDCsZ+QQigrMwxtxQkXy+d3TQHyvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtVUXwy6jm40wMnNxfNKJFMGRdIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmQ1ZGNlYWQtZmU1MS0z
YTlkLWE4ODktYmUwYmNmZTIxOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALNEdANq9IMpCye15sTnXp1r8bMiBBr+gI1IgFuFoHqNmYGdl3tjb69e
vSpbnvyVpCOrXYMEVkRapb74k+RdvMBMHx3mZl6/p4MK5DjqlEoiRrzpVgndKJ+P
fyFzj4B6e/sDRHO2LQrPoHppz8SKqyw3YuS4fVN6UmztdSM+FxVPt/arwaOf8Yv6
i2VID0EJ5vxWlxB0IglEMkptHLX0bDzWl3ini8vUhna8U2mT+VEpAb21/dmqhyXr
F+iKRPDBkrtEykRUwO3t6KhGIEsvxJ808yKohuufKgWAr/eg+aYOb1rvr79RnkOR
lnHZ43xJRmGcy2Hy7c6735ZBmPNjJ+g=
-----END CERTIFICATE-----