Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/15536333-e2d7-33ee-bc2f-0a1500eeae79.roa
File:                     15536333-e2d7-33ee-bc2f-0a1500eeae79.roa (raw, json)
Hash identifier:          9x6tzKQJvHw8lL5lYtP5Z2cGPBNs+g65bwunExu0rvc=
Subject key identifier:   7D:7A:77:27:CF:A2:25:DD:B9:F2:8E:D8:46:3B:AF:32:FD:4E:CA:E9
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285843F81023876ADD299C4E127300
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/15536333-e2d7-33ee-bc2f-0a1500eeae79.roa
Signing time:             Wed 22 Nov 2023 04:45:11 +0000
ROA not before:           Wed 22 Nov 2023 04:45:11 +0000
ROA not after:            Tue 20 Feb 2024 04:45:11 +0000
asID:                     149242
IP address blocks:        103.49.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f8:10:23:87:6a:dd:29:9c:4e:12:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Nov 22 04:45:11 2023 GMT
            Not After : Feb 20 04:45:11 2024 GMT
        Subject: CN=7381b144-4f10-45b6-a056-63b267495778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:32:90:b5:56:0b:51:c5:2f:4a:78:e4:eb:
                    b5:89:54:08:50:29:b9:f6:ae:38:aa:34:1f:07:e8:
                    b3:28:58:65:e3:c8:bd:67:4e:f3:cb:c0:6f:c0:54:
                    bd:f2:31:9f:1f:29:e5:d3:62:30:02:43:92:90:26:
                    95:be:2f:26:27:91:24:ff:55:31:bf:6b:5d:85:b0:
                    25:d7:ff:2c:a8:a4:fd:a4:e2:9a:3f:78:2d:d9:d8:
                    a0:d4:f5:30:18:fe:57:38:65:1b:5f:10:8b:0a:07:
                    44:4d:28:b6:f8:6c:8e:6c:84:40:12:9b:8c:92:2f:
                    5d:e9:22:d2:e0:59:67:ba:94:8e:88:57:34:b4:8f:
                    37:2f:e2:64:70:5e:73:77:48:ef:21:2b:be:24:52:
                    c1:0b:87:42:bc:bd:b5:89:88:58:bd:34:c1:71:21:
                    e1:55:1f:af:86:9e:eb:3f:d0:e8:15:e9:5b:7a:d1:
                    13:90:b1:f4:8b:38:14:ca:93:71:b7:d8:68:ad:0e:
                    61:9a:c5:4c:54:16:40:7e:ce:e0:87:b0:cd:62:ff:
                    5f:4c:e3:79:41:88:17:1c:bc:d3:ac:94:58:d1:23:
                    e5:92:d1:b0:82:8f:f5:3c:1d:d0:02:b4:11:2a:9c:
                    25:65:64:52:7c:52:6e:27:95:58:f3:73:6c:a1:25:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7A:77:27:CF:A2:25:DD:B9:F2:8E:D8:46:3B:AF:32:FD:4E:CA:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/15536333-e2d7-33ee-bc2f-0a1500eeae79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:0c:2f:9c:45:a4:0d:99:5f:92:12:1f:2a:c4:51:36:20:
         ab:6e:81:ae:65:42:fa:f5:85:b0:56:b2:a5:e4:b9:f7:96:e2:
         26:35:ea:66:34:f0:0d:c8:17:eb:b7:56:91:e5:77:07:78:98:
         ba:55:69:54:b9:a0:7e:7e:7b:dd:cf:f0:03:b9:cc:7d:5d:f5:
         b0:3a:1a:57:32:c3:c4:80:aa:8f:56:a6:76:3a:a3:ca:8b:06:
         c0:43:d1:e9:6e:ac:fb:7b:0e:84:13:dc:6c:de:b5:54:ac:f6:
         0a:55:03:07:39:ea:93:49:8e:fa:b1:20:81:c0:53:00:a3:a8:
         46:6d:24:4a:c2:20:7b:26:52:3a:37:09:b1:23:33:35:9b:ca:
         7f:fd:cd:25:c3:6a:e5:23:0e:d2:e6:36:83:53:ed:2d:67:f5:
         71:1b:b8:1f:62:47:f6:f2:9b:41:e1:1f:68:0c:30:7d:15:09:
         c1:b7:b4:6a:e0:57:34:a4:99:dd:cd:58:af:4f:a9:03:0f:9b:
         bd:b7:ec:7c:1e:26:04:46:f9:91:7d:a3:da:8b:4b:52:3e:58:
         45:9c:76:54:5e:cf:c4:2a:ae:e9:c6:c8:8b:fa:e1:60:ea:9d:
         c5:8e:82:ac:29:d3:e4:f5:00:d0:52:f5:86:ef:e1:c8:45:72:
         7c:43:f8:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEP4ECOHat0pnE4ScwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTIzMTEyMjA0NDUxMVoXDTI0MDIyMDA0NDUxMVowLzEtMCsGA1UEAxMk
NzM4MWIxNDQtNGYxMC00NWI2LWEwNTYtNjNiMjY3NDk1Nzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwcykLVWC1HFL0p45Ou1iVQIUCm59q44qjQf
B+izKFhl48i9Z07zy8BvwFS98jGfHynl02IwAkOSkCaVvi8mJ5Ek/1Uxv2tdhbAl
1/8sqKT9pOKaP3gt2dig1PUwGP5XOGUbXxCLCgdETSi2+GyObIRAEpuMki9d6SLS
4FlnupSOiFc0tI83L+JkcF5zd0jvISu+JFLBC4dCvL21iYhYvTTBcSHhVR+vhp7r
P9DoFelbetETkLH0izgUypNxt9horQ5hmsVMVBZAfs7gh7DNYv9fTON5QYgXHLzT
rJRY0SPlktGwgo/1PB3QArQRKpwlZWRSfFJuJ5VY83NsoSUoOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH16dyfPoiXdufKO2EY7rzL9TsrpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvMTU1MzYzMzMtZTJkNy0z
M2VlLWJjMmYtMGExNTAwZWVhZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzGbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXJDC+cRaQNmV+SEh8qxFE2IKtuga5lQvr1hbBWsqXkufeW4iY16mY0
8A3IF+u3VpHldwd4mLpVaVS5oH5+e93P8AO5zH1d9bA6Glcyw8SAqo9WpnY6o8qL
BsBD0elurPt7DoQT3GzetVSs9gpVAwc56pNJjvqxIIHAUwCjqEZtJErCIHsmUjo3
CbEjMzWbyn/9zSXDauUjDtLmNoNT7S1n9XEbuB9iR/bym0HhH2gMMH0VCcG3tGrg
VzSkmd3NWK9PqQMPm7237HweJgRG+ZF9o9qLS1I+WEWcdlRez8QqrunGyIv64WDq
ncWOgqwp0+T1ANBS9Ybv4chFcnxD+Ks=
-----END CERTIFICATE-----