Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa
File:                     b0cfe959-a4d1-3bea-802f-61976aba045a.roa (raw, json)
Hash identifier:          qZYSncl5HUhbgmEd8UZ03ikwhXZINZFqoDKUzjOblLU=
Subject key identifier:   01:24:82:11:9B:51:8C:B3:BC:5E:DF:22:29:BE:15:4D:E6:CB:03:9F
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F43285843F7BE4D67D205695D246410C8
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa
Signing time:             Wed 22 Nov 2023 02:00:17 +0000
ROA not before:           Wed 22 Nov 2023 02:00:17 +0000
ROA not after:            Tue 20 Feb 2024 02:00:17 +0000
asID:                     1239
IP address blocks:        207.170.168.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f7:be:4d:67:d2:05:69:5d:24:64:10:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Nov 22 02:00:17 2023 GMT
            Not After : Feb 20 02:00:17 2024 GMT
        Subject: CN=3675ab56-9ee4-4a2c-8052-553bc017c397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:18:d1:a2:43:6c:77:c2:38:56:cb:4e:e8:
                    0e:8a:38:6d:99:c8:f8:b9:67:96:cf:f0:7f:e4:60:
                    15:74:68:3d:bf:6f:2a:c9:27:79:fe:f0:92:d4:b5:
                    35:33:cc:e8:ae:d6:e4:ef:6c:f9:2c:9c:ae:19:c6:
                    3d:e7:c9:e8:2b:dd:4e:90:d8:74:ff:28:ce:68:d1:
                    9f:a5:24:9c:78:fa:50:68:ed:5f:8f:0b:07:a8:48:
                    ad:31:bd:d3:29:a0:2b:62:94:9d:c1:bf:51:38:ef:
                    fb:b3:93:b6:81:43:f7:32:b0:fa:4c:06:7f:00:c2:
                    e8:29:32:ee:24:ed:18:3d:91:38:be:2b:82:26:3a:
                    d5:6e:50:e9:30:6b:92:f4:20:cb:4a:a8:9e:5d:62:
                    ae:ea:27:1f:72:e1:1d:9b:bb:7d:0f:ef:22:02:d5:
                    ac:6f:63:ec:80:02:b6:cb:af:d2:c1:c0:ee:b1:6c:
                    cd:7d:1e:77:bb:f3:21:5b:c5:c3:1a:2e:2f:38:27:
                    ec:56:4a:db:d8:2e:f9:ae:84:12:ff:f0:28:90:5d:
                    8c:37:a8:7e:73:22:80:1e:ee:ce:df:8b:33:fc:4d:
                    7e:13:c0:53:cb:45:7d:26:e1:01:ee:13:44:1e:ba:
                    80:69:54:63:73:00:d9:44:a6:c5:49:04:40:06:a8:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:24:82:11:9B:51:8C:B3:BC:5E:DF:22:29:BE:15:4D:E6:CB:03:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:2f:89:3f:f5:bf:b3:95:d2:db:b0:68:3a:86:5f:1b:32:
         a2:c9:9e:a5:cf:59:a0:a2:c5:1e:39:3f:4e:09:da:84:41:fc:
         71:a0:83:1c:70:e1:b1:12:c1:07:b4:d7:fd:88:30:95:87:f3:
         9e:c0:c7:d5:e5:9d:a3:4f:8e:f4:eb:d1:47:5e:c7:2e:e4:c0:
         51:ab:30:00:66:16:60:96:85:07:e2:88:f5:d6:8f:c7:67:18:
         44:8a:5d:e1:d3:88:b4:90:dc:cd:bf:3b:0c:d0:ac:bd:77:8d:
         88:e6:f8:7c:c9:f4:6e:55:5f:48:65:75:0b:6a:2c:29:3d:aa:
         43:44:5b:40:63:f7:ba:7d:ba:cd:b0:03:44:5b:43:18:0c:64:
         87:b0:5f:73:b8:cd:e6:91:c2:9d:c5:56:38:a0:af:d7:bb:c5:
         0b:73:4e:37:8e:b6:d0:57:cf:00:4b:34:d9:d0:a7:a3:fe:40:
         b7:08:bd:c9:2e:5d:61:2c:c8:cf:15:a3:20:7e:38:ac:98:7e:
         eb:41:b7:53:5c:66:f3:d7:18:b7:cf:96:a2:38:a2:6c:56:04:
         ce:09:5b:89:07:ef:11:50:9d:32:d6:bd:b0:0d:a8:65:c9:5b:
         45:b9:05:e3:62:4b:8e:ee:90:88:58:50:7b:72:07:8b:ea:10:
         06:2b:d6:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEP3vk1n0gVpXSRkEMgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm
YTA0MB4XDTIzMTEyMjAyMDAxN1oXDTI0MDIyMDAyMDAxN1owLzEtMCsGA1UEAxMk
MzY3NWFiNTYtOWVlNC00YTJjLTgwNTItNTUzYmMwMTdjMzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tkY0aJDbHfCOFbLTugOijhtmcj4uWeWz/B/
5GAVdGg9v28qySd5/vCS1LU1M8zortbk72z5LJyuGcY958noK91OkNh0/yjOaNGf
pSScePpQaO1fjwsHqEitMb3TKaArYpSdwb9ROO/7s5O2gUP3MrD6TAZ/AMLoKTLu
JO0YPZE4viuCJjrVblDpMGuS9CDLSqieXWKu6icfcuEdm7t9D+8iAtWsb2PsgAK2
y6/SwcDusWzNfR53u/MhW8XDGi4vOCfsVkrb2C75roQS//AokF2MN6h+cyKAHu7O
34sz/E1+E8BTy0V9JuEB7hNEHrqAaVRjcwDZRKbFSQRABqhv9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAEkghGbUYyzvF7fIim+FU3mywOfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi
NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvYjBjZmU5NTktYTRkMS0z
YmVhLTgwMmYtNjE5NzZhYmEwNDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw
MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi
ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1
ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6qoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALLmL4k/9b+zldLbsGg6hl8bMqLJnqXPWaCixR45P04J2oRB/HGggxxw
4bESwQe01/2IMJWH857Ax9XlnaNPjvTr0Udexy7kwFGrMABmFmCWhQfiiPXWj8dn
GESKXeHTiLSQ3M2/OwzQrL13jYjm+HzJ9G5VX0hldQtqLCk9qkNEW0Bj97p9us2w
A0RbQxgMZIewX3O4zeaRwp3FVjigr9e7xQtzTjeOttBXzwBLNNnQp6P+QLcIvcku
XWEsyM8VoyB+OKyYfutBt1NcZvPXGLfPlqI4omxWBM4JW4kH7xFQnTLWvbANqGXJ
W0W5BeNiS47ukIhYUHtyB4vqEAYr1jY=
-----END CERTIFICATE-----