Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/593f3227-6e2a-3eaa-926d-2dd6ffc1e42c.roa
File:                     593f3227-6e2a-3eaa-926d-2dd6ffc1e42c.roa (raw, json)
Hash identifier:          jiig99z1VdvfwzGPK9YG9S9aOKoqTma0l41n52+b6CI=
Subject key identifier:   97:FF:A6:6B:AD:FC:93:FB:B9:AB:09:10:C6:71:FC:19:4C:CB:CA:94
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583F3EEB4D42894709334F4230E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/593f3227-6e2a-3eaa-926d-2dd6ffc1e42c.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Mon 16 Dec 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        142.250.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:eb:4d:42:89:47:09:33:4f:42:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Dec 16 05:00:00 2024 GMT
        Subject: CN=1131d8e6-46d8-41a1-a0cd-f72cd8565cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:51:21:f1:c7:03:bb:cf:76:f0:e6:4a:32:
                    fe:8f:fc:13:f9:b2:dc:d0:ae:b5:b1:c1:8c:c6:d5:
                    ec:94:7e:33:f2:7a:a3:02:ae:72:e5:cc:12:aa:5b:
                    2f:46:48:96:3a:a9:43:eb:fc:4e:9f:f9:cb:5d:21:
                    d0:80:20:18:cb:cb:f1:e7:b9:8d:55:58:4c:45:2b:
                    d2:39:36:90:d5:08:22:84:c7:6c:c5:b9:55:5f:3c:
                    b9:ff:84:75:4c:0d:e5:ae:a6:2a:1b:82:c0:70:f1:
                    7a:01:6d:8e:3e:29:d1:59:06:70:37:4b:54:b7:6f:
                    4e:10:01:71:ae:70:0e:e3:e6:76:3d:01:0b:a1:26:
                    28:90:5e:53:3d:50:a7:ac:d1:17:f2:a6:c8:ec:8a:
                    64:b6:ab:99:7e:e1:41:cc:ab:ea:9e:4d:9a:dc:31:
                    58:a4:6d:29:75:b2:af:a6:8b:3e:85:20:e4:ed:eb:
                    9e:30:ee:00:0a:5c:3b:aa:82:27:e0:cd:d5:f9:84:
                    fc:1d:67:49:93:be:88:9f:39:8f:96:94:26:45:83:
                    fb:5c:7e:74:36:29:90:d8:cf:8d:97:b9:2c:7c:b8:
                    22:5b:fc:35:c8:d9:aa:e9:5e:32:e9:65:47:2e:e8:
                    5a:81:59:89:ba:8c:79:e1:ff:a9:c0:96:ee:52:7d:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FF:A6:6B:AD:FC:93:FB:B9:AB:09:10:C6:71:FC:19:4C:CB:CA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/593f3227-6e2a-3eaa-926d-2dd6ffc1e42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ab:34:af:52:0a:04:29:84:c3:33:4d:41:f1:f2:81:4c:15:
         0a:04:ba:d4:11:48:eb:c9:96:49:f9:c3:4e:6e:13:a7:57:46:
         75:ce:56:c0:4f:1a:f7:8d:d2:07:6d:d8:cd:e5:ea:7c:30:c0:
         a4:2b:4b:59:f6:d2:46:4b:db:1c:d4:4f:23:6b:85:95:17:30:
         77:73:96:fb:16:94:57:c9:d8:52:5a:dc:09:7c:a3:7f:58:55:
         28:d3:1c:95:11:00:37:f0:a5:81:23:41:13:07:92:a0:b4:c3:
         4c:52:b9:24:d3:54:cc:86:cd:17:11:5b:19:db:82:0b:0c:f8:
         1a:c9:b0:2d:9e:44:12:e1:df:8d:ac:1a:94:3c:4a:28:be:f1:
         0e:4a:1d:af:44:87:6e:0b:78:0c:9a:6b:e5:bd:18:9a:24:47:
         bf:72:45:79:0f:da:29:91:1f:97:b3:d3:42:56:57:59:77:3b:
         eb:55:53:e7:34:32:2b:12:1b:81:b0:6e:05:ed:92:57:13:c6:
         a8:52:68:a2:f3:a6:1d:0f:eb:79:91:18:70:11:b9:46:1d:21:
         6a:de:f0:20:80:d9:49:3c:f1:7c:8a:7b:f4:88:1d:e3:33:a7:
         90:b8:17:d3:d8:12:e8:a6:87:a4:e8:ff:0b:e6:fa:e6:39:be:
         44:61:41:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8+601CiUcJM09CMOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIyMDkxMzEyMDAwMFoXDTI0MTIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
MTEzMWQ4ZTYtNDZkOC00MWExLWEwY2QtZjcyY2Q4NTY1Y2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVJRIfHHA7vPdvDmSjL+j/wT+bLc0K61scGM
xtXslH4z8nqjAq5y5cwSqlsvRkiWOqlD6/xOn/nLXSHQgCAYy8vx57mNVVhMRSvS
OTaQ1QgihMdsxblVXzy5/4R1TA3lrqYqG4LAcPF6AW2OPinRWQZwN0tUt29OEAFx
rnAO4+Z2PQELoSYokF5TPVCnrNEX8qbI7IpktquZfuFBzKvqnk2a3DFYpG0pdbKv
pos+hSDk7eueMO4AClw7qoIn4M3V+YT8HWdJk76InzmPlpQmRYP7XH50NimQ2M+N
l7ksfLgiW/w1yNmq6V4y6WVHLuhagVmJuox54f+pwJbuUn1n1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJf/pmut/JP7uasJEMZx/BlMy8qUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTkzZjMyMjctNmUyYS0z
ZWFhLTkyNmQtMmRkNmZmYzFlNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOrNK9SCgQphMMzTUHx8oFMFQoEutQRSOvJlkn5w05uE6dXRnXOVsBP
GveN0gdt2M3l6nwwwKQrS1n20kZL2xzUTyNrhZUXMHdzlvsWlFfJ2FJa3Al8o39Y
VSjTHJURADfwpYEjQRMHkqC0w0xSuSTTVMyGzRcRWxnbggsM+BrJsC2eRBLh342s
GpQ8Sii+8Q5KHa9Eh24LeAyaa+W9GJokR79yRXkP2imRH5ez00JWV1l3O+tVU+c0
MisSG4GwbgXtklcTxqhSaKLzph0P63mRGHARuUYdIWre8CCA2Uk88XyKe/SIHeMz
p5C4F9PYEuimh6To/wvm+uY5vkRhQR8=
-----END CERTIFICATE-----