Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76722922-8dfa-382f-b93a-d1e0d108669f.roa
File:                     76722922-8dfa-382f-b93a-d1e0d108669f.roa (raw, json)
Hash identifier:          5sEltJGwLknEVyWKtazV/SLIKm5nNHg8/uocAVpC2Iw=
Subject key identifier:   9D:7A:42:8C:89:CC:AE:7C:64:98:29:06:D9:8C:C3:C2:A2:86:06:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844193E8EFCC513308E88496980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76722922-8dfa-382f-b93a-d1e0d108669f.roa
Signing time:             Mon 04 Dec 2023 02:00:15 +0000
ROA not before:           Mon 04 Dec 2023 02:00:15 +0000
ROA not after:            Sun 03 Mar 2024 02:00:15 +0000
asID:                     13650
IP address blocks:        64.62.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:19:3e:8e:fc:c5:13:30:8e:88:49:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  4 02:00:15 2023 GMT
            Not After : Mar  3 02:00:15 2024 GMT
        Subject: CN=ed22e6c2-0747-4dec-8efa-6ffca0ca935d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:22:d1:d9:f5:ab:d0:6e:ca:5b:98:c4:9c:
                    cc:f3:c3:8a:3e:3f:27:44:69:51:31:40:e7:0a:27:
                    f3:55:8c:8a:86:3d:c2:17:ae:11:10:6b:81:35:01:
                    26:42:18:de:8a:9c:01:26:70:6a:a8:20:d7:79:56:
                    26:73:25:2a:fb:0a:70:6c:91:c3:24:a6:80:8d:94:
                    fb:fb:04:dd:2e:e2:56:cd:28:86:21:ae:86:07:a8:
                    83:76:12:14:45:c4:96:98:c0:bc:ad:01:80:b4:3c:
                    43:72:87:f1:ad:f9:0f:4b:da:ae:65:2c:d7:54:ae:
                    a1:dd:a4:44:45:3a:b0:0b:2e:b8:97:de:48:c6:ed:
                    51:3d:6e:88:6a:e6:00:74:2e:81:c0:84:9e:36:8b:
                    8e:a6:39:40:91:a2:8e:0b:28:a5:29:92:43:3a:00:
                    41:f7:b0:92:0b:cf:26:32:bd:e2:65:81:79:eb:fd:
                    7e:76:7c:95:e0:25:bf:64:0f:76:32:9d:dc:13:7d:
                    5c:f8:1f:ea:8a:55:2f:f5:03:e8:f5:30:da:8a:b3:
                    5f:ce:7e:5b:d4:e9:71:87:4e:5d:d7:bf:8c:1e:2f:
                    52:fc:db:cd:0a:c7:53:61:40:14:3f:3a:e2:c9:0c:
                    42:fe:03:28:f5:e0:d1:04:e2:30:ef:ab:84:02:c2:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:42:8C:89:CC:AE:7C:64:98:29:06:D9:8C:C3:C2:A2:86:06:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76722922-8dfa-382f-b93a-d1e0d108669f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:93:55:f9:3c:e9:6c:75:90:42:5f:54:0a:8d:d7:9f:8f:
         62:f4:e1:06:22:10:83:3a:eb:8c:0b:27:fe:30:2b:95:15:fd:
         0a:31:63:6e:8d:8f:da:35:66:c8:14:75:33:4a:e9:b1:0c:d6:
         1c:49:b5:ec:22:87:85:e8:33:aa:eb:a1:64:5f:58:c2:6d:d0:
         e6:ee:29:2c:d7:0b:f0:bb:90:27:bc:d6:81:36:18:a7:a7:74:
         31:44:f6:f1:36:18:c3:1f:5d:30:15:36:e5:98:ef:e0:63:0f:
         46:97:de:a9:92:e7:40:12:8c:01:0e:81:54:22:d4:b7:84:8a:
         c1:58:da:96:a4:db:fa:e6:2b:11:b5:0e:b2:5a:e8:07:5b:df:
         55:cf:48:d4:18:1e:28:a5:7b:2e:1c:46:91:eb:e6:92:cb:57:
         ba:db:34:24:f9:e7:53:2c:c3:e7:cd:52:cf:1d:1a:d3:ef:84:
         2e:e0:ba:31:eb:b7:f7:cc:e8:73:b3:ef:5f:79:62:2d:53:95:
         66:a2:ab:b8:d4:f2:1a:c9:05:27:28:19:3d:f7:91:32:1f:35:
         5e:41:d3:64:e9:05:57:01:e6:a9:9d:34:27:5d:99:5e:14:13:
         d5:42:0c:0c:67:1a:2e:01:be:98:fc:14:2a:d1:c1:c5:38:85:
         57:06:6c:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQZPo78xRMwjohJaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMTIwNDAyMDAxNVoXDTI0MDMwMzAyMDAxNVowLzEtMCsGA1UEAxMk
ZWQyMmU2YzItMDc0Ny00ZGVjLThlZmEtNmZmY2EwY2E5MzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Poi0dn1q9BuyluYxJzM88OKPj8nRGlRMUDn
CifzVYyKhj3CF64REGuBNQEmQhjeipwBJnBqqCDXeVYmcyUq+wpwbJHDJKaAjZT7
+wTdLuJWzSiGIa6GB6iDdhIURcSWmMC8rQGAtDxDcofxrfkPS9quZSzXVK6h3aRE
RTqwCy64l95Ixu1RPW6IauYAdC6BwISeNouOpjlAkaKOCyilKZJDOgBB97CSC88m
Mr3iZYF56/1+dnyV4CW/ZA92Mp3cE31c+B/qilUv9QPo9TDairNfzn5b1Olxh05d
17+MHi9S/NvNCsdTYUAUPzriyQxC/gMo9eDRBOIw76uEAsIChwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ16QoyJzK58ZJgpBtmMw8KihgY4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzY3MjI5MjItOGRmYS0z
ODJmLWI5M2EtZDFlMGQxMDg2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1ek1X5POlsdZBCX1QKjdefj2L04QYiEIM664wLJ/4wK5UV/QoxY26N
j9o1ZsgUdTNK6bEM1hxJtewih4XoM6rroWRfWMJt0ObuKSzXC/C7kCe81oE2GKen
dDFE9vE2GMMfXTAVNuWY7+BjD0aX3qmS50ASjAEOgVQi1LeEisFY2pak2/rmKxG1
DrJa6Adb31XPSNQYHiiley4cRpHr5pLLV7rbNCT551Msw+fNUs8dGtPvhC7gujHr
t/fM6HOz7195Yi1TlWaiq7jU8hrJBScoGT33kTIfNV5B02TpBVcB5qmdNCddmV4U
E9VCDAxnGi4Bvpj8FCrRwcU4hVcGbOQ=
-----END CERTIFICATE-----