Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/ffafcfe1-8cc6-3b32-8708-49ee720979d7.roa
File:                     ffafcfe1-8cc6-3b32-8708-49ee720979d7.roa (raw, json)
Hash identifier:          dcYPuI24tvY5TLRGHRlGxfwV236OQiaF/MmUs5N7RoY=
Subject key identifier:   EC:FC:30:41:9B:36:FF:8F:70:3F:8A:22:73:89:99:47:20:CA:00:F4
Certificate issuer:       /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
Certificate serial:       010D0C9F4328583EE2CE2094E99F708613D94500
Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/ffafcfe1-8cc6-3b32-8708-49ee720979d7.roa
Signing time:             Thu 14 Apr 2022 03:28:59 +0000
ROA not before:           Thu 14 Apr 2022 03:28:59 +0000
ROA not after:            Thu 14 Nov 2024 05:00:00 +0000
asID:                     43431
IP address blocks:        216.146.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:ce:20:94:e9:9f:70:86:13:d9:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
        Validity
            Not Before: Apr 14 03:28:59 2022 GMT
            Not After : Nov 14 05:00:00 2024 GMT
        Subject: CN=3ea2ddff-d594-44fd-a67f-e1ba607f9c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:d5:0d:d8:9a:7a:f2:00:dd:f1:dd:b6:56:
                    6b:63:a3:6c:6b:4b:44:87:15:ef:5d:0a:36:de:c3:
                    6d:7d:8b:7c:9c:e5:dd:19:d3:df:17:d8:41:24:d9:
                    1f:ff:f1:e7:a4:5d:07:a7:3c:18:09:7c:e0:b0:ab:
                    c0:f3:85:c2:74:ca:ce:14:dc:b5:46:a0:c0:91:f4:
                    db:73:91:78:33:83:95:ef:ad:d1:3f:f4:97:8d:8a:
                    91:2c:fb:8f:2c:61:19:a4:4e:3b:b1:98:a4:1d:42:
                    81:93:09:9e:f3:c5:ac:24:85:85:f0:b5:1b:13:7f:
                    42:a5:22:cf:56:a6:89:a0:14:bf:95:4e:87:c6:85:
                    e3:f7:f5:97:ae:9d:83:9c:a5:0a:fe:fa:d1:3a:07:
                    7a:78:8c:62:d2:dc:30:4e:33:9f:94:ca:20:38:07:
                    c9:e9:92:36:10:d3:b3:75:95:ef:c7:29:4a:10:57:
                    f7:ae:6d:49:78:31:7c:72:50:6d:de:5a:8d:fe:39:
                    8d:60:d2:f9:7a:0f:92:46:77:ad:6d:43:98:82:db:
                    c9:7c:4f:e0:c9:4d:74:bf:b8:65:f0:0c:45:3a:c3:
                    09:18:e2:af:39:4f:74:b8:e3:0f:e6:e3:4c:2e:0b:
                    51:78:27:8b:d9:3c:8e:e0:ce:52:98:2b:e7:a6:45:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FC:30:41:9B:36:FF:8F:70:3F:8A:22:73:89:99:47:20:CA:00:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/ffafcfe1-8cc6-3b32-8708-49ee720979d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl

            X509v3 Authority Key Identifier:
                keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:db:65:7c:41:a1:d2:99:92:99:c3:90:ed:7b:9a:76:af:8b:
         c4:3a:76:95:e8:98:a7:c4:69:41:3c:bf:58:26:04:24:c4:3f:
         f5:c0:a9:b6:f9:e5:56:e2:87:2d:cc:87:30:9f:af:92:7b:05:
         c2:88:72:57:29:0d:eb:54:c2:8f:f1:0b:24:3b:77:32:3d:aa:
         3b:67:4c:99:29:0e:37:b6:96:23:c3:3e:bc:56:f1:2b:01:3e:
         77:6e:51:fd:74:d4:8e:e6:76:5d:e5:12:69:ae:6b:29:23:8b:
         63:4d:76:9a:44:6b:65:25:ed:a0:74:1b:41:94:f5:62:37:ed:
         76:9b:27:8e:da:65:8e:25:0d:19:52:49:48:ec:6e:4b:5f:cd:
         a0:81:58:b2:bd:78:b7:49:b8:d4:a1:3c:0a:2b:74:39:0b:cf:
         46:98:36:e7:b4:03:9c:96:40:64:b7:9f:35:48:ab:4b:0f:32:
         db:01:64:e3:39:c2:c6:0b:6a:27:ed:41:09:61:5a:93:1d:1e:
         0e:d5:f7:cb:a9:d8:a3:6b:0a:63:70:ff:8f:09:1f:fd:a7:e3:
         51:ee:01:86:56:be:9d:1a:d6:98:84:2d:a0:e0:59:e5:60:61:
         92:8f:a0:3b:e6:8c:64:9d:f1:c6:a3:22:b7:78:d2:d5:0f:db:
         4a:76:5a:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7iziCU6Z9whhPZRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRlYzUyNTgtMDJkMy00YmQzLWFmNzYtNzQ5NmVjMDlj
YjE1MB4XDTIyMDQxNDAzMjg1OVoXDTI0MTExNDA1MDAwMFowLzEtMCsGA1UEAxMk
M2VhMmRkZmYtZDU5NC00NGZkLWE2N2YtZTFiYTYwN2Y5YzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM/VDdiaevIA3fHdtlZrY6Nsa0tEhxXvXQo2
3sNtfYt8nOXdGdPfF9hBJNkf//HnpF0HpzwYCXzgsKvA84XCdMrOFNy1RqDAkfTb
c5F4M4OV763RP/SXjYqRLPuPLGEZpE47sZikHUKBkwme88WsJIWF8LUbE39CpSLP
VqaJoBS/lU6HxoXj9/WXrp2DnKUK/vrROgd6eIxi0twwTjOflMogOAfJ6ZI2ENOz
dZXvxylKEFf3rm1JeDF8clBt3lqN/jmNYNL5eg+SRnetbUOYgtvJfE/gyU10v7hl
8AxFOsMJGOKvOU90uOMP5uNMLgtReCeL2TyO4M5SmCvnpkU14wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOz8MEGbNv+PcD+KInOJmUcgygD0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGVj
NTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2ZWMwOWNiMTUvZmZhZmNmZTEtOGNjNi0z
YjMyLTg3MDgtNDllZTcyMDk3OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRlYzUyNTgtMDJkMy00YmQzLWFm
NzYtNzQ5NmVjMDljYjE1LzY0ZWM1MjU4LTAyZDMtNGJkMy1hZjc2LTc0OTZlYzA5
Y2IxNS5jcmwwHwYDVR0jBBgwFoAUPybhTuBUS/bD4PIURUTqCyT71ScwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82NGVjNTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2
ZWMwOWNiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JISMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLbZXxBodKZkpnDkO17mnavi8Q6dpXomKfEaUE8v1gmBCTEP/XAqbb5
5Vbihy3MhzCfr5J7BcKIclcpDetUwo/xCyQ7dzI9qjtnTJkpDje2liPDPrxW8SsB
PnduUf101I7mdl3lEmmuaykji2NNdppEa2Ul7aB0G0GU9WI37XabJ47aZY4lDRlS
SUjsbktfzaCBWLK9eLdJuNShPAordDkLz0aYNue0A5yWQGS3nzVIq0sPMtsBZOM5
wsYLaiftQQlhWpMdHg7V98up2KNrCmNw/48JH/2n41HuAYZWvp0a1piELaDgWeVg
YZKPoDvmjGSd8cajIrd40tUP20p2WuA=
-----END CERTIFICATE-----