Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/695067a7-d3db-3f73-9333-b0a13ad5e287.roa
File:                     695067a7-d3db-3f73-9333-b0a13ad5e287.roa (raw, json)
Hash identifier:          6ONY1kalQvtmh9Dtptch94Um9g0bILcLGnDttymPcco=
Subject key identifier:   35:56:14:82:9A:A0:5C:73:E0:EC:6F:68:6A:A5:77:99:4E:0D:B9:9B
Certificate issuer:       /CN=687d1923-22fe-4744-9984-8ca387a57cf3
Certificate serial:       010D0C9F4328583F81A014940ADE2F3A15D0E700
Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/695067a7-d3db-3f73-9333-b0a13ad5e287.roa
Signing time:             Mon 03 Oct 2022 16:15:08 +0000
ROA not before:           Mon 03 Oct 2022 16:15:08 +0000
ROA not after:            Fri 10 Jan 2025 05:00:00 +0000
asID:                     205534
IP address blocks:        63.141.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:81:a0:14:94:0a:de:2f:3a:15:d0:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3
        Validity
            Not Before: Oct  3 16:15:08 2022 GMT
            Not After : Jan 10 05:00:00 2025 GMT
        Subject: CN=54f4eee4-80cb-4378-8ddd-2458b063c809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:16:6f:e7:ae:e9:01:f5:2f:69:8c:70:27:
                    80:59:c3:f1:33:e8:ed:a9:54:60:7b:0d:84:1a:32:
                    6d:e3:04:3b:ce:0d:bf:bc:8d:16:af:ac:e3:a2:36:
                    ed:01:4c:ad:fc:da:75:4f:d4:c0:2d:c2:5e:f1:77:
                    5e:c6:dc:5b:99:04:da:c5:44:d8:22:05:0f:5e:ae:
                    13:3e:20:a1:52:4e:8a:35:21:71:15:e6:00:56:95:
                    a0:ef:15:d6:ac:d3:d6:69:d5:0d:17:ec:13:16:07:
                    f4:0e:80:a7:9e:93:1d:be:e6:05:0c:cf:3d:77:b6:
                    de:63:ff:01:a0:05:c0:8c:27:e1:28:45:78:47:60:
                    67:86:d6:bd:e3:1c:7e:c4:a3:36:3a:2c:f7:ff:db:
                    c5:fe:f1:e0:50:2d:f6:bf:ba:87:7f:4f:d9:a9:5f:
                    37:bb:1f:62:af:8f:f7:cc:f2:07:56:4e:38:0b:42:
                    12:e0:9b:bc:bf:a3:d3:df:4a:15:16:bc:d2:3f:8b:
                    59:bb:43:ec:df:f9:e5:b2:66:b4:2d:66:b4:ed:42:
                    d1:14:6a:65:c4:4c:62:37:05:2a:c3:7f:62:00:8d:
                    0a:27:0d:91:50:65:56:78:51:ef:cf:6b:a0:35:ec:
                    66:9a:db:ed:04:5e:90:6c:eb:d0:bd:02:10:d4:3c:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:14:82:9A:A0:5C:73:E0:EC:6F:68:6A:A5:77:99:4E:0D:B9:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/695067a7-d3db-3f73-9333-b0a13ad5e287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl

            X509v3 Authority Key Identifier:
                keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:65:e0:e1:06:71:05:cc:41:1d:b2:a1:87:2d:7e:26:9d:98:
         4c:fb:2c:c6:9c:e4:ab:4b:03:94:5c:fd:68:52:86:c0:05:66:
         b9:ec:74:f7:42:54:6a:8d:54:ee:90:2a:42:76:37:8e:e1:0c:
         49:60:5f:ca:4e:6a:5d:c4:18:20:41:33:da:a5:6d:41:bf:e4:
         1a:91:58:b2:1b:4d:e6:a6:80:58:67:35:21:bb:33:88:e8:e8:
         02:b2:7a:e8:8e:f5:a2:12:a4:70:dd:83:19:21:bf:71:35:22:
         dc:54:fb:13:de:ec:40:78:7e:d1:c8:62:fd:bb:e5:09:9c:47:
         01:72:05:b0:15:43:b1:32:a1:dc:36:8b:84:fb:cc:01:ec:cf:
         e1:63:03:09:89:3a:98:a9:22:45:80:98:81:1e:56:44:d5:05:
         87:01:b0:34:0f:4b:ef:96:2b:b9:bc:d4:e6:11:7e:48:47:4f:
         4e:c1:3a:b2:89:69:81:11:f6:d2:eb:d6:3a:ab:bb:62:6a:00:
         f9:44:97:a5:da:fe:24:04:b9:11:70:8b:89:c4:7a:6d:02:3a:
         e9:4b:b9:a2:98:fd:81:c1:8c:17:47:68:8a:af:3f:b5:b9:41:
         2b:62:20:4f:16:fb:e2:d1:8b:5e:e8:37:df:e0:de:c7:e5:a1:
         56:e7:d7:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+BoBSUCt4vOhXQ5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3ZDE5MjMtMjJmZS00NzQ0LTk5ODQtOGNhMzg3YTU3
Y2YzMB4XDTIyMTAwMzE2MTUwOFoXDTI1MDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTRmNGVlZTQtODBjYi00Mzc4LThkZGQtMjQ1OGIwNjNjODA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM0Wb+eu6QH1L2mMcCeAWcPxM+jtqVRgew2E
GjJt4wQ7zg2/vI0Wr6zjojbtAUyt/Np1T9TALcJe8XdextxbmQTaxUTYIgUPXq4T
PiChUk6KNSFxFeYAVpWg7xXWrNPWadUNF+wTFgf0DoCnnpMdvuYFDM89d7beY/8B
oAXAjCfhKEV4R2Bnhta94xx+xKM2Oiz3/9vF/vHgUC32v7qHf0/ZqV83ux9ir4/3
zPIHVk44C0IS4Ju8v6PT30oVFrzSP4tZu0Ps3/nlsma0LWa07ULRFGplxExiNwUq
w39iAI0KJw2RUGVWeFHvz2ugNexmmtvtBF6QbOvQvQIQ1DzbtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVWFIKaoFxz4OxvaGqld5lODbmbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODdk
MTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdhNTdjZjMvNjk1MDY3YTctZDNkYi0z
ZjczLTkzMzMtYjBhMTNhZDVlMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg3ZDE5MjMtMjJmZS00NzQ0LTk5
ODQtOGNhMzg3YTU3Y2YzLzY4N2QxOTIzLTIyZmUtNDc0NC05OTg0LThjYTM4N2E1
N2NmMy5jcmwwHwYDVR0jBBgwFoAUuhD3Zvx04hITn+zVuCQ4jiO2RpEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2Ez
ODdhNTdjZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP40mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxl4OEGcQXMQR2yoYctfiadmEz7LMac5KtLA5Rc/WhShsAFZrnsdPdC
VGqNVO6QKkJ2N47hDElgX8pOal3EGCBBM9qlbUG/5BqRWLIbTeamgFhnNSG7M4jo
6AKyeuiO9aISpHDdgxkhv3E1ItxU+xPe7EB4ftHIYv275QmcRwFyBbAVQ7Eyodw2
i4T7zAHsz+FjAwmJOpipIkWAmIEeVkTVBYcBsDQPS++WK7m81OYRfkhHT07BOrKJ
aYER9tLr1jqru2JqAPlEl6Xa/iQEuRFwi4nEem0COulLuaKY/YHBjBdHaIqvP7W5
QStiIE8W++LRi17oN9/g3sfloVbn1zQ=
-----END CERTIFICATE-----