Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/181a1326-0aff-3e41-8dc4-697c3618ab1d.roa
File:                     181a1326-0aff-3e41-8dc4-697c3618ab1d.roa (raw, json)
Hash identifier:          xYFxuRzE/xp27px6tj82f25O7uSK0bNyXREmVADYsVU=
Subject key identifier:   C5:37:F5:02:EF:C3:15:43:A5:A7:CA:35:50:AC:29:57:72:1F:5E:8C
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285841F5F2B250DD03D809806DAD70
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/181a1326-0aff-3e41-8dc4-697c3618ab1d.roa
Signing time:             Mon 22 May 2023 01:00:17 +0000
ROA not before:           Mon 22 May 2023 01:00:17 +0000
ROA not after:            Sun 20 Aug 2023 01:00:17 +0000
asID:                     33072
IP address blocks:        2001:500:62::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f5:f2:b2:50:dd:03:d8:09:80:6d:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 22 01:00:17 2023 GMT
            Not After : Aug 20 01:00:17 2023 GMT
        Subject: CN=669ddac9-aa83-442b-b0bd-1a77946fe0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:22:e3:02:3e:9e:e6:f1:da:0d:43:16:1d:a2:
                    bc:40:be:d7:2c:04:94:b5:75:6c:0e:0f:d0:72:e4:
                    cc:df:10:b7:8e:a5:25:7a:d6:47:b9:7c:b6:1d:d9:
                    ce:d5:b6:61:ba:5b:ce:06:fa:b0:99:b7:8a:d6:2e:
                    ed:78:e8:f0:c0:fa:42:ad:b7:66:2b:6b:68:a6:2e:
                    51:f8:86:ae:0d:b9:e4:eb:66:0f:d6:d1:f7:fe:3c:
                    94:2a:3f:5d:a7:6f:b2:a0:fe:7b:54:e3:cf:5e:5f:
                    8c:04:48:e1:44:ce:7f:8e:ec:25:e4:54:b3:a5:37:
                    6d:dd:f2:fb:cc:61:be:e0:f7:dd:c2:45:f5:5a:32:
                    ad:45:6f:58:77:dc:a6:25:9c:fc:1b:db:37:1f:75:
                    2e:51:87:12:5b:e9:39:34:c0:f0:fe:2f:3b:cc:4c:
                    db:88:14:f7:9b:35:25:ac:cf:61:f2:60:84:d0:d5:
                    b6:12:19:cc:e7:a3:50:c9:01:a8:99:fd:bb:bf:56:
                    6b:8d:9e:e3:67:75:da:ba:fe:36:16:5f:cf:22:b4:
                    e4:6f:e5:95:e5:e4:2f:2b:76:3e:bd:70:31:f4:74:
                    98:76:4a:0d:98:d7:53:c4:69:38:64:d3:df:f6:62:
                    54:0f:8b:61:da:82:b2:ce:34:f9:9d:4b:37:82:91:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:37:F5:02:EF:C3:15:43:A5:A7:CA:35:50:AC:29:57:72:1F:5E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/181a1326-0aff-3e41-8dc4-697c3618ab1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:d1:dc:f1:03:2f:ba:b3:2f:7a:75:78:91:73:71:37:2a:
         af:3d:2b:1b:1a:58:3e:64:1d:7b:c9:ac:65:cc:25:5f:9f:70:
         e9:fa:44:7a:87:13:b1:82:78:c6:1a:30:fb:bc:d8:cc:cd:80:
         a8:57:8a:11:a6:4b:66:8a:8e:89:74:6c:46:87:7d:6d:01:1a:
         bd:0b:1d:8a:38:4c:db:4d:04:b3:8f:2b:d5:3a:a4:de:a5:c0:
         7a:e3:56:10:2c:9d:f9:5a:43:d5:78:ca:38:4c:95:f5:3e:2c:
         eb:73:20:98:f1:65:58:d9:c5:c6:2c:4b:23:49:24:05:5e:3b:
         4c:b5:64:15:18:11:dd:b2:85:1c:95:7c:bf:4f:a2:2a:35:79:
         d2:52:ef:c5:3c:43:c5:13:d1:4f:aa:15:8f:cf:3c:fa:65:74:
         0a:13:e8:68:e3:d4:90:15:2b:a8:f9:42:a3:58:7c:69:3f:09:
         2a:fc:3a:db:bc:11:bb:8d:9f:54:0d:4f:30:fd:ed:4f:88:63:
         a0:6d:53:9f:1c:ba:1b:8c:bc:8b:75:ce:c6:63:ee:e3:e3:98:
         92:2c:98:00:e7:9e:67:1a:ec:b4:e6:3c:fb:58:90:43:fb:43:
         25:0d:c6:c0:cc:b4:c0:c8:0d:12:69:40:65:71:02:50:f8:17:
         34:c9:5b:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEH18rJQ3QPYCYBtrXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTIzMDUyMjAxMDAxN1oXDTIzMDgyMDAxMDAxN1owLzEtMCsGA1UEAxMk
NjY5ZGRhYzktYWE4My00NDJiLWIwYmQtMWE3Nzk0NmZlMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiLjAj6e5vHaDUMWHaK8QL7XLASUtXVsDg/Q
cuTM3xC3jqUletZHuXy2HdnO1bZhulvOBvqwmbeK1i7teOjwwPpCrbdmK2topi5R
+IauDbnk62YP1tH3/jyUKj9dp2+yoP57VOPPXl+MBEjhRM5/juwl5FSzpTdt3fL7
zGG+4PfdwkX1WjKtRW9Yd9ymJZz8G9s3H3UuUYcSW+k5NMDw/i87zEzbiBT3mzUl
rM9h8mCE0NW2EhnM56NQyQGomf27v1ZrjZ7jZ3Xauv42Fl/PIrTkb+WV5eQvK3Y+
vXAx9HSYdkoNmNdTxGk4ZNPf9mJUD4th2oKyzjT5nUs3gpHScwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMU39QLvwxVDpafKNVCsKVdyH16MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMTgxYTEzMjYtMGFmZi0z
ZTQxLThkYzQtNjk3YzM2MThhYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHXt0dzxAy+6sy96dXiRc3E3Kq89KxsaWD5kHXvJrGXMJV+fcOn6
RHqHE7GCeMYaMPu82MzNgKhXihGmS2aKjol0bEaHfW0BGr0LHYo4TNtNBLOPK9U6
pN6lwHrjVhAsnflaQ9V4yjhMlfU+LOtzIJjxZVjZxcYsSyNJJAVeO0y1ZBUYEd2y
hRyVfL9Poio1edJS78U8Q8UT0U+qFY/PPPpldAoT6Gjj1JAVK6j5QqNYfGk/CSr8
Otu8EbuNn1QNTzD97U+IY6BtU58cuhuMvIt1zsZj7uPjmJIsmADnnmca7LTmPPtY
kEP7QyUNxsDMtMDIDRJpQGVxAlD4FzTJW2Q=
-----END CERTIFICATE-----