Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4ac06486-487d-3dba-a7a6-cf84a574e7bf.roa
File:                     4ac06486-487d-3dba-a7a6-cf84a574e7bf.roa (raw, json)
Hash identifier:          JxzkctdubP0wPy8RXG4/gepnAKzOvLc0GfSPqU8YME8=
Subject key identifier:   3E:83:3F:AE:C7:60:EA:31:62:5B:03:98:27:6B:78:69:A7:F2:84:BD
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285841E46DC5F4F21738526609A880
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4ac06486-487d-3dba-a7a6-cf84a574e7bf.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 12 Aug 2023 05:07:07 +0000
asID:                     834
IP address blocks:        130.254.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:c5:f4:f2:17:38:52:66:09:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug 12 05:07:07 2023 GMT
        Subject: CN=435e826a-cc56-411a-83d6-078a0dd42487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:ad:8f:6e:2b:bd:d8:e8:e8:e8:ff:bc:6d:
                    61:25:ff:93:fe:44:27:8b:db:1d:f1:3c:ee:cb:a2:
                    bd:68:fb:35:0c:f5:12:a9:fe:f6:c6:68:3e:9f:23:
                    21:21:a7:0a:22:71:c1:92:b1:6d:b0:57:e2:ad:b4:
                    51:88:b8:45:c9:5c:76:f7:a6:9a:cc:d3:13:ba:0e:
                    47:05:ea:75:e0:ca:ef:3e:48:d6:22:d5:7d:7d:8a:
                    b2:10:b9:93:eb:46:82:d4:d4:0a:c1:ad:d9:39:81:
                    6a:e9:1f:3c:22:f3:bf:f8:f3:e2:ad:2b:1d:de:97:
                    c6:19:67:bb:6b:b7:d1:6c:bc:ab:07:23:85:cc:1b:
                    d6:6a:73:8c:ce:1e:f6:b6:91:ac:fc:ff:e7:a2:30:
                    6b:91:b8:5a:83:4d:18:f5:07:7e:74:82:c6:2e:2b:
                    5e:2b:82:5e:06:9d:32:e8:0d:da:e1:e2:63:ac:c7:
                    66:04:c2:5f:54:09:85:a1:49:96:24:ca:15:ed:78:
                    e3:fc:e5:8a:35:0b:3a:4d:61:f8:53:1a:e9:05:ce:
                    8f:e6:e0:bf:80:38:fb:95:93:c3:55:ad:fa:26:ed:
                    e0:91:29:bb:73:1a:bd:eb:a5:e5:2f:9d:70:d9:4f:
                    2a:d5:73:6c:e3:79:84:dc:f0:62:d5:b6:55:1f:ac:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:83:3F:AE:C7:60:EA:31:62:5B:03:98:27:6B:78:69:A7:F2:84:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4ac06486-487d-3dba-a7a6-cf84a574e7bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b2:1c:be:08:1e:34:32:13:da:7a:68:ff:e3:b8:3d:fc:d4:
         07:13:ca:cb:40:99:f9:d9:2d:ed:6c:fc:68:59:f3:14:f5:74:
         fa:96:db:15:24:83:7e:21:db:05:8a:8c:90:66:16:7f:65:12:
         eb:33:c6:07:df:5c:10:eb:76:12:6c:be:6d:79:34:3e:a0:4d:
         ee:a1:06:d4:b9:d5:62:41:8b:e5:29:04:7d:0c:f0:a4:ae:07:
         df:fd:d5:9f:1f:8f:c8:10:b6:e5:ce:24:31:aa:d0:13:22:4e:
         6e:89:c6:42:06:d7:ff:46:f6:b4:ed:41:e8:92:34:c8:1e:a3:
         80:4d:d3:9f:6a:6c:60:bd:bd:4f:7f:5f:fb:f3:7e:72:1e:86:
         f1:b2:1c:06:b2:ba:58:19:78:d3:17:82:49:51:ed:46:83:c7:
         84:07:b1:4f:18:24:15:59:89:df:d9:2c:3e:06:59:be:cc:0e:
         f3:86:ab:ab:c0:00:4c:da:e7:72:a1:e2:87:86:8b:71:8a:ea:
         f3:ef:a8:ee:aa:bc:b2:1d:1e:b6:26:70:25:c8:4f:7b:2d:35:
         05:10:b3:42:7c:91:e4:bc:73:8e:2d:e8:47:69:ae:6c:f1:4f:
         4d:e7:df:1d:35:11:d6:56:86:01:e1:f7:dd:9f:7c:01:ac:41:
         6b:c4:0e:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbcX08hc4UmYJqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDgxMjA1MDcwN1owLzEtMCsGA1UEAxMk
NDM1ZTgyNmEtY2M1Ni00MTFhLTgzZDYtMDc4YTBkZDQyNDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnytj24rvdjo6Oj/vG1hJf+T/kQni9sd8Tzu
y6K9aPs1DPUSqf72xmg+nyMhIacKInHBkrFtsFfirbRRiLhFyVx296aazNMTug5H
Bep14MrvPkjWItV9fYqyELmT60aC1NQKwa3ZOYFq6R88IvO/+PPirSsd3pfGGWe7
a7fRbLyrByOFzBvWanOMzh72tpGs/P/nojBrkbhag00Y9Qd+dILGLiteK4JeBp0y
6A3a4eJjrMdmBMJfVAmFoUmWJMoV7Xjj/OWKNQs6TWH4UxrpBc6P5uC/gDj7lZPD
Va36Ju3gkSm7cxq966XlL51w2U8q1XNs43mE3PBi1bZVH6xybQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6DP67HYOoxYlsDmCdreGmn8oS9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNGFjMDY0ODYtNDg3ZC0z
ZGJhLWE3YTYtY2Y4NGE1NzRlN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv4oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeyHL4IHjQyE9p6aP/juD381AcTystAmfnZLe1s/GhZ8xT1dPqW2xUk
g34h2wWKjJBmFn9lEuszxgffXBDrdhJsvm15ND6gTe6hBtS51WJBi+UpBH0M8KSu
B9/91Z8fj8gQtuXOJDGq0BMiTm6JxkIG1/9G9rTtQeiSNMgeo4BN059qbGC9vU9/
X/vzfnIehvGyHAayulgZeNMXgklR7UaDx4QHsU8YJBVZid/ZLD4GWb7MDvOGq6vA
AEza53Kh4oeGi3GK6vPvqO6qvLIdHrYmcCXIT3stNQUQs0J8keS8c44t6Edprmzx
T03n3x01EdZWhgHh992ffAGsQWvEDtI=
-----END CERTIFICATE-----