Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fdb11474-d242-35d4-bdf7-9c5cb6a72feb.roa
File:                     fdb11474-d242-35d4-bdf7-9c5cb6a72feb.roa (raw, json)
Hash identifier:          LntYWzb9bHIrEilqNds9bIkfuxS+QEVwP80bkahj0HU=
Subject key identifier:   F5:17:A6:F0:DC:87:13:1F:0F:E2:6A:D4:1A:82:C3:EE:C2:3C:43:03
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328583CD27E0DE3499BD3CD58DE8DC0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fdb11474-d242-35d4-bdf7-9c5cb6a72feb.roa
Signing time:             Sat 22 Jan 2022 05:00:00 +0000
ROA not before:           Sat 22 Jan 2022 05:00:00 +0000
ROA not after:            Fri 09 May 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        64.224.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d2:7e:0d:e3:49:9b:d3:cd:58:de:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jan 22 05:00:00 2022 GMT
            Not After : May  9 04:00:00 2025 GMT
        Subject: CN=a0aad9ca-db04-4cb6-871d-0978b9ce6f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:87:25:e2:b9:d4:c2:04:20:ba:61:0c:1b:
                    92:f8:5f:9a:f6:16:25:f8:ea:1b:a3:27:75:e6:54:
                    9d:a6:b7:32:bd:db:ba:19:40:f0:a0:c8:d7:96:58:
                    e2:57:50:9f:22:c5:c1:c7:6a:3f:be:7e:a5:58:7d:
                    9f:85:4f:59:82:77:43:1c:fa:5a:47:bf:48:f0:a6:
                    b3:14:99:a8:44:e7:86:09:9d:59:d1:d8:a3:ef:4f:
                    fe:8c:6f:87:32:f7:d8:c5:79:60:e9:bc:7c:fb:cc:
                    fe:62:ba:93:63:0b:d0:43:bb:80:69:a7:31:d1:3b:
                    5f:9d:15:ac:48:f0:77:aa:64:c0:8b:1f:f5:f6:4b:
                    07:38:b8:7f:e6:7c:05:99:b5:c8:71:b7:e5:c2:ee:
                    a3:8a:3e:b2:79:d8:13:84:b4:44:0c:ce:30:30:03:
                    ea:73:45:fd:6d:c7:e7:e0:9d:a5:dc:86:03:fe:31:
                    76:d9:f9:e9:25:77:e1:14:f1:24:fc:3b:87:27:34:
                    77:68:bd:c4:6c:51:55:e1:2e:18:b7:99:53:ab:28:
                    72:5a:9f:8b:06:a4:2f:0d:44:f2:34:21:9c:f9:49:
                    3e:bd:12:b3:e5:18:94:61:3c:f8:c4:0a:de:46:64:
                    ea:8f:04:10:45:06:45:a7:a9:9a:4c:b8:b5:0d:3c:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:17:A6:F0:DC:87:13:1F:0F:E2:6A:D4:1A:82:C3:EE:C2:3C:43:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fdb11474-d242-35d4-bdf7-9c5cb6a72feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:c3:b9:9e:c9:a6:6e:5f:23:8c:c1:d1:38:69:13:81:d0:
         ad:7d:c7:ce:45:d0:ec:52:53:80:0e:d5:c4:a3:45:dc:2a:92:
         51:c3:32:36:f1:93:9e:1e:90:7b:5a:45:b1:93:18:b8:05:58:
         3b:75:ad:af:df:c4:c8:c6:89:f9:4e:8a:f0:d4:e1:2b:df:d7:
         96:1f:fd:e8:93:b9:bc:93:78:d9:05:d4:73:a4:04:0e:71:93:
         04:be:71:c5:e8:84:ad:2d:b3:c9:96:ac:d0:9c:52:ea:08:40:
         44:6b:10:37:f6:b6:5b:13:6b:47:17:20:43:8e:db:e9:a3:39:
         c8:9c:bf:4d:be:06:f3:43:7e:c8:20:7a:a4:2a:79:c3:b5:57:
         75:17:a4:0b:d0:58:39:df:de:57:d8:22:d4:df:b1:f0:1f:13:
         d2:ee:99:d1:36:07:7d:d0:87:54:06:a3:97:43:57:08:c0:f7:
         d2:5a:b3:cb:06:6d:6e:9d:b4:e6:13:de:44:68:b2:b7:ba:49:
         1e:72:41:2d:2a:72:a4:54:0f:ee:9b:2f:16:e5:89:fe:34:a1:
         6c:f9:93:2b:94:4e:1b:b3:5c:53:8a:a2:68:d7:ee:b3:03:71:
         e1:de:a5:6c:fe:fb:90:08:72:07:4b:c8:d6:a8:4a:dd:83:73:
         56:5e:ca:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzSfg3jSZvTzVjejcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTIyMDEyMjA1MDAwMFoXDTI1MDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk
YTBhYWQ5Y2EtZGIwNC00Y2I2LTg3MWQtMDk3OGI5Y2U2ZjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllaHJeK51MIEILphDBuS+F+a9hYl+Ooboyd1
5lSdprcyvdu6GUDwoMjXlljiV1CfIsXBx2o/vn6lWH2fhU9ZgndDHPpaR79I8Kaz
FJmoROeGCZ1Z0dij70/+jG+HMvfYxXlg6bx8+8z+YrqTYwvQQ7uAaacx0TtfnRWs
SPB3qmTAix/19ksHOLh/5nwFmbXIcbflwu6jij6yedgThLREDM4wMAPqc0X9bcfn
4J2l3IYD/jF22fnpJXfhFPEk/DuHJzR3aL3EbFFV4S4Yt5lTqyhyWp+LBqQvDUTy
NCGc+Uk+vRKz5RiUYTz4xAreRmTqjwQQRQZFp6maTLi1DTxfDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUXpvDchxMfD+Jq1BqCw+7CPEMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZmRiMTE0NzQtZDI0Mi0z
NWQ0LWJkZjctOWM1Y2I2YTcyZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALmgw7meyaZuXyOMwdE4aROB0K19x85F0OxSU4AO1cSjRdwqklHDMjbx
k54ekHtaRbGTGLgFWDt1ra/fxMjGiflOivDU4Svf15Yf/eiTubyTeNkF1HOkBA5x
kwS+ccXohK0ts8mWrNCcUuoIQERrEDf2tlsTa0cXIEOO2+mjOcicv02+BvNDfsgg
eqQqecO1V3UXpAvQWDnf3lfYItTfsfAfE9LumdE2B33Qh1QGo5dDVwjA99Jas8sG
bW6dtOYT3kRosre6SR5yQS0qcqRUD+6bLxblif40oWz5kyuUThuzXFOKomjX7rMD
ceHepWz++5AIcgdLyNaoSt2Dc1Zeyrw=
-----END CERTIFICATE-----