Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/8ffff9ab-ae8a-3b20-882d-edb9bf67b172.roa
File:                     8ffff9ab-ae8a-3b20-882d-edb9bf67b172.roa (raw, json)
Hash identifier:          AmRzAgxDkS0iabKCVTBBhjWpfqpzoEgRggRzLbt0hYI=
Subject key identifier:   90:7E:AE:E5:77:8D:C1:19:4F:DC:3E:D5:29:8C:09:46:11:67:7B:2A
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F43285841E46E3194A9EA7AB355E27980
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/8ffff9ab-ae8a-3b20-882d-edb9bf67b172.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 22 Jul 2023 10:38:06 +0000
asID:                     33000
IP address blocks:        2605:fdc0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:31:94:a9:ea:7a:b3:55:e2:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 22 10:38:06 2023 GMT
        Subject: CN=12627eae-d70d-4c05-8e3d-c9f0f0830227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3b:18:7e:16:c5:99:8a:44:a2:b6:60:81:f3:
                    fc:65:f1:bd:31:f7:65:e5:a2:d3:8b:60:b0:4c:9a:
                    f2:3e:dc:89:59:fd:d0:99:6b:e6:46:1f:65:e6:2e:
                    9d:7d:46:85:4c:93:2d:1c:12:3d:82:f7:a7:a4:57:
                    a3:dd:3d:7c:6e:3c:b7:70:f0:87:72:5f:78:ee:ab:
                    dc:fe:e0:21:9e:59:5b:55:be:c7:d5:be:1a:55:f8:
                    db:ca:c5:64:60:c1:da:e1:22:d6:52:38:1d:35:60:
                    cd:10:b8:22:f3:1b:c1:2f:8d:cb:7e:3a:64:20:57:
                    c3:af:4f:4f:e3:be:32:51:55:fd:10:88:9e:c7:00:
                    ed:2f:a2:6e:06:ce:40:dc:44:cc:21:e3:5b:41:fa:
                    df:55:7b:20:03:8c:8f:4e:05:44:10:6b:da:85:af:
                    ef:06:02:2b:3f:a4:3c:5a:62:a9:9c:f2:cd:cb:5f:
                    98:ba:8d:43:e9:f5:5e:eb:f4:4f:c1:33:ed:6a:a7:
                    5c:4a:03:e4:f7:07:19:0a:22:74:7b:07:29:bb:4a:
                    a6:a2:ad:fa:37:3a:ab:e6:40:2a:a4:e5:25:99:93:
                    4f:df:f6:8c:39:78:05:c6:19:4a:28:56:29:ee:0e:
                    3f:f1:21:db:86:74:60:db:52:3b:d4:12:07:c0:31:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7E:AE:E5:77:8D:C1:19:4F:DC:3E:D5:29:8C:09:46:11:67:7B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/8ffff9ab-ae8a-3b20-882d-edb9bf67b172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5c:b7:cc:24:ab:42:e2:8b:2c:e2:25:5b:db:b9:f7:d0:75:
         7e:0f:75:b7:30:fd:61:76:f7:00:f3:f2:59:25:45:0b:1f:96:
         49:98:76:04:32:5d:e1:52:ac:fa:93:58:54:09:8c:fa:bd:06:
         15:f8:e2:e9:af:e0:b4:96:32:86:1b:8f:2d:9a:c9:04:23:e7:
         31:b0:90:4f:21:76:05:eb:ea:f9:a5:09:fd:3e:fb:e4:2b:65:
         4c:bd:13:f2:56:fe:33:4c:f1:b4:7c:96:1f:be:24:9d:b9:56:
         99:2e:d7:6b:30:ab:89:d0:32:47:a5:8a:8f:cd:e6:59:6c:5b:
         73:c5:f3:39:9d:19:6b:a7:81:b6:5d:fc:9c:ed:b5:e5:e4:12:
         06:00:2d:2e:83:ca:a8:6b:7d:f1:59:f5:39:55:b2:c9:45:d4:
         f8:e5:07:8b:48:f0:df:83:d4:71:f6:94:13:95:16:4a:21:ab:
         59:96:9f:58:0d:1a:90:50:61:1e:e1:2b:1a:c7:68:83:af:7e:
         d0:df:d6:db:60:1e:6e:24:23:c2:7d:e2:d8:e6:43:fd:b1:0c:
         fc:ef:d2:6f:4d:5e:08:8c:30:3b:54:7e:91:1d:da:bc:dd:15:
         18:57:64:1c:e4:52:5a:05:84:d6:5a:2d:86:85:89:1b:60:f0:
         64:83:c5:7b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEHkbjGUqep6s1XieYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk
ZjY2MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcyMjEwMzgwNlowLzEtMCsGA1UEAxMk
MTI2MjdlYWUtZDcwZC00YzA1LThlM2QtYzlmMGYwODMwMjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zsYfhbFmYpEorZggfP8ZfG9Mfdl5aLTi2Cw
TJryPtyJWf3QmWvmRh9l5i6dfUaFTJMtHBI9gvenpFej3T18bjy3cPCHcl947qvc
/uAhnllbVb7H1b4aVfjbysVkYMHa4SLWUjgdNWDNELgi8xvBL43LfjpkIFfDr09P
474yUVX9EIiexwDtL6JuBs5A3ETMIeNbQfrfVXsgA4yPTgVEEGvaha/vBgIrP6Q8
WmKpnPLNy1+Yuo1D6fVe6/RPwTPtaqdcSgPk9wcZCiJ0ewcpu0qmoq36Nzqr5kAq
pOUlmZNP3/aMOXgFxhlKKFYp7g4/8SHbhnRg21I71BIHwDGDHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJB+ruV3jcEZT9w+1SmMCUYRZ3sqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk
MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOGZmZmY5YWItYWU4YS0z
YjIwLTg4MmQtZWRiOWJmNjdiMTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk
MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5
ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3
NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBdXLfMJKtC4oss4iVb27n30HV+D3W3MP1hdvcA8/JZJUULH5ZJmHYE
Ml3hUqz6k1hUCYz6vQYV+OLpr+C0ljKGG48tmskEI+cxsJBPIXYF6+r5pQn9Pvvk
K2VMvRPyVv4zTPG0fJYfviSduVaZLtdrMKuJ0DJHpYqPzeZZbFtzxfM5nRlrp4G2
Xfyc7bXl5BIGAC0ug8qoa33xWfU5VbLJRdT45QeLSPDfg9Rx9pQTlRZKIatZlp9Y
DRqQUGEe4Ssax2iDr37Q39bbYB5uJCPCfeLY5kP9sQz879JvTV4IjDA7VH6RHdq8
3RUYV2Qc5FJaBYTWWi2GhYkbYPBkg8V7
-----END CERTIFICATE-----