Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa
File:                     bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa (raw, json)
Hash identifier:          gibQByuZjhIg+m8PUSXXBYD11LEu4fHw6damL+RhKJU=
Subject key identifier:   03:AD:54:A6:AA:96:38:49:2A:56:8E:5B:B9:A6:4A:63:11:80:84:F1
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F43285841EA4980106361B9C9AE1AB000
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa
Signing time:             Wed 17 May 2023 20:45:34 +0000
ROA not before:           Wed 17 May 2023 20:45:34 +0000
ROA not after:            Tue 15 Aug 2023 20:45:34 +0000
asID:                     64517
IP address blocks:        162.221.27.240/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ea:49:80:10:63:61:b9:c9:ae:1a:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: May 17 20:45:34 2023 GMT
            Not After : Aug 15 20:45:34 2023 GMT
        Subject: CN=5ad28a63-ceca-4be6-9f14-011436fe956a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:50:46:f5:64:75:3b:c6:a9:ca:e0:ca:20:
                    72:b7:cb:f5:c9:88:05:3b:4c:c1:99:eb:26:0e:80:
                    e3:7b:28:f4:00:03:86:4e:00:da:59:a1:e3:f4:5a:
                    1e:2d:f2:16:d4:43:83:e0:13:be:99:8c:65:be:f7:
                    fa:7e:16:0a:e0:e9:42:a3:de:64:d9:7e:78:e3:e0:
                    77:bb:34:43:36:ef:2b:38:66:4f:7b:1a:64:db:a4:
                    8c:a8:c7:c3:93:da:00:f4:3c:40:a8:50:26:67:f8:
                    68:18:f5:1f:7b:cf:b3:91:14:71:cb:a3:3b:67:69:
                    a4:12:b8:73:87:1d:73:1c:33:49:06:25:0f:b8:04:
                    7a:46:14:b9:cd:e9:25:d4:27:77:ca:02:7c:f5:39:
                    6f:52:73:d2:f2:86:25:57:02:5d:6b:0c:78:a6:b4:
                    c1:1e:6f:57:d1:7e:fc:ad:8f:c7:9d:93:87:2e:29:
                    0a:7e:4d:a3:5c:d6:a1:24:23:ad:22:5e:fc:e6:61:
                    05:d0:5d:3c:98:70:4c:4b:a1:b0:1f:d3:c2:a8:85:
                    79:ee:0f:d5:1c:a9:14:5e:bb:83:60:24:93:78:d8:
                    eb:5f:15:2d:92:35:5c:19:73:b1:c2:78:97:46:86:
                    38:c0:71:f7:2b:b4:b0:dd:c7:18:cf:99:ef:0b:68:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AD:54:A6:AA:96:38:49:2A:56:8E:5B:B9:A6:4A:63:11:80:84:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.27.240/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:f3:63:ae:b5:93:1a:1f:39:a7:3a:59:97:96:59:96:e2:
         a1:1a:b9:b6:cc:f1:37:9b:81:ff:d9:d8:36:5e:a4:44:5f:5b:
         be:34:16:d1:cb:9a:87:0b:9a:27:06:38:c5:a3:9e:e6:07:2f:
         eb:89:45:14:e8:27:f3:33:0f:da:4d:b1:2f:d0:cf:b4:54:fc:
         06:da:bb:9e:f4:f8:0f:03:fd:8c:75:09:0f:e0:9d:7b:33:23:
         79:06:31:da:c3:7d:1e:d3:ff:f2:65:0a:06:90:69:5d:e1:c0:
         3a:f5:7d:cf:bd:b2:1d:15:65:7d:a7:75:e3:ad:40:dc:aa:8c:
         38:cb:9a:c8:79:34:37:03:bf:ad:7c:d2:e9:e6:e2:b7:e6:21:
         c3:44:1b:3a:18:60:ad:66:ad:67:fa:ba:5f:87:77:b5:fd:6d:
         9d:ab:ca:cd:96:4d:94:1f:f7:4a:08:1c:ac:12:6c:21:af:4c:
         c7:d7:1e:69:fa:64:24:a8:51:60:c5:bb:78:2d:8a:8f:c6:61:
         bc:55:fd:4b:d7:9b:cf:20:16:5d:b9:9e:e6:b1:8c:2f:61:47:
         fa:34:6b:16:e2:c0:b7:f9:de:a6:c8:d7:16:80:18:5c:f4:4a:
         62:74:0d:6f:82:d9:fe:bc:a2:41:4e:a0:b7:60:1c:c3:e5:12:
         ca:c3:75:82
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEHqSYAQY2G5ya4asAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3
YTZkMB4XDTIzMDUxNzIwNDUzNFoXDTIzMDgxNTIwNDUzNFowLzEtMCsGA1UEAxMk
NWFkMjhhNjMtY2VjYS00YmU2LTlmMTQtMDExNDM2ZmU5NTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJQRvVkdTvGqcrgyiByt8v1yYgFO0zBmesm
DoDjeyj0AAOGTgDaWaHj9FoeLfIW1EOD4BO+mYxlvvf6fhYK4OlCo95k2X544+B3
uzRDNu8rOGZPexpk26SMqMfDk9oA9DxAqFAmZ/hoGPUfe8+zkRRxy6M7Z2mkErhz
hx1zHDNJBiUPuAR6RhS5zekl1Cd3ygJ89TlvUnPS8oYlVwJdawx4prTBHm9X0X78
rY/HnZOHLikKfk2jXNahJCOtIl785mEF0F08mHBMS6GwH9PCqIV57g/VHKkUXruD
YCSTeNjrXxUtkjVcGXOxwniXRoY4wHH3K7Sw3ccYz5nvC2hcJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAOtVKaqljhJKlaOW7mmSmMRgITxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy
YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvYmQ4NWI5YTktNzQ0MS0z
ZTFhLTg0ZGUtZTM1OWYxZDhhMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3
MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh
N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy
MjYyYTdhNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDot0b8DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBR6PNjrrWTGh85pzpZl5ZZluKhGrm2zPE3m4H/2dg2XqREX1u+NBbR
y5qHC5onBjjFo57mBy/riUUU6CfzMw/aTbEv0M+0VPwG2rue9PgPA/2MdQkP4J17
MyN5BjHaw30e0//yZQoGkGld4cA69X3PvbIdFWV9p3XjrUDcqow4y5rIeTQ3A7+t
fNLp5uK35iHDRBs6GGCtZq1n+rpfh3e1/W2dq8rNlk2UH/dKCBysEmwhr0zH1x5p
+mQkqFFgxbt4LYqPxmG8Vf1L15vPIBZduZ7msYwvYUf6NGsW4sC3+d6myNcWgBhc
9EpidA1vgtn+vKJBTqC3YBzD5RLKw3WC
-----END CERTIFICATE-----