Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9213de94-d2be-38a9-b500-699a589afbd5.roa
File:                     9213de94-d2be-38a9-b500-699a589afbd5.roa (raw, json)
Hash identifier:          8dgpl7/T9IuiiLK2V+mPGgUDVb3JaAWuBrOZkvcnQ5Q=
Subject key identifier:   25:63:B0:CD:65:69:BD:C9:DB:5F:80:07:2D:05:17:15:D5:19:9E:03
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328583EB5808989E7E387D590A16980
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9213de94-d2be-38a9-b500-699a589afbd5.roa
Signing time:             Fri 08 Jul 2022 15:06:10 +0000
ROA not before:           Fri 08 Jul 2022 15:06:10 +0000
ROA not after:            Thu 10 Oct 2024 04:00:00 +0000
asID:                     12212
IP address blocks:        45.59.71.0/24 maxlen: 24
                          2605:8900:f000::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b5:80:89:89:e7:e3:87:d5:90:a1:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jul  8 15:06:10 2022 GMT
            Not After : Oct 10 04:00:00 2024 GMT
        Subject: CN=441db7b0-941e-4da1-b665-e27af4ea3c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:11:67:15:7a:28:25:b0:66:b8:6c:67:2b:
                    1f:4e:2a:85:6d:5f:69:32:7f:47:c8:4b:57:c7:0e:
                    1f:64:e4:5b:e5:9e:cd:db:b5:87:75:6a:9b:28:69:
                    27:70:e3:d3:c3:8a:0d:1f:65:d4:c6:87:7c:53:b2:
                    54:36:3a:ba:3f:8c:9b:00:22:a4:28:8e:bd:46:15:
                    61:5b:37:c7:e2:8c:52:32:cc:8e:5f:60:d0:5f:ed:
                    2d:de:d6:cf:61:e3:61:28:39:ef:a8:45:50:89:dc:
                    b6:b1:e1:82:d8:a1:32:9a:5d:38:15:09:e0:74:39:
                    e6:c8:0f:bd:7a:ca:20:be:77:4f:33:9d:c1:6e:34:
                    ff:8c:f7:79:d8:66:de:ec:0f:3e:35:95:ec:a5:1f:
                    bb:cf:48:c4:28:ac:f3:91:70:75:ca:54:12:60:6f:
                    64:e3:ff:df:a9:55:9d:a5:98:8f:ec:8b:47:10:6c:
                    01:c4:af:d8:d0:2a:e3:b0:37:f3:16:f5:08:47:bd:
                    c6:f9:0b:85:59:70:b5:4e:3a:8e:6b:c9:4c:0d:52:
                    5f:ae:95:b2:23:e8:38:af:51:f9:a2:2d:26:e3:ad:
                    19:bb:73:6f:91:c6:3c:9c:fd:f9:f2:8a:a3:fb:f9:
                    9f:aa:48:20:d9:58:6a:82:8f:bf:02:eb:99:c7:22:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:B0:CD:65:69:BD:C9:DB:5F:80:07:2D:05:17:15:D5:19:9E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9213de94-d2be-38a9-b500-699a589afbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.71.0/24
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:c4:a8:8d:9f:3a:ca:66:94:40:db:ae:39:a9:88:92:fe:
         cb:3b:30:7f:f7:7e:ec:52:98:64:b9:38:a6:1f:d5:5e:80:80:
         5e:17:23:a9:72:09:f7:c1:07:3c:a8:35:e9:62:d4:9a:ab:dc:
         1d:f1:3f:5d:87:62:76:e3:c3:8c:33:a7:38:45:01:47:8d:25:
         00:d0:a5:ff:a9:73:db:6f:cb:28:2c:85:66:82:1a:05:d8:f5:
         49:ff:a2:12:9c:f7:fc:17:bd:6f:79:b8:97:64:a1:f0:48:c2:
         01:d5:90:01:b4:4d:15:3f:ee:a4:f6:2b:41:fd:99:23:8f:3b:
         26:eb:90:34:ab:f5:1c:d7:99:ef:a5:4c:d9:82:2b:ae:d5:f4:
         96:fd:92:30:6d:08:38:31:4e:27:1b:d1:98:7e:10:82:17:c9:
         f7:9b:02:f7:f7:17:fb:19:70:4d:9d:5f:a4:f3:69:7f:89:55:
         b7:9b:0a:b6:03:d2:66:a3:0d:e0:82:41:b3:50:c7:a0:3e:a2:
         9f:23:45:0c:23:18:86:54:0e:09:b3:ba:bb:64:2e:53:ea:9d:
         9c:75:4a:ae:21:34:22:d1:d7:d9:2a:c4:5a:5c:15:cc:64:3c:
         e0:52:5e:37:2c:e7:7d:5b:30:e0:73:1e:9b:d4:bc:94:c0:ec:
         a1:20:7e:01
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWD61gImJ5+OH1ZChaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTIyMDcwODE1MDYxMFoXDTI0MTAxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NDQxZGI3YjAtOTQxZS00ZGExLWI2NjUtZTI3YWY0ZWEzYzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwYRZxV6KCWwZrhsZysfTiqFbV9pMn9HyEtX
xw4fZORb5Z7N27WHdWqbKGkncOPTw4oNH2XUxod8U7JUNjq6P4ybACKkKI69RhVh
WzfH4oxSMsyOX2DQX+0t3tbPYeNhKDnvqEVQidy2seGC2KEyml04FQngdDnmyA+9
esogvndPM53BbjT/jPd52Gbe7A8+NZXspR+7z0jEKKzzkXB1ylQSYG9k4//fqVWd
pZiP7ItHEGwBxK/Y0CrjsDfzFvUIR73G+QuFWXC1TjqOa8lMDVJfrpWyI+g4r1H5
oi0m460Zu3NvkcY8nP358oqj+/mfqkgg2Vhqgo+/AuuZxyIQJwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFCVjsM1lab3J21+ABy0FFxXVGZ4DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvOTIxM2RlOTQtZDJiZS0z
OGE5LWI1MDAtNjk5YTU4OWFmYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALTtHMA4E
AgACMAgDBgQmBYkA8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjrMSojZ86ymaUQNuuOamIkv7LOzB/937s
UphkuTimH9VegIBeFyOpcgn3wQc8qDXpYtSaq9wd8T9dh2J248OMM6c4RQFHjSUA
0KX/qXPbb8soLIVmghoF2PVJ/6ISnPf8F71vebiXZKHwSMIB1ZABtE0VP+6k9itB
/Zkjjzsm65A0q/Uc15nvpUzZgiuu1fSW/ZIwbQg4MU4nG9GYfhCCF8n3mwL39xf7
GXBNnV+k82l/iVW3mwq2A9Jmow3ggkGzUMegPqKfI0UMIxiGVA4Js7q7ZC5T6p2c
dUquITQi0dfZKsRaXBXMZDzgUl43LOd9WzDgcx6b1LyUwOyhIH4B
-----END CERTIFICATE-----