Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0258b376-dd7f-3ee7-8966-113ac023c8e7.roa
File:                     0258b376-dd7f-3ee7-8966-113ac023c8e7.roa (raw, json)
Hash identifier:          O7N61pEBEhuVvjwDl0S148CUSnCitfSdEMKbkMWZ4xo=
Subject key identifier:   CC:90:64:A4:BA:D1:C8:99:94:BB:1D:C9:59:9F:1D:D8:4D:B6:F7:DE
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583FFE74944B25796EE47BFE6EA0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0258b376-dd7f-3ee7-8966-113ac023c8e7.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        2607:fa4d::/32 maxlen: 64

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fe:74:94:4b:25:79:6e:e4:7b:fe:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=acfbc6f3-2be2-4bc8-95e3-acd79f4c8a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:71:5a:8d:e8:f4:0c:b9:dd:ab:bf:61:9b:
                    c8:47:c0:73:58:fa:2c:b5:d0:a6:13:c1:c3:2f:6d:
                    17:c2:5f:c4:15:c7:1f:53:4b:e9:61:09:eb:f2:6a:
                    9d:fa:af:d2:dc:a6:71:ed:82:b7:9a:34:02:78:c2:
                    95:27:ab:52:9d:16:47:54:98:be:89:4e:2e:30:88:
                    b6:90:41:74:a2:66:cc:03:d6:57:3e:f9:69:f4:23:
                    eb:08:6b:0a:67:77:f3:2b:f1:0c:49:b2:2c:5b:fe:
                    bb:26:fa:3b:3c:09:88:2b:f5:39:80:ce:ac:6b:9a:
                    2d:00:08:a5:78:c6:2c:61:35:2a:1c:c3:17:06:2e:
                    80:c6:a2:d4:d3:32:46:35:21:df:cf:ff:1b:39:23:
                    28:72:21:ec:cb:00:d6:bd:8b:9d:69:83:9c:08:90:
                    76:c0:0b:43:d6:0a:80:22:1d:b1:f5:58:61:ad:d0:
                    5d:8b:1d:e4:fc:33:6b:79:1f:de:78:d5:9f:de:26:
                    ce:a2:8e:0f:94:6c:6c:61:2a:1e:21:bd:e9:6b:97:
                    f8:ca:00:a9:37:5f:a5:e8:e0:cc:7a:83:14:f2:a7:
                    ec:4e:a2:b0:9d:e0:d1:46:92:5b:ab:bd:7e:68:c2:
                    15:7e:66:bd:2d:20:b4:42:44:f2:e3:6c:45:b0:1b:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:90:64:A4:BA:D1:C8:99:94:BB:1D:C9:59:9F:1D:D8:4D:B6:F7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0258b376-dd7f-3ee7-8966-113ac023c8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:a6:b7:90:de:65:12:bb:11:6f:42:f1:33:b9:44:04:b0:
         a2:76:5b:a9:cd:d5:be:40:83:be:9e:ec:72:71:dc:a3:0c:a3:
         91:74:d2:bc:0d:bd:fa:49:6c:1f:ed:55:87:38:eb:43:ea:05:
         0b:a1:70:c9:92:73:65:75:0d:95:5c:82:56:60:1c:8f:05:fb:
         74:86:b0:b1:e3:86:dd:b3:df:d7:8e:d1:02:16:d9:6b:08:6f:
         e4:65:6e:0d:b0:8d:07:5c:b5:11:9b:a5:d8:fa:97:1a:f7:a5:
         28:f0:96:d0:f7:60:02:94:5c:f4:8d:4d:02:b3:64:ff:15:30:
         f6:a7:6f:6b:a5:5d:f0:02:a4:cf:2d:3f:e1:2f:6c:2f:6b:6f:
         0e:15:cc:ae:f0:fa:8c:d3:35:9e:ff:a5:6b:ce:41:6d:cc:f8:
         3b:ef:79:14:22:04:56:2e:2c:7c:c6:42:2f:22:69:05:84:85:
         14:c2:38:21:4f:d6:52:8e:31:55:a0:91:2e:a9:b8:2b:2d:13:
         22:26:a9:00:21:a6:bd:02:00:10:a8:af:f2:ba:90:95:41:03:
         c3:f8:87:17:46:68:e1:6d:1d:df:e4:b5:d4:31:f9:a6:4c:c2:
         12:f9:64:6c:50:92:79:02:cc:03:06:d6:c3:c3:b7:5c:d3:b3:
         56:0c:71:9a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD/+dJRLJXlu5Hv+bqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTIyMDkxNDE0NDYxM1oXDTI0MTIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
YWNmYmM2ZjMtMmJlMi00YmM4LTk1ZTMtYWNkNzlmNGM4YTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLFxWo3o9Ay53au/YZvIR8BzWPostdCmE8HD
L20Xwl/EFccfU0vpYQnr8mqd+q/S3KZx7YK3mjQCeMKVJ6tSnRZHVJi+iU4uMIi2
kEF0ombMA9ZXPvlp9CPrCGsKZ3fzK/EMSbIsW/67Jvo7PAmIK/U5gM6sa5otAAil
eMYsYTUqHMMXBi6AxqLU0zJGNSHfz/8bOSMociHsywDWvYudaYOcCJB2wAtD1gqA
Ih2x9VhhrdBdix3k/DNreR/eeNWf3ibOoo4PlGxsYSoeIb3pa5f4ygCpN1+l6ODM
eoMU8qfsTqKwneDRRpJbq71+aMIVfma9LSC0QkTy42xFsBsOwwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMyQZKS60ciZlLsdyVmfHdhNtvfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMDI1OGIzNzYtZGQ3Zi0z
ZWU3LTg5NjYtMTEzYWMwMjNjOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6TTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCQ0qa3kN5lErsRb0LxM7lEBLCidlupzdW+QIO+nuxycdyjDKORdNK8
Db36SWwf7VWHOOtD6gULoXDJknNldQ2VXIJWYByPBft0hrCx44bds9/XjtECFtlr
CG/kZW4NsI0HXLURm6XY+pca96Uo8JbQ92AClFz0jU0Cs2T/FTD2p29rpV3wAqTP
LT/hL2wva28OFcyu8PqM0zWe/6VrzkFtzPg773kUIgRWLix8xkIvImkFhIUUwjgh
T9ZSjjFVoJEuqbgrLRMiJqkAIaa9AgAQqK/yupCVQQPD+IcXRmjhbR3f5LXUMfmm
TMIS+WRsUJJ5AswDBtbDw7dc07NWDHGa
-----END CERTIFICATE-----