Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/14f4a895-4945-313a-aa2f-d356efe622e5.roa
File:                     14f4a895-4945-313a-aa2f-d356efe622e5.roa (raw, json)
Hash identifier:          RQ8vQZB/itbEyYGSHGpTlMUDmHbEpbwjT1dEDEqwtmE=
Subject key identifier:   89:EA:65:20:78:0C:52:4F:95:F7:4B:43:4C:23:F6:1B:63:3A:1D:C4
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583FFE73F15DE9BAA3B748829780
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/14f4a895-4945-313a-aa2f-d356efe622e5.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        2607:fa4e::/32 maxlen: 64

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fe:73:f1:5d:e9:ba:a3:b7:48:82:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=2274863e-ca9b-408b-a394-0ade63a77cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:60:cc:94:47:92:7e:19:36:10:fd:03:a0:
                    3c:c1:d1:f2:81:c1:85:b9:0f:55:9e:35:98:d4:63:
                    0d:d2:22:1a:c2:49:32:48:2f:29:26:a3:52:26:55:
                    09:41:9e:65:f9:52:94:69:3c:34:51:f4:9c:4f:5d:
                    85:36:68:33:f5:cb:92:c3:39:b9:56:c4:b4:6d:5f:
                    48:5e:38:39:c5:ab:c4:a7:f7:c2:e9:12:b5:0a:d1:
                    06:22:96:63:d8:a5:5e:92:1d:e3:2f:4c:f5:ab:b3:
                    a5:ba:04:ff:7e:83:2d:0b:73:37:3b:04:4a:89:ac:
                    17:d7:40:8e:14:ab:e2:56:97:69:f3:67:59:71:6f:
                    c5:dd:57:11:26:68:3d:b2:77:e6:bc:d6:eb:06:91:
                    24:04:7b:da:a0:ce:9f:8e:dd:a4:3e:20:54:0f:2d:
                    76:16:fa:61:9c:e7:2f:86:15:54:e2:bb:72:46:1a:
                    0e:fe:0e:51:35:5d:f5:78:a5:1e:aa:c5:92:3e:4c:
                    95:c2:ca:77:69:d3:0d:43:10:5c:aa:f6:58:87:76:
                    a6:cf:45:03:2c:33:98:6d:83:5c:e3:7b:3d:21:6f:
                    0f:53:97:36:0b:fe:84:1c:eb:da:6b:00:ff:5f:c9:
                    cb:10:ab:b1:61:b3:bc:73:9f:70:61:57:3d:a2:89:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EA:65:20:78:0C:52:4F:95:F7:4B:43:4C:23:F6:1B:63:3A:1D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/14f4a895-4945-313a-aa2f-d356efe622e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4e::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:31:9f:68:a6:de:c5:11:68:f0:15:a4:41:fd:ad:11:24:d7:
         b5:68:ca:35:56:12:d9:e8:ae:64:3b:ed:c8:c4:33:e1:5a:fc:
         9d:28:53:d4:87:82:1d:b9:3c:2b:61:65:5c:ac:26:b0:be:a9:
         76:bc:bf:49:ed:96:7c:4f:ee:d7:ad:2d:84:4d:4f:59:f4:55:
         86:09:fa:1a:27:4e:a0:ac:a8:81:71:02:f0:61:c1:d7:e1:5b:
         ce:f7:a1:df:f6:57:03:99:e4:ad:b6:c3:0c:be:18:b8:05:84:
         79:73:2f:de:11:dd:18:91:d6:67:53:4d:d5:60:58:6a:f0:a9:
         dd:a0:be:f5:d2:e2:63:46:f9:db:0a:77:11:8c:15:eb:b8:92:
         57:6f:10:13:b0:e5:cb:e5:fe:48:ea:bd:ac:df:e9:dc:6a:de:
         00:be:50:3f:ac:37:0f:3a:0f:ef:ca:bf:8f:b9:86:10:a5:19:
         1c:cc:4f:1b:2e:8f:01:68:5d:fb:08:22:36:c6:9e:19:dd:97:
         12:a8:d8:76:b6:d1:1c:58:4a:b7:01:b5:ee:0b:eb:0a:85:90:
         c2:4e:5b:53:9c:fd:d2:e3:70:32:30:37:5e:be:d3:bd:94:3c:
         01:07:1a:ab:05:bf:c2:1e:99:4f:60:90:92:cb:bd:c7:80:ee:
         d7:1d:c5:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD/+c/Fd6bqjt0iCl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTIyMDkxNDE0NDYxM1oXDTI0MTIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
MjI3NDg2M2UtY2E5Yi00MDhiLWEzOTQtMGFkZTYzYTc3Y2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRtgzJRHkn4ZNhD9A6A8wdHygcGFuQ9VnjWY
1GMN0iIawkkySC8pJqNSJlUJQZ5l+VKUaTw0UfScT12FNmgz9cuSwzm5VsS0bV9I
Xjg5xavEp/fC6RK1CtEGIpZj2KVekh3jL0z1q7OlugT/foMtC3M3OwRKiawX10CO
FKviVpdp82dZcW/F3VcRJmg9snfmvNbrBpEkBHvaoM6fjt2kPiBUDy12FvphnOcv
hhVU4rtyRhoO/g5RNV31eKUeqsWSPkyVwsp3adMNQxBcqvZYh3amz0UDLDOYbYNc
43s9IW8PU5c2C/6EHOvaawD/X8nLEKuxYbO8c59wYVc9ookLzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFInqZSB4DFJPlfdLQ0wj9htjOh3EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMTRmNGE4OTUtNDk0NS0z
MTNhLWFhMmYtZDM1NmVmZTYyMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6TjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAiMZ9opt7FEWjwFaRB/a0RJNe1aMo1VhLZ6K5kO+3IxDPhWvydKFPU
h4IduTwrYWVcrCawvql2vL9J7ZZ8T+7XrS2ETU9Z9FWGCfoaJ06grKiBcQLwYcHX
4VvO96Hf9lcDmeSttsMMvhi4BYR5cy/eEd0YkdZnU03VYFhq8KndoL710uJjRvnb
CncRjBXruJJXbxATsOXL5f5I6r2s3+ncat4AvlA/rDcPOg/vyr+PuYYQpRkczE8b
Lo8BaF37CCI2xp4Z3ZcSqNh2ttEcWEq3AbXuC+sKhZDCTltTnP3S43AyMDdevtO9
lDwBBxqrBb/CHplPYJCSy73HgO7XHcXf
-----END CERTIFICATE-----