Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/306265d5-cd1f-350d-9fec-fdb9c9ae63f3.roa
File:                     306265d5-cd1f-350d-9fec-fdb9c9ae63f3.roa (raw, json)
Hash identifier:          NXYTGIYg3l3Q8d4CWbgCVwT3iSfxbvEIb1d/hTDpbSM=
Subject key identifier:   D8:35:CF:74:31:17:64:2A:5F:E2:0B:89:16:00:B5:D6:B5:49:BC:58
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583FFE77244DC4FC63F136851900
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/306265d5-cd1f-350d-9fec-fdb9c9ae63f3.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        2607:fa4a::/32 maxlen: 64

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fe:77:24:4d:c4:fc:63:f1:36:85:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=9a414fef-7569-4f9c-b52f-900eb4b80d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:92:e6:7b:3a:ec:02:40:b5:b2:bf:86:88:
                    c6:be:f8:4b:29:ad:b1:ff:0f:8e:26:11:b1:bd:b0:
                    2f:3d:ef:a9:53:2c:7f:31:28:de:ec:67:54:0d:c1:
                    30:31:10:a1:16:21:03:f3:10:c9:48:b5:78:10:cf:
                    f6:c7:cd:d5:41:78:31:eb:3a:6b:f7:4a:89:84:a3:
                    4d:8e:5f:b5:01:e5:ad:fb:1e:42:7c:c8:53:85:1c:
                    11:ee:76:30:9c:86:00:5a:44:55:7a:33:0e:02:b9:
                    a1:2d:b1:dc:c9:14:79:50:47:51:68:bb:6d:3e:a4:
                    43:a9:5a:59:7b:a0:85:5d:e6:7d:6f:81:1c:02:33:
                    a3:ba:e3:f6:46:f6:7d:68:1f:ed:37:36:8b:f4:9f:
                    10:b0:07:f7:62:55:0b:84:54:c5:31:de:df:1e:77:
                    83:8c:c1:fd:62:ca:85:6a:b8:35:17:15:68:fe:6f:
                    b2:65:70:a9:ae:99:46:90:6e:85:27:c7:db:a7:ea:
                    ba:86:6d:81:be:f3:8c:21:b4:69:27:b3:7c:04:c7:
                    46:dd:2f:eb:88:b5:8b:12:40:a4:4a:50:e2:c5:ed:
                    93:9c:17:2b:a5:21:62:4d:70:48:35:24:58:7f:3a:
                    a8:c0:05:50:7f:5e:f6:78:af:df:14:c9:c9:07:43:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:35:CF:74:31:17:64:2A:5F:E2:0B:89:16:00:B5:D6:B5:49:BC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/306265d5-cd1f-350d-9fec-fdb9c9ae63f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:86:6f:9e:6b:b3:96:58:50:b1:58:12:19:71:29:06:89:d8:
         2f:0d:e7:fb:85:8f:4a:e2:e3:4a:bd:5b:23:0e:67:a9:0d:16:
         9d:c5:48:df:b7:64:02:a0:e4:87:22:93:5d:bb:5a:32:a5:a2:
         b1:e0:0c:d2:87:62:c5:dd:42:38:12:c4:a0:f8:78:c4:e6:5b:
         78:ab:88:64:28:ef:53:94:cf:15:06:73:65:bb:ef:f7:c4:ac:
         f9:3e:0b:ca:23:1f:d2:86:b0:36:37:05:00:10:30:02:77:f9:
         cc:46:85:bb:68:9d:9d:28:6b:f5:d1:4e:f1:0f:91:fb:ee:4c:
         82:ed:2a:d3:be:26:d5:0e:ec:ad:65:aa:d9:4b:68:46:08:c1:
         9b:7b:b5:f5:34:6f:df:82:91:50:30:27:b2:e6:8e:f2:51:f2:
         f4:6e:65:2b:6e:15:96:a1:3d:4b:39:5e:3c:35:42:0e:09:92:
         3e:ed:58:b9:3b:66:6a:e8:d9:28:f8:e2:38:e4:0a:e2:bb:5f:
         1c:40:52:a4:3d:55:a1:c1:ce:f3:aa:f5:ba:6e:31:0a:98:f6:
         69:10:69:ad:36:b2:a7:0c:ea:27:be:22:42:40:aa:d7:5f:c4:
         e2:70:76:77:23:7f:f1:df:12:54:84:a2:fd:bf:42:8e:da:39:
         54:4c:db:f2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD/+dyRNxPxj8TaFGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTIyMDkxNDE0NDYxM1oXDTI0MTIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
OWE0MTRmZWYtNzU2OS00ZjljLWI1MmYtOTAwZWI0YjgwZDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DaS5ns67AJAtbK/hojGvvhLKa2x/w+OJhGx
vbAvPe+pUyx/MSje7GdUDcEwMRChFiED8xDJSLV4EM/2x83VQXgx6zpr90qJhKNN
jl+1AeWt+x5CfMhThRwR7nYwnIYAWkRVejMOArmhLbHcyRR5UEdRaLttPqRDqVpZ
e6CFXeZ9b4EcAjOjuuP2RvZ9aB/tNzaL9J8QsAf3YlULhFTFMd7fHneDjMH9YsqF
arg1FxVo/m+yZXCprplGkG6FJ8fbp+q6hm2BvvOMIbRpJ7N8BMdG3S/riLWLEkCk
SlDixe2TnBcrpSFiTXBINSRYfzqowAVQf172eK/fFMnJB0OJdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNg1z3QxF2QqX+ILiRYAtda1SbxYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMzA2MjY1ZDUtY2QxZi0z
NTBkLTlmZWMtZmRiOWM5YWU2M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6SjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZhm+ea7OWWFCxWBIZcSkGidgvDef7hY9K4uNKvVsjDmepDRadxUjf
t2QCoOSHIpNdu1oypaKx4AzSh2LF3UI4EsSg+HjE5lt4q4hkKO9TlM8VBnNlu+/3
xKz5PgvKIx/ShrA2NwUAEDACd/nMRoW7aJ2dKGv10U7xD5H77kyC7SrTvibVDuyt
ZarZS2hGCMGbe7X1NG/fgpFQMCey5o7yUfL0bmUrbhWWoT1LOV48NUIOCZI+7Vi5
O2Zq6Nko+OI45Ariu18cQFKkPVWhwc7zqvW6bjEKmPZpEGmtNrKnDOonviJCQKrX
X8TicHZ3I3/x3xJUhKL9v0KO2jlUTNvy
-----END CERTIFICATE-----