Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/5107aed3-3f83-321a-a981-61f32bbb7d8e.roa
File:                     5107aed3-3f83-321a-a981-61f32bbb7d8e.roa (raw, json)
Hash identifier:          W63jXpMhjPUJclEIxGM2RDcTaWAK9XRtzK0qkaiojsY=
Subject key identifier:   A7:B7:E2:BA:A5:37:B7:46:17:D0:7C:DD:CE:3C:BC:F1:CC:5E:A1:AB
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328583F75D72934014520693A48CC80
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/5107aed3-3f83-321a-a981-61f32bbb7d8e.roa
Signing time:             Tue 04 Oct 2022 18:05:39 +0000
ROA not before:           Tue 04 Oct 2022 18:05:39 +0000
ROA not after:            Mon 30 Dec 2024 05:00:00 +0000
asID:                     14773
IP address blocks:        2620:1d5::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:75:d7:29:34:01:45:20:69:3a:48:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Oct  4 18:05:39 2022 GMT
            Not After : Dec 30 05:00:00 2024 GMT
        Subject: CN=d8f0148d-f5dc-4190-bcf8-3f777d897ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:ed:37:f0:08:2b:c0:3e:76:8a:e6:a8:fa:
                    ca:68:d8:32:73:cd:52:30:fe:c6:7f:43:9f:8a:f4:
                    2c:32:72:68:58:01:1b:c9:e3:aa:f9:24:ef:11:17:
                    a7:ac:3c:89:67:25:f7:ce:87:10:57:d3:fe:12:52:
                    6c:72:a7:19:e5:97:32:f8:8f:28:d8:94:59:76:5d:
                    15:13:e9:69:d6:3a:20:f2:f8:d3:3c:10:0c:bc:00:
                    a0:f1:fb:b7:8a:b6:2b:e2:88:23:42:92:a2:73:2f:
                    de:78:45:fa:36:bc:2e:8f:dd:eb:1f:80:3b:a0:64:
                    96:70:c8:c7:55:0a:ef:aa:37:9b:98:99:ce:c2:12:
                    9c:7a:b1:90:52:11:a0:0c:d6:da:83:e1:aa:4a:cc:
                    be:fe:3a:3f:3e:82:84:5b:67:90:61:34:25:86:70:
                    01:9b:5d:6b:10:6a:94:22:d8:cb:ab:1d:a2:2c:2f:
                    51:ad:56:26:6d:67:fd:6a:36:d6:5d:a1:90:1b:a1:
                    e4:5a:f2:35:7b:30:28:f4:2a:b9:bb:6d:46:36:bf:
                    96:6d:73:c1:cf:57:10:75:68:e2:de:7d:9f:f8:fd:
                    f7:9e:f7:53:48:78:6d:cb:6f:c7:c8:25:44:83:aa:
                    e4:0f:e4:a7:c0:10:72:74:42:8d:f4:2c:8a:05:8c:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:E2:BA:A5:37:B7:46:17:D0:7C:DD:CE:3C:BC:F1:CC:5E:A1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/5107aed3-3f83-321a-a981-61f32bbb7d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:01:e6:6e:a2:98:d8:d4:a5:a0:8c:61:a3:eb:d9:ec:d0:
         70:c9:c7:8e:7c:64:a6:71:b1:f1:e2:d5:8f:8f:7c:89:55:6b:
         b1:c6:40:43:48:7f:47:77:83:86:0f:f4:a8:4b:4e:fc:90:8e:
         05:c1:26:d1:ed:4f:3c:ca:1f:62:00:55:7d:63:5f:f1:a7:e9:
         c8:4d:32:a9:79:26:24:1b:bb:0a:8c:b6:a1:af:3e:51:c3:2c:
         a8:12:e1:c0:1a:1c:7b:91:7e:2a:d7:d1:41:80:75:de:e8:37:
         d5:b0:db:2a:cc:80:41:c8:11:ae:bc:0e:6a:bb:4a:bb:3f:fc:
         f4:2d:57:ac:77:a6:0a:80:1d:b2:27:50:1e:da:1a:7d:4e:84:
         51:4b:34:f5:ce:f9:0b:7e:da:6f:ab:95:38:8e:e1:97:e5:69:
         f6:6d:3c:a5:f6:ad:ee:ba:44:da:b6:e2:cc:25:e2:3b:a1:e3:
         a1:7d:06:8a:2e:29:9a:e5:8b:bf:fd:bf:df:1d:a5:dd:ae:1b:
         93:2d:9c:ee:0b:b8:09:15:11:b0:23:fd:c9:be:fb:57:0c:26:
         02:92:70:21:29:a3:66:ba:81:0b:f4:1b:cd:a3:46:0e:ce:82:
         99:77:4d:78:57:c0:37:b8:f2:e7:71:75:39:ed:3b:d1:28:26:
         04:33:f1:60
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWD911yk0AUUgaTpIzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc2N2VhMTYtNzJiNC00MDJhLTliMmYtNzU4M2ZlMzkw
YmI3MB4XDTIyMTAwNDE4MDUzOVoXDTI0MTIzMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZDhmMDE0OGQtZjVkYy00MTkwLWJjZjgtM2Y3NzdkODk3YWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO3tN/AIK8A+dormqPrKaNgyc81SMP7Gf0Of
ivQsMnJoWAEbyeOq+STvERenrDyJZyX3zocQV9P+ElJscqcZ5Zcy+I8o2JRZdl0V
E+lp1jog8vjTPBAMvACg8fu3irYr4ogjQpKicy/eeEX6Nrwuj93rH4A7oGSWcMjH
VQrvqjebmJnOwhKcerGQUhGgDNbag+GqSsy+/jo/PoKEW2eQYTQlhnABm11rEGqU
ItjLqx2iLC9RrVYmbWf9ajbWXaGQG6HkWvI1ezAo9Cq5u21GNr+WbXPBz1cQdWji
3n2f+P33nvdTSHhty2/HyCVEg6rkD+SnwBBydEKN9CyKBYyv6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKe34rqlN7dGF9B83c48vPHMXqGrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3
ZWExNi03MmI0LTQwMmEtOWIyZi03NTgzZmUzOTBiYjcvNTEwN2FlZDMtM2Y4My0z
MjFhLWE5ODEtNjFmMzJiYmI3ZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc2N2VhMTYtNzJiNC00MDJhLTli
MmYtNzU4M2ZlMzkwYmI3L2Y3NjdlYTE2LTcyYjQtNDAyYS05YjJmLTc1ODNmZTM5
MGJiNy5jcmwwHwYDVR0jBBgwFoAUesYuc/uCJzFiX8COdvsgVaYFuSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3ZWExNi03MmI0LTQwMmEtOWIyZi03NTgz
ZmUzOTBiYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAB1QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFfMB5m6imNjUpaCMYaPr2ezQcMnHjnxkpnGx8eLVj498iVVrscZA
Q0h/R3eDhg/0qEtO/JCOBcEm0e1PPMofYgBVfWNf8afpyE0yqXkmJBu7Coy2oa8+
UcMsqBLhwBoce5F+KtfRQYB13ug31bDbKsyAQcgRrrwOartKuz/89C1XrHemCoAd
sidQHtoafU6EUUs09c75C37ab6uVOI7hl+Vp9m08pfat7rpE2rbizCXiO6HjoX0G
ii4pmuWLv/2/3x2l3a4bky2c7gu4CRURsCP9yb77VwwmApJwISmjZrqBC/QbzaNG
Ds6CmXdNeFfAN7jy53F1Oe070SgmBDPxYA==
-----END CERTIFICATE-----