Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/cb854c34-8ba9-352e-bcbf-addfb81002f4.roa
File:                     cb854c34-8ba9-352e-bcbf-addfb81002f4.roa (raw, json)
Hash identifier:          0JGgb48iJuVS4oxAB9b7oRPKGmOxUTwVUgdE4ZcOnOg=
Subject key identifier:   DB:3E:D1:90:37:C7:23:33:8E:A4:FD:65:CD:69:AE:B6:99:0D:A4:51
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328583F865A321A7F2830BEA3C54100
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/cb854c34-8ba9-352e-bcbf-addfb81002f4.roa
Signing time:             Tue 04 Oct 2022 18:05:39 +0000
ROA not before:           Tue 04 Oct 2022 18:05:39 +0000
ROA not after:            Mon 06 Jan 2025 05:00:00 +0000
asID:                     14773
IP address blocks:        2620:1d5:ffe::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:86:5a:32:1a:7f:28:30:be:a3:c5:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Oct  4 18:05:39 2022 GMT
            Not After : Jan  6 05:00:00 2025 GMT
        Subject: CN=ac33170a-acba-4687-9226-a4d9789a0d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fe:d5:54:c1:c9:d7:89:aa:ca:fa:72:b9:89:
                    54:57:cd:39:68:5c:17:4f:80:58:2f:17:69:3a:d4:
                    95:17:69:27:3b:60:76:bb:7d:8c:0d:01:0f:16:32:
                    75:73:e5:99:01:99:ce:09:98:55:58:72:f1:27:04:
                    33:cd:00:73:dc:94:be:c6:1d:db:1a:51:57:21:08:
                    ff:dd:ab:7e:6e:6e:15:a6:f6:af:5a:44:c6:5e:dd:
                    08:88:32:25:b6:e3:10:90:49:47:37:4f:fa:91:20:
                    5c:a2:66:61:47:61:a9:69:71:17:26:e8:a6:81:36:
                    88:57:d3:21:ad:55:e9:c1:e6:59:bd:6f:a8:1f:ac:
                    18:42:1c:d7:82:a1:22:b1:92:30:e4:fa:ca:ab:87:
                    d2:64:f4:22:f6:99:81:32:1d:68:ce:a4:d4:46:67:
                    37:63:eb:14:f3:e0:6f:23:52:5e:e3:06:28:e0:32:
                    ce:f7:8b:a9:06:4b:25:8f:03:d9:8d:fc:08:c3:47:
                    ee:23:bb:db:70:d5:f2:ec:c6:8b:6c:ef:ac:84:71:
                    7f:66:c1:e3:4b:59:d2:74:01:a3:35:fb:99:01:36:
                    bb:fe:dd:95:e6:85:d6:37:0c:e6:9a:79:f4:62:ad:
                    60:01:0d:8a:e0:90:78:3e:1d:b9:63:e3:be:ce:2d:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3E:D1:90:37:C7:23:33:8E:A4:FD:65:CD:69:AE:B6:99:0D:A4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/cb854c34-8ba9-352e-bcbf-addfb81002f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ffe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:06:4c:73:a5:11:6d:88:28:09:ee:9d:d5:9a:86:ce:1c:d3:
         e4:d0:6d:67:2b:08:7d:36:93:20:a2:b2:e5:08:ac:0e:13:cc:
         4b:87:07:ce:c4:03:c9:2e:cd:4f:da:40:93:0d:9b:24:aa:46:
         1f:e9:50:59:6a:27:4d:1c:10:5e:3c:8a:db:94:c9:01:9a:f7:
         2e:15:f9:aa:2c:46:a9:90:40:bc:c9:c0:05:a8:58:6e:2c:34:
         1c:96:6f:cc:d5:c6:7e:d2:bc:52:c3:ec:a4:43:d1:4d:18:f5:
         b7:7a:4c:d8:8e:28:dc:35:0f:0e:e1:62:0f:db:fb:e1:3b:c3:
         42:47:df:d1:cd:61:44:f5:b2:58:f2:86:f2:64:e9:48:7f:14:
         fc:60:eb:a7:f2:17:2f:43:21:57:27:d9:ef:38:00:28:31:9a:
         4f:16:df:a8:4c:be:67:21:35:db:c7:1e:3f:e7:4a:42:4c:77:
         1b:07:80:a0:0b:1e:06:8e:97:d9:c5:a2:4b:dd:93:6c:66:67:
         9e:d2:ea:a7:7f:c6:8a:0d:3c:62:75:5a:6b:2c:74:18:75:c7:
         01:be:f5:be:af:71:a6:75:de:25:9a:b1:fe:20:07:a2:44:82:
         3a:86:69:ad:6b:c7:60:53:3d:7a:68:b0:12:ce:3d:b2:4a:8c:
         84:ce:37:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+GWjIafygwvqPFQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc2N2VhMTYtNzJiNC00MDJhLTliMmYtNzU4M2ZlMzkw
YmI3MB4XDTIyMTAwNDE4MDUzOVoXDTI1MDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
YWMzMzE3MGEtYWNiYS00Njg3LTkyMjYtYTRkOTc4OWEwZDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/7VVMHJ14mqyvpyuYlUV805aFwXT4BYLxdp
OtSVF2knO2B2u32MDQEPFjJ1c+WZAZnOCZhVWHLxJwQzzQBz3JS+xh3bGlFXIQj/
3at+bm4VpvavWkTGXt0IiDIltuMQkElHN0/6kSBcomZhR2GpaXEXJuimgTaIV9Mh
rVXpweZZvW+oH6wYQhzXgqEisZIw5PrKq4fSZPQi9pmBMh1ozqTURmc3Y+sU8+Bv
I1Je4wYo4DLO94upBksljwPZjfwIw0fuI7vbcNXy7MaLbO+shHF/ZsHjS1nSdAGj
NfuZATa7/t2V5oXWNwzmmnn0Yq1gAQ2K4JB4Ph25Y+O+zi3njwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNs+0ZA3xyMzjqT9Zc1prraZDaRRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3
ZWExNi03MmI0LTQwMmEtOWIyZi03NTgzZmUzOTBiYjcvY2I4NTRjMzQtOGJhOS0z
NTJlLWJjYmYtYWRkZmI4MTAwMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc2N2VhMTYtNzJiNC00MDJhLTli
MmYtNzU4M2ZlMzkwYmI3L2Y3NjdlYTE2LTcyYjQtNDAyYS05YjJmLTc1ODNmZTM5
MGJiNy5jcmwwHwYDVR0jBBgwFoAUesYuc/uCJzFiX8COdvsgVaYFuSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3ZWExNi03MmI0LTQwMmEtOWIyZi03NTgz
ZmUzOTBiYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB1Q/+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEcGTHOlEW2IKAnundWahs4c0+TQbWcrCH02kyCisuUIrA4TzEuH
B87EA8kuzU/aQJMNmySqRh/pUFlqJ00cEF48ituUyQGa9y4V+aosRqmQQLzJwAWo
WG4sNByWb8zVxn7SvFLD7KRD0U0Y9bd6TNiOKNw1Dw7hYg/b++E7w0JH39HNYUT1
sljyhvJk6Uh/FPxg66fyFy9DIVcn2e84ACgxmk8W36hMvmchNdvHHj/nSkJMdxsH
gKALHgaOl9nFokvdk2xmZ57S6qd/xooNPGJ1WmssdBh1xwG+9b6vcaZ13iWasf4g
B6JEgjqGaa1rx2BTPXposBLOPbJKjITON50=
-----END CERTIFICATE-----