Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/37aeb30b-9d8a-382f-9ac9-fb515c424369.roa
File:                     37aeb30b-9d8a-382f-9ac9-fb515c424369.roa (raw, json)
Hash identifier:          AvzMYknsPKsjIFLzuJFn5oX/I6zzO9wGv2WRve/6Q1k=
Subject key identifier:   D9:72:18:7A:12:CB:26:81:BA:E8:36:A3:9F:2D:FD:FD:30:D0:42:64
Certificate issuer:       /CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d
Certificate serial:       010D0C9F432858409DFA59D806795120C3E6FC80
Authority key identifier: 2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/37aeb30b-9d8a-382f-9ac9-fb515c424369.roa
Signing time:             Wed 07 Dec 2022 21:37:16 +0000
ROA not before:           Wed 07 Dec 2022 21:37:16 +0000
ROA not after:            Tue 11 Mar 2025 04:00:00 +0000
asID:                     13994
IP address blocks:        144.86.192.0/22 maxlen: 22
                          207.188.20.0/22 maxlen: 22
                          2607:3100::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9d:fa:59:d8:06:79:51:20:c3:e6:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d
        Validity
            Not Before: Dec  7 21:37:16 2022 GMT
            Not After : Mar 11 04:00:00 2025 GMT
        Subject: CN=7fb39290-e832-4516-9d1f-26bc752eb8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:b3:31:de:2e:68:bd:cf:70:85:ce:fc:8b:
                    64:7b:18:63:d0:98:b5:a8:86:f9:e8:d5:57:ee:57:
                    59:5e:94:60:10:b7:cf:67:90:b1:99:88:31:50:52:
                    31:30:d1:ca:35:7e:87:1a:bf:38:11:d3:e4:6a:84:
                    33:ab:f6:6c:77:47:80:b4:6f:4a:e9:4f:a4:a8:c0:
                    54:d3:45:47:35:f6:3b:7f:a5:f9:1f:17:ea:24:45:
                    89:ce:f4:c8:3e:99:b8:ba:99:61:a8:4d:ad:24:fb:
                    14:f0:11:4c:89:d7:a6:9f:17:30:20:ae:99:78:aa:
                    26:25:23:6d:d0:e2:cb:d2:23:88:5b:5c:e2:a2:97:
                    2c:bd:77:68:f5:da:82:50:c9:7f:4f:72:83:8c:79:
                    db:66:3e:9c:e3:00:5a:4c:cf:6c:1d:19:1f:99:96:
                    b6:7a:80:b4:4d:13:54:e8:34:32:7b:ac:d5:6f:e8:
                    73:59:9c:08:1a:4e:0a:61:ad:5e:16:72:64:b3:91:
                    21:a1:d2:82:0b:6f:8c:7a:bf:5d:f9:55:b9:af:69:
                    0c:d9:77:43:e1:93:b0:38:84:6a:29:5a:1f:58:c1:
                    68:b3:31:0b:67:14:48:26:b4:21:14:a0:e3:a1:e1:
                    a4:59:8a:a3:b9:66:05:8a:68:cf:1e:33:36:a2:30:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:18:7A:12:CB:26:81:BA:E8:36:A3:9F:2D:FD:FD:30:D0:42:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/37aeb30b-9d8a-382f-9ac9-fb515c424369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.192.0/22
                  207.188.20.0/22
                IPv6:
                  2607:3100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:61:ab:ac:85:e5:51:07:32:83:85:40:b9:55:32:54:dd:bf:
         64:71:47:49:54:1b:86:33:42:1b:32:4f:f0:7f:37:48:ff:b9:
         5d:0e:bb:5a:57:e2:91:66:78:1a:14:da:9e:97:9e:ba:81:8f:
         26:2e:f1:df:a6:03:06:09:d2:3f:e9:df:2a:0e:ed:c3:42:fa:
         20:1d:6a:ae:3f:53:c4:6d:09:21:2f:61:89:e0:b4:90:01:55:
         0d:4b:9c:3b:62:f5:cd:4c:49:1c:d9:f0:58:af:1d:88:c1:3e:
         16:2e:87:09:ac:3a:7f:98:fe:68:db:9f:bd:be:4c:00:90:d1:
         83:6c:98:b9:79:29:e8:cc:3d:39:d1:68:17:15:6f:be:9a:1d:
         fd:88:4d:db:ed:36:82:8e:57:79:6a:55:59:55:75:46:21:cf:
         9f:7c:2c:55:bf:ec:6b:36:5f:e2:38:59:54:39:8e:1e:72:cc:
         00:c7:e3:bf:06:09:3b:4b:08:31:a0:7d:a8:6c:ce:68:b0:ce:
         99:b0:fb:02:8e:f5:40:6b:0f:0c:64:10:f8:1a:93:d9:91:05:
         30:b1:eb:06:4b:ff:cd:ef:00:1b:11:03:fb:a0:fd:4f:fe:76:
         34:21:dc:6d:8c:b1:00:25:96:e7:7b:1c:5e:a1:d6:06:a7:11:
         b1:14:d2:d3
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWECd+lnYBnlRIMPm/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNlYmY0YjMtZjIyMy00ZGNmLWI0NjYtNTc1N2RjOTFh
MTBkMB4XDTIyMTIwNzIxMzcxNloXDTI1MDMxMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2ZiMzkyOTAtZTgzMi00NTE2LTlkMWYtMjZiYzc1MmViOGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirmzMd4uaL3PcIXO/Itkexhj0Ji1qIb56NVX
7ldZXpRgELfPZ5CxmYgxUFIxMNHKNX6HGr84EdPkaoQzq/Zsd0eAtG9K6U+kqMBU
00VHNfY7f6X5HxfqJEWJzvTIPpm4uplhqE2tJPsU8BFMidemnxcwIK6ZeKomJSNt
0OLL0iOIW1ziopcsvXdo9dqCUMl/T3KDjHnbZj6c4wBaTM9sHRkfmZa2eoC0TRNU
6DQye6zVb+hzWZwIGk4KYa1eFnJks5EhodKCC2+Mer9d+VW5r2kM2XdD4ZOwOIRq
KVofWMFoszELZxRIJrQhFKDjoeGkWYqjuWYFimjPHjM2ojAftwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFNlyGHoSyyaBuug2o58t/f0w0EJkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2Vi
ZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3ZGM5MWExMGQvMzdhZWIzMGItOWQ4YS0z
ODJmLTlhYzktZmI1MTVjNDI0MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGNlYmY0YjMtZjIyMy00ZGNmLWI0
NjYtNTc1N2RjOTFhMTBkLzBjZWJmNGIzLWYyMjMtNGRjZi1iNDY2LTU3NTdkYzkx
YTEwZC5jcmwwHwYDVR0jBBgwFoAULLHGbzB2Te28YC5I5jnAZiUJO/owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2ViZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3
ZGM5MWExMGQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCkFbAAwQC
z7wUMA0EAgACMAcDBQAmBzEAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAABhq6yF5VEHMoOFQLlVMlTdv2Rx
R0lUG4YzQhsyT/B/N0j/uV0Ou1pX4pFmeBoU2p6XnrqBjyYu8d+mAwYJ0j/p3yoO
7cNC+iAdaq4/U8RtCSEvYYngtJABVQ1LnDti9c1MSRzZ8FivHYjBPhYuhwmsOn+Y
/mjbn72+TACQ0YNsmLl5KejMPTnRaBcVb76aHf2ITdvtNoKOV3lqVVlVdUYhz598
LFW/7Gs2X+I4WVQ5jh5yzADH478GCTtLCDGgfahszmiwzpmw+wKO9UBrDwxkEPga
k9mRBTCx6wZL/83vABsRA/ug/U/+djQh3G2MsQAllud7HF6h1ganEbEU0tM=
-----END CERTIFICATE-----