Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/8295171c-b82d-3a73-aeac-d850878e40cb.roa
File:                     8295171c-b82d-3a73-aeac-d850878e40cb.roa (raw, json)
Hash identifier:          Y4eP6epbSdO2J0v3/B3jf7mxLYAyGFOBHEn1EmkDnGw=
Subject key identifier:   7F:56:1B:3F:60:64:0F:71:97:2D:E4:32:CA:3A:C6:8B:D2:19:14:C8
Certificate issuer:       /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial:       010D0C9F4328583DB80636E59288BE6D4C628280
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/8295171c-b82d-3a73-aeac-d850878e40cb.roa
Signing time:             Mon 28 Mar 2022 13:35:32 +0000
ROA not before:           Mon 28 Mar 2022 13:35:32 +0000
ROA not after:            Tue 30 Jul 2024 04:00:00 +0000
asID:                     400550
IP address blocks:        2602:fb9e:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 28 Apr 2022 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b8:06:36:e5:92:88:be:6d:4c:62:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Validity
            Not Before: Mar 28 13:35:32 2022 GMT
            Not After : Jul 30 04:00:00 2024 GMT
        Subject: CN=cf858c22-b88c-487e-bf0d-9e1a4bcdd8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:d7:53:55:75:26:3d:ab:4d:c9:c6:85:98:
                    62:b7:d1:c5:51:60:0c:de:11:d7:4e:66:de:ec:4b:
                    95:f7:6f:06:41:1c:68:41:80:23:dc:47:ea:fb:f8:
                    c7:c4:e1:7e:e5:9d:5e:72:2c:c3:2b:47:0e:dc:41:
                    13:a1:f8:47:35:5b:2e:60:13:21:d1:35:33:bd:71:
                    32:82:30:c7:5f:b3:80:69:9b:ed:40:c7:13:33:9f:
                    f8:7b:f3:81:d3:7e:ec:d7:e7:8a:f3:b4:72:a7:78:
                    c7:58:0c:c8:15:e5:bc:62:83:fb:90:00:04:00:4c:
                    86:83:80:bb:96:61:4a:88:37:ea:a1:fe:22:3d:6c:
                    2a:26:b0:ae:f9:c7:bc:6f:a0:15:e4:7c:6c:06:af:
                    7c:a4:62:ed:0d:db:ed:19:f7:3b:ec:7d:46:6b:00:
                    46:72:40:c4:0b:30:bd:18:f3:ed:ce:23:6e:69:12:
                    f3:0f:aa:b1:bd:47:e9:6e:b2:ef:44:df:71:cb:1f:
                    40:85:c8:99:94:d5:11:a9:bf:6e:91:3d:e4:8c:6a:
                    29:55:77:36:54:3d:f8:89:54:f9:d4:31:1a:5f:06:
                    75:b2:5b:94:b3:81:e5:22:ef:23:43:60:e1:93:7a:
                    97:2d:80:84:09:16:be:dc:21:25:77:f0:05:3d:2a:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:56:1B:3F:60:64:0F:71:97:2D:E4:32:CA:3A:C6:8B:D2:19:14:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/8295171c-b82d-3a73-aeac-d850878e40cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl

            X509v3 Authority Key Identifier:
                keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb9e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:08:c3:38:3d:93:58:36:e2:8d:c2:45:e1:08:9b:0b:2c:d9:
         51:59:13:a4:56:27:d4:2e:ac:89:5e:d6:b4:76:ba:f1:e4:0d:
         e3:09:1d:5d:90:d1:f9:94:6d:1e:b9:81:5c:52:d1:64:1a:c0:
         6e:6f:3c:ab:52:8d:d0:1e:34:5d:38:fb:cd:f8:c1:e8:24:08:
         12:ac:2a:02:dc:43:b4:df:96:9b:df:03:ba:04:ea:c5:57:46:
         0a:6a:f0:bb:41:e1:cb:97:a8:28:42:9c:b2:c7:0b:0c:c4:89:
         df:6d:3a:67:60:7d:f0:2b:05:6d:8d:85:6d:ea:0d:67:91:18:
         cf:f2:17:52:c7:89:74:1c:84:f1:cd:21:89:17:51:51:b8:a8:
         96:3b:8b:74:3d:7b:ff:e0:8e:92:62:dd:9f:f8:d1:c7:53:fa:
         ce:77:5c:fc:8e:85:ad:34:81:e2:b5:02:c7:ba:46:aa:0a:e6:
         0d:05:c4:ea:75:6a:fa:e5:fb:0f:9d:17:2a:6d:d6:59:1c:bf:
         75:76:ec:44:8a:ce:38:3b:2a:30:53:78:19:81:07:35:5c:ee:
         97:ff:2e:8a:92:46:5e:32:93:7e:c8:5e:1c:93:83:7e:04:d7:
         1e:7d:a6:1d:e0:9c:b2:4a:6a:45:fc:8e:92:2c:55:49:3f:a1:
         61:98:86:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD24Bjblkoi+bUxigoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYzNjlhMDQtZDlmYy00ZGQ4LWJjOTYtY2YyMmFmMDg0
ODQzMB4XDTIyMDMyODEzMzUzMloXDTI0MDczMDA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Y4NThjMjItYjg4Yy00ODdlLWJmMGQtOWUxYTRiY2RkOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXrXU1V1Jj2rTcnGhZhit9HFUWAM3hHXTmbe
7EuV928GQRxoQYAj3Efq+/jHxOF+5Z1ecizDK0cO3EETofhHNVsuYBMh0TUzvXEy
gjDHX7OAaZvtQMcTM5/4e/OB037s1+eK87Ryp3jHWAzIFeW8YoP7kAAEAEyGg4C7
lmFKiDfqof4iPWwqJrCu+ce8b6AV5HxsBq98pGLtDdvtGfc77H1GawBGckDECzC9
GPPtziNuaRLzD6qxvUfpbrLvRN9xyx9AhciZlNURqb9ukT3kjGopVXc2VD34iVT5
1DEaXwZ1sluUs4HlIu8jQ2Dhk3qXLYCECRa+3CEld/AFPSrqZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH9WGz9gZA9xly3kMso6xovSGRTIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2
OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIyYWYwODQ4NDMvODI5NTE3MWMtYjgyZC0z
YTczLWFlYWMtZDg1MDg3OGU0MGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDYzNjlhMDQtZDlmYy00ZGQ4LWJj
OTYtY2YyMmFmMDg0ODQzLzQ2MzY5YTA0LWQ5ZmMtNGRkOC1iYzk2LWNmMjJhZjA4
NDg0My5jcmwwHwYDVR0jBBgwFoAUuWi3LSclH4svCBQeUP6CdKa7wA0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIy
YWYwODQ4NDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7ngAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJYIwzg9k1g24o3CReEImwss2VFZE6RWJ9QurIle1rR2uvHkDeMJ
HV2Q0fmUbR65gVxS0WQawG5vPKtSjdAeNF04+834wegkCBKsKgLcQ7TflpvfA7oE
6sVXRgpq8LtB4cuXqChCnLLHCwzEid9tOmdgffArBW2NhW3qDWeRGM/yF1LHiXQc
hPHNIYkXUVG4qJY7i3Q9e//gjpJi3Z/40cdT+s53XPyOha00geK1Ase6RqoK5g0F
xOp1avrl+w+dFypt1lkcv3V27ESKzjg7KjBTeBmBBzVc7pf/LoqSRl4yk37IXhyT
g34E1x59ph3gnLJKakX8jpIsVUk/oWGYhps=
-----END CERTIFICATE-----