Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/c497a55d-9bc1-358c-a513-7367f11992d8.roa
File:                     c497a55d-9bc1-358c-a513-7367f11992d8.roa (raw, json)
Hash identifier:          pLtvnhk6dSMTAyU45MYOMRXZZKXElaVGxJ0EKmznkU0=
Subject key identifier:   67:FF:5C:14:3D:90:30:EC:CC:B9:D5:95:66:77:12:BC:EA:4C:28:98
Certificate issuer:       /CN=99cd086f-b993-42d9-8f47-c65df74d693b
Certificate serial:       010D0C9F4328583D62E84CE3CD50E70277D121A0
Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/c497a55d-9bc1-358c-a513-7367f11992d8.roa
Signing time:             Mon 28 Mar 2022 04:00:00 +0000
ROA not before:           Mon 28 Mar 2022 04:00:00 +0000
ROA not after:            Sun 30 Jun 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        162.255.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:62:e8:4c:e3:cd:50:e7:02:77:d1:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b
        Validity
            Not Before: Mar 28 04:00:00 2022 GMT
            Not After : Jun 30 04:00:00 2024 GMT
        Subject: CN=38483e66-7933-4ec2-a4bf-bcf5a6b8ffe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:e7:05:e6:10:c9:f3:27:c6:6e:26:78:7b:
                    3b:81:a6:e4:24:b7:dd:a6:ad:ca:8a:6b:d7:49:5d:
                    3e:fb:7f:9d:22:00:64:54:1d:56:43:dd:62:b5:e8:
                    35:60:45:f6:24:18:47:93:35:24:08:f7:55:8c:b4:
                    84:15:cf:3b:e1:9d:c0:45:5e:e3:be:d3:d2:28:47:
                    32:e2:0f:c7:fb:f8:88:3f:1c:cf:53:b4:4b:e0:e0:
                    b1:10:b1:90:3e:8c:84:60:0d:b5:ef:3d:d6:f7:67:
                    35:d5:9a:fc:c5:42:b7:ea:cd:82:27:48:4c:5a:23:
                    df:0b:80:86:d5:94:c2:cb:68:39:0a:c6:22:58:cf:
                    ac:b2:f8:21:35:40:9b:81:1e:42:ca:5a:31:e8:2d:
                    ae:95:1b:bd:a7:87:f3:a1:15:68:5e:61:34:14:b0:
                    24:f0:0c:bd:79:82:bc:48:1c:f3:62:c7:6b:9e:3d:
                    13:91:fc:30:ce:3f:30:a5:ec:b2:6b:93:17:ff:11:
                    b1:e5:71:d7:a5:cb:a1:1c:3a:37:58:10:2f:05:36:
                    84:7f:58:9f:c5:50:df:54:36:62:da:72:eb:b1:e0:
                    aa:07:e4:9f:d1:6d:11:d2:97:1b:42:a9:8e:36:30:
                    09:0e:59:77:85:e9:dd:2f:1c:1e:b5:4b:cc:a0:03:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:5C:14:3D:90:30:EC:CC:B9:D5:95:66:77:12:BC:EA:4C:28:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/c497a55d-9bc1-358c-a513-7367f11992d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:4c:19:11:b1:4c:75:54:b6:a2:f4:98:b0:26:4a:e9:71:
         2c:0c:b3:40:c6:3d:36:bb:0c:63:c7:e9:d0:42:74:1f:0f:44:
         2d:82:92:84:83:b4:f1:d8:09:16:25:3e:18:72:6a:69:5e:1e:
         6f:87:ef:94:48:7a:fb:e8:d4:f1:29:05:7c:60:bf:4f:ac:57:
         5c:df:aa:73:23:eb:d6:3c:dc:0e:b5:3c:4b:61:8a:61:fc:68:
         c6:67:4d:3e:9c:84:77:fd:25:b0:ca:fc:63:b8:5f:1f:91:c3:
         7b:c1:8b:11:26:76:01:09:01:27:43:fb:8e:1c:fc:07:78:d0:
         42:f1:61:94:a1:64:4c:64:47:44:5b:d1:93:75:c8:d3:44:0e:
         a7:5e:a3:27:52:a0:3f:bd:48:17:18:e4:a6:ef:0b:98:75:c8:
         e0:f2:11:89:bc:93:f6:4c:79:a7:02:d2:ff:c7:4f:05:5f:2d:
         25:d1:cf:15:da:e3:8e:d0:2e:11:9f:85:e8:65:f5:7f:6b:57:
         ca:89:3b:a7:ab:80:22:53:b4:0b:19:ac:78:8a:55:c4:9f:e1:
         a1:84:2e:a1:1e:10:6e:5c:ad:77:61:fe:da:14:c6:68:2c:04:
         c5:b8:bf:ea:e8:1d:ff:79:e2:78:f0:d3:b4:f4:d2:e8:06:da:
         2f:73:49:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1i6EzjzVDnAnfRIaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2
OTNiMB4XDTIyMDMyODA0MDAwMFoXDTI0MDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
Mzg0ODNlNjYtNzkzMy00ZWMyLWE0YmYtYmNmNWE2YjhmZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRrnBeYQyfMnxm4meHs7gabkJLfdpq3KimvX
SV0++3+dIgBkVB1WQ91iteg1YEX2JBhHkzUkCPdVjLSEFc874Z3ARV7jvtPSKEcy
4g/H+/iIPxzPU7RL4OCxELGQPoyEYA217z3W92c11Zr8xUK36s2CJ0hMWiPfC4CG
1ZTCy2g5CsYiWM+ssvghNUCbgR5Cylox6C2ulRu9p4fzoRVoXmE0FLAk8Ay9eYK8
SBzzYsdrnj0Tkfwwzj8wpeyya5MX/xGx5XHXpcuhHDo3WBAvBTaEf1ifxVDfVDZi
2nLrseCqB+Sf0W0R0pcbQqmONjAJDll3hendLxwetUvMoANt5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGf/XBQ9kDDszLnVlWZ3ErzqTCiYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk
MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvYzQ5N2E1NWQtOWJjMS0z
NThjLWE1MTMtNzM2N2YxMTk5MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm
NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk
NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk
Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov+YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDFTBkRsUx1VLai9JiwJkrpcSwMs0DGPTa7DGPH6dBCdB8PRC2CkoSD
tPHYCRYlPhhyamleHm+H75RIevvo1PEpBXxgv0+sV1zfqnMj69Y83A61PEthimH8
aMZnTT6chHf9JbDK/GO4Xx+Rw3vBixEmdgEJASdD+44c/Ad40ELxYZShZExkR0Rb
0ZN1yNNEDqdeoydSoD+9SBcY5KbvC5h1yODyEYm8k/ZMeacC0v/HTwVfLSXRzxXa
447QLhGfhehl9X9rV8qJO6ergCJTtAsZrHiKVcSf4aGELqEeEG5crXdh/toUxmgs
BMW4v+roHf954njw07T00ugG2i9zSYI=
-----END CERTIFICATE-----