Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0f99a7ca-7627-34f8-b37f-1bcfdd3de7ae.roa
File:                     0f99a7ca-7627-34f8-b37f-1bcfdd3de7ae.roa (raw, json)
Hash identifier:          KullrIUAOBemiDBSE8Wd67CBiWsGtnOuRTG62t0eRdI=
Subject key identifier:   B9:82:98:37:E3:A2:CB:86:F2:1B:10:B4:F9:ED:8E:CD:DA:30:CD:81
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F432858406912C41B41C281B786D25300
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0f99a7ca-7627-34f8-b37f-1bcfdd3de7ae.roa
Signing time:             Fri 30 Dec 2022 19:32:05 +0000
ROA not before:           Fri 30 Dec 2022 19:32:05 +0000
ROA not after:            Mon 30 Dec 2024 05:00:00 +0000
asID:                     13536
IP address blocks:        2606:9800::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Jan 2023 21:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:69:12:c4:1b:41:c2:81:b7:86:d2:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Dec 30 19:32:05 2022 GMT
            Not After : Dec 30 05:00:00 2024 GMT
        Subject: CN=57264d8e-a07b-4a95-9820-9d20c174bb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:32:bd:3c:81:61:36:f2:98:c9:45:fa:a5:
                    5e:0c:61:45:21:0f:b4:91:3e:1c:ca:5e:f4:d1:4f:
                    79:04:d7:31:90:bc:d9:8d:23:0a:e4:b1:71:56:49:
                    39:78:6d:3b:28:0c:6e:93:07:cc:74:e7:cb:bb:df:
                    06:06:97:05:81:a8:c4:63:82:6b:ea:28:93:f3:1b:
                    af:6d:f6:6e:9e:de:2e:31:59:10:d4:ee:69:90:80:
                    82:49:d6:63:27:4b:9a:8f:06:e3:d0:9f:00:0c:40:
                    75:0b:dc:e0:22:b9:23:0a:f5:54:ff:25:3f:b9:13:
                    45:6e:4c:2b:5a:1b:72:82:fa:18:5d:2e:cd:ea:31:
                    0b:9c:cb:32:e6:67:3f:32:9e:9e:71:7e:46:b9:43:
                    26:e6:71:ff:4f:e9:12:7c:dd:6c:0c:8c:46:3f:e5:
                    fe:73:85:94:64:17:94:90:86:25:2d:7e:3c:e9:73:
                    81:b3:4c:02:cc:65:53:a1:ac:30:2d:55:6e:e6:ea:
                    0a:3d:44:83:26:11:a2:75:9d:3c:e7:78:7a:3a:f1:
                    a1:58:a5:58:c0:89:a1:01:cf:6a:ef:51:f2:62:d2:
                    d2:5d:c4:d2:7c:48:b9:3b:be:e3:0c:20:7a:4a:3f:
                    75:ce:6f:1f:8a:f6:2a:27:b1:19:db:6f:5e:21:9e:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:98:37:E3:A2:CB:86:F2:1B:10:B4:F9:ED:8E:CD:DA:30:CD:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0f99a7ca-7627-34f8-b37f-1bcfdd3de7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a3:fa:07:60:13:5f:1d:9b:c7:3c:3c:7b:45:6f:31:dd:36:
         16:49:70:c8:a8:8e:0e:72:28:39:39:e6:c2:3d:e5:06:d5:3a:
         47:a3:f3:1c:35:1e:13:28:7b:9f:72:89:1b:39:d3:f1:09:96:
         23:4c:13:ea:ed:39:60:9a:e7:91:61:32:e5:b9:63:45:3e:e6:
         22:ab:2b:3f:6a:00:b0:20:86:92:16:06:b2:13:4f:ea:2e:14:
         2a:d3:6d:7e:ae:63:f6:e2:50:a6:73:d3:23:85:3a:89:92:d5:
         fc:4d:1e:23:9e:b7:67:20:a0:0d:ad:f8:37:32:c3:b1:9a:b6:
         cd:ee:44:d7:4e:95:c0:78:bd:19:47:97:f8:a5:d4:6b:dd:49:
         73:d8:92:b1:0b:1b:02:2f:3d:4b:2c:57:19:a0:6d:47:00:5d:
         91:63:0b:43:f4:28:75:ea:8c:51:c6:aa:2c:d7:95:77:78:b5:
         90:d6:dc:5d:4d:a2:6d:c2:1b:bd:1c:0f:d0:07:45:b9:b3:d4:
         76:b8:3c:63:5b:37:e2:07:51:87:4a:b1:cf:3a:47:d6:fd:c9:
         dc:a8:51:e2:cf:2d:80:d8:1a:59:a8:78:e7:9b:3b:64:96:f0:
         26:67:3f:5b:43:55:01:42:eb:6a:14:cc:db:f9:40:8c:b3:69:
         6e:4d:c7:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEBpEsQbQcKBt4bSUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTIyMTIzMDE5MzIwNVoXDTI0MTIzMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTcyNjRkOGUtYTA3Yi00YTk1LTk4MjAtOWQyMGMxNzRiYjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+8yvTyBYTbymMlF+qVeDGFFIQ+0kT4cyl70
0U95BNcxkLzZjSMK5LFxVkk5eG07KAxukwfMdOfLu98GBpcFgajEY4Jr6iiT8xuv
bfZunt4uMVkQ1O5pkICCSdZjJ0uajwbj0J8ADEB1C9zgIrkjCvVU/yU/uRNFbkwr
WhtygvoYXS7N6jELnMsy5mc/Mp6ecX5GuUMm5nH/T+kSfN1sDIxGP+X+c4WUZBeU
kIYlLX486XOBs0wCzGVToawwLVVu5uoKPUSDJhGidZ0853h6OvGhWKVYwImhAc9q
71HyYtLSXcTSfEi5O77jDCB6Sj91zm8fivYqJ7EZ229eIZ7DCwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLmCmDfjosuG8hsQtPntjs3aMM2BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGY5OWE3Y2EtNzYyNy0z
NGY4LWIzN2YtMWJjZmRkM2RlN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaYADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCXo/oHYBNfHZvHPDx7RW8x3TYWSXDIqI4Ocig5OebCPeUG1TpHo/Mc
NR4TKHufcokbOdPxCZYjTBPq7TlgmueRYTLluWNFPuYiqys/agCwIIaSFgayE0/q
LhQq021+rmP24lCmc9MjhTqJktX8TR4jnrdnIKANrfg3MsOxmrbN7kTXTpXAeL0Z
R5f4pdRr3Ulz2JKxCxsCLz1LLFcZoG1HAF2RYwtD9Ch16oxRxqos15V3eLWQ1txd
TaJtwhu9HA/QB0W5s9R2uDxjWzfiB1GHSrHPOkfW/cncqFHizy2A2BpZqHjnmztk
lvAmZz9bQ1UBQutqFMzb+UCMs2luTcdm
-----END CERTIFICATE-----