Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/89c0c5e0-a927-358a-ad0b-704023e2dbc3.roa
File:                     89c0c5e0-a927-358a-ad0b-704023e2dbc3.roa (raw, json)
Hash identifier:          xS+iQkMkbWwemAIokWMfI40dr4e0JYc4gi/g+VHbEOo=
Subject key identifier:   A5:C4:C4:8B:E7:72:DC:61:75:AE:21:6B:CB:43:89:C8:E6:1E:74:49
Certificate issuer:       /CN=c6830b98-b6ce-461c-8849-244186a13d62
Certificate serial:       010D0C9F43285840E0756E6EA0A63EEA342A7920
Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/89c0c5e0-a927-358a-ad0b-704023e2dbc3.roa
Signing time:             Fri 04 Feb 2022 16:07:36 +0000
ROA not before:           Fri 04 Feb 2022 16:07:36 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     9833
IP address blocks:        208.73.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e0:75:6e:6e:a0:a6:3e:ea:34:2a:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62
        Validity
            Not Before: Feb  4 16:07:36 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=4eccae95-9620-4b51-bd64-6a588cdbdfa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:23:d8:ec:d1:f3:51:46:ed:b5:26:7e:d2:
                    f8:15:24:85:c5:aa:ec:6f:48:5d:9f:0e:69:18:02:
                    c1:74:ab:fe:72:d0:8e:b3:74:b5:76:d7:49:40:73:
                    a4:7f:6a:e3:1f:3e:f2:6d:de:34:28:3e:a7:d9:e1:
                    99:b8:db:89:bd:c0:60:38:9a:b7:49:68:46:0d:98:
                    4f:a0:99:d8:be:05:1a:c4:b8:0b:0c:f2:9f:6e:6e:
                    3b:65:f9:f6:6c:be:7e:ac:31:9c:17:7b:38:69:85:
                    5a:36:10:07:87:80:3e:bd:e4:39:a9:f7:5c:e4:e0:
                    48:46:30:58:8a:2e:0b:d7:07:33:e0:3c:33:33:52:
                    cd:d7:c4:bf:62:e6:da:87:fa:4d:06:03:99:44:75:
                    0f:3d:85:1f:b5:1b:e3:03:85:1e:f4:d7:ba:7d:7b:
                    6a:30:48:3b:a7:69:78:c8:cf:d0:d9:b0:8e:cd:ba:
                    85:da:e2:2a:82:bb:55:bb:7e:fb:f6:48:d0:5e:f5:
                    d8:3c:86:da:39:68:eb:90:8d:f7:21:86:6d:40:b7:
                    b2:f5:bf:12:07:8a:e3:b3:65:ba:e5:62:4c:91:30:
                    44:c5:f4:d3:04:3d:30:c8:db:d6:49:70:00:41:57:
                    11:49:6b:31:14:eb:2f:9d:1c:c1:55:20:57:ea:ab:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C4:C4:8B:E7:72:DC:61:75:AE:21:6B:CB:43:89:C8:E6:1E:74:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/89c0c5e0-a927-358a-ad0b-704023e2dbc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl

            X509v3 Authority Key Identifier:
                keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:c5:d7:73:22:b0:54:9d:ec:c0:22:70:b4:7f:1c:b9:32:
         84:c5:af:9a:da:6c:7f:04:a8:37:fd:67:ef:c5:be:02:e0:d7:
         7f:f6:4f:1e:ef:25:94:41:2b:2c:10:5e:dd:6a:ea:67:32:c6:
         07:bc:97:1d:67:63:78:65:13:38:be:75:4c:8d:d8:03:ed:66:
         54:da:93:e7:8c:65:d2:8a:df:9b:9c:8e:86:8a:4b:9a:07:64:
         52:19:ca:0e:95:18:55:25:23:fe:6d:7d:9c:18:8b:79:05:b9:
         eb:0d:df:99:70:07:de:b6:1a:f2:58:03:d3:f8:7a:84:da:cb:
         f7:95:b1:3c:b2:1c:93:a3:d8:16:4e:eb:bd:0d:2b:37:2f:ef:
         6d:59:93:85:02:96:35:b7:56:f9:e8:5a:cb:7e:77:15:bf:ad:
         1b:b0:f0:87:d4:ed:fb:c2:41:7d:02:ee:f9:11:e5:db:81:ed:
         a2:07:a2:80:50:93:b7:f2:e3:7e:9c:36:29:24:75:88:78:83:
         09:d5:f9:35:fa:b3:f1:7b:76:6f:ea:08:ac:96:3f:87:36:53:
         5c:a8:2b:64:c7:34:86:fd:3b:2b:e3:64:e6:1f:05:e9:02:a6:
         c2:87:1b:ac:26:72:58:98:47:2b:47:86:65:60:52:ca:13:2b:
         1a:f2:e7:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDgdW5uoKY+6jQqeSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY4MzBiOTgtYjZjZS00NjFjLTg4NDktMjQ0MTg2YTEz
ZDYyMB4XDTIyMDIwNDE2MDczNloXDTI1MDUxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NGVjY2FlOTUtOTYyMC00YjUxLWJkNjQtNmE1ODhjZGJkZmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/gj2OzR81FG7bUmftL4FSSFxarsb0hdnw5p
GALBdKv+ctCOs3S1dtdJQHOkf2rjHz7ybd40KD6n2eGZuNuJvcBgOJq3SWhGDZhP
oJnYvgUaxLgLDPKfbm47Zfn2bL5+rDGcF3s4aYVaNhAHh4A+veQ5qfdc5OBIRjBY
ii4L1wcz4DwzM1LN18S/Yubah/pNBgOZRHUPPYUftRvjA4Ue9Ne6fXtqMEg7p2l4
yM/Q2bCOzbqF2uIqgrtVu3779kjQXvXYPIbaOWjrkI33IYZtQLey9b8SB4rjs2W6
5WJMkTBExfTTBD0wyNvWSXAAQVcRSWsxFOsvnRzBVSBX6qvLLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXExIvnctxhda4ha8tDicjmHnRJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgz
MGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQxODZhMTNkNjIvODljMGM1ZTAtYTkyNy0z
NThhLWFkMGItNzA0MDIzZTJkYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY4MzBiOTgtYjZjZS00NjFjLTg4
NDktMjQ0MTg2YTEzZDYyL2M2ODMwYjk4LWI2Y2UtNDYxYy04ODQ5LTI0NDE4NmEx
M2Q2Mi5jcmwwHwYDVR0jBBgwFoAU8p8AtuS/dgVqAAUuhXTk+e6bacwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgzMGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQx
ODZhMTNkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+QxddzIrBUnezAInC0fxy5MoTFr5rabH8EqDf9Z+/FvgLg13/2Tx7v
JZRBKywQXt1q6mcyxge8lx1nY3hlEzi+dUyN2APtZlTak+eMZdKK35ucjoaKS5oH
ZFIZyg6VGFUlI/5tfZwYi3kFuesN35lwB962GvJYA9P4eoTay/eVsTyyHJOj2BZO
670NKzcv721Zk4UCljW3VvnoWst+dxW/rRuw8IfU7fvCQX0C7vkR5duB7aIHooBQ
k7fy436cNikkdYh4gwnV+TX6s/F7dm/qCKyWP4c2U1yoK2THNIb9OyvjZOYfBekC
psKHG6wmcliYRytHhmVgUsoTKxry57g=
-----END CERTIFICATE-----