Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/2c0d9d7e-6fba-3f55-ad61-de567e48cd5c.roa
File:                     2c0d9d7e-6fba-3f55-ad61-de567e48cd5c.roa (raw, json)
Hash identifier:          Z/HzJcGJmg0lzP2DG5wHmybvPT5601LtAtTHOPTWZr8=
Subject key identifier:   C4:C7:5E:81:E5:97:18:76:F3:C1:1D:2B:69:04:8D:18:4C:43:0A:1C
Certificate issuer:       /CN=d60903a0-a127-4c7f-a403-6a3d8817015e
Certificate serial:       010D0C9F4328583D1D7B384F3D63EA9397527180
Authority key identifier: 77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/2c0d9d7e-6fba-3f55-ad61-de567e48cd5c.roa
Signing time:             Thu 03 Mar 2022 05:00:00 +0000
ROA not before:           Thu 03 Mar 2022 05:00:00 +0000
ROA not after:            Sun 30 Jun 2024 04:00:00 +0000
asID:                     21976
IP address blocks:        192.148.104.0/24 maxlen: 24
                          2620:121:6000::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1d:7b:38:4f:3d:63:ea:93:97:52:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60903a0-a127-4c7f-a403-6a3d8817015e
        Validity
            Not Before: Mar  3 05:00:00 2022 GMT
            Not After : Jun 30 04:00:00 2024 GMT
        Subject: CN=46d8a343-6d46-49b1-8aa8-bd1e048b0cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:24:ed:51:a9:e5:e0:00:03:55:6d:4c:38:
                    8a:5d:75:5a:1d:af:00:2a:39:17:7e:77:d2:80:74:
                    5a:6c:91:8f:f4:17:12:6e:ca:1f:dc:f7:3a:2a:f4:
                    3e:ed:ae:23:3c:1c:bd:e8:30:38:c4:29:5c:11:c0:
                    e0:76:3f:43:9b:c5:1c:01:5f:c9:8b:43:a2:b4:7d:
                    04:b6:f6:db:5f:3d:5b:8b:ec:f4:6d:cd:bf:ec:7f:
                    44:5b:b1:14:c2:0d:43:24:78:50:15:5d:6e:fe:31:
                    2e:5d:6b:0a:31:09:cd:0e:e5:df:5a:09:64:32:0d:
                    75:d8:2c:fd:22:76:07:f8:d3:0c:9c:75:43:34:84:
                    10:4b:ce:52:94:94:e5:02:4e:d6:99:09:bd:4b:fc:
                    3b:38:c2:25:ea:45:e9:a1:0e:37:1f:0f:8c:8b:d3:
                    57:88:60:ba:61:40:5d:95:b4:8a:75:c6:a2:b5:bb:
                    f3:f5:ec:c1:a0:8a:1d:3c:05:de:fa:04:1e:3c:0f:
                    dc:e6:81:0c:0d:cd:80:26:dd:6e:13:4e:b7:67:fd:
                    e0:a2:95:d3:b4:70:01:92:89:47:7e:ea:7f:f8:70:
                    16:9a:1a:bc:e6:95:98:e1:58:7d:52:78:88:ed:45:
                    8d:55:bc:8a:78:36:66:4c:40:58:74:8a:64:00:61:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C7:5E:81:E5:97:18:76:F3:C1:1D:2B:69:04:8D:18:4C:43:0A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/2c0d9d7e-6fba-3f55-ad61-de567e48cd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl

            X509v3 Authority Key Identifier:
                keyid:77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.104.0/24
                IPv6:
                  2620:121:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:1c:b6:8d:b9:36:34:05:f5:0a:df:39:aa:60:78:15:e2:
         4b:1b:0e:1f:06:45:9a:ee:4a:d0:b9:91:99:09:ab:76:e1:03:
         f8:12:6b:55:91:94:d1:d0:7c:73:90:3d:14:df:22:0f:d6:20:
         47:2e:62:f8:61:75:86:ae:00:5d:c7:50:b6:5a:b9:58:57:9a:
         a5:40:ac:f9:42:9b:03:4f:78:50:1b:c0:8d:e4:c8:2e:cb:0f:
         3c:10:e2:dd:da:69:b1:3f:3a:65:68:2d:26:e5:40:e8:86:00:
         88:dd:86:c8:ab:a4:02:ae:e9:60:66:5e:86:79:c0:26:24:e1:
         3d:b7:be:e7:9c:ef:93:48:bc:f9:ed:2e:fb:ed:16:66:8c:97:
         ac:b2:53:8b:e4:ef:c3:42:1f:d2:aa:a3:29:18:fa:12:ea:1e:
         3c:7c:2b:72:19:12:cb:e9:3f:e9:c9:27:c9:88:61:d5:3d:14:
         fd:17:ed:f4:e9:e5:f4:6f:01:82:e5:ac:e8:55:55:3a:0a:2a:
         c3:da:bb:a5:7b:5b:6a:c5:11:78:f5:c1:a6:75:4d:0e:bf:4e:
         27:71:a5:27:98:0f:65:4c:49:97:d2:c0:05:d9:a4:10:33:d7:
         04:4e:0c:9a:e8:a8:cb:65:f7:81:10:ce:92:9d:2c:50:1d:67:
         cb:6a:10:27
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWD0dezhPPWPqk5dScYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDYwOTAzYTAtYTEyNy00YzdmLWE0MDMtNmEzZDg4MTcw
MTVlMB4XDTIyMDMwMzA1MDAwMFoXDTI0MDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
NDZkOGEzNDMtNmQ0Ni00OWIxLThhYTgtYmQxZTA0OGIwY2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qck7VGp5eAAA1VtTDiKXXVaHa8AKjkXfnfS
gHRabJGP9BcSbsof3Pc6KvQ+7a4jPBy96DA4xClcEcDgdj9Dm8UcAV/Ji0OitH0E
tvbbXz1bi+z0bc2/7H9EW7EUwg1DJHhQFV1u/jEuXWsKMQnNDuXfWglkMg112Cz9
InYH+NMMnHVDNIQQS85SlJTlAk7WmQm9S/w7OMIl6kXpoQ43Hw+Mi9NXiGC6YUBd
lbSKdcaitbvz9ezBoIodPAXe+gQePA/c5oEMDc2AJt1uE063Z/3gopXTtHABkolH
fup/+HAWmhq85pWY4Vh9UniI7UWNVbyKeDZmTEBYdIpkAGEOEQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFMTHXoHllxh288EdK2kEjRhMQwocMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNjA5
MDNhMC1hMTI3LTRjN2YtYTQwMy02YTNkODgxNzAxNWUvMmMwZDlkN2UtNmZiYS0z
ZjU1LWFkNjEtZGU1NjdlNDhjZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDYwOTAzYTAtYTEyNy00YzdmLWE0
MDMtNmEzZDg4MTcwMTVlL2Q2MDkwM2EwLWExMjctNGM3Zi1hNDAzLTZhM2Q4ODE3
MDE1ZS5jcmwwHwYDVR0jBBgwFoAUd8YxJYFVxj3wjYQ+yZA9dtbLt84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNjA5MDNhMC1hMTI3LTRjN2YtYTQwMy02YTNk
ODgxNzAxNWUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwJRoMA8E
AgACMAkDBwQmIAEhYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAw0cto25NjQF9QrfOapgeBXiSxsOHwZF
mu5K0LmRmQmrduED+BJrVZGU0dB8c5A9FN8iD9YgRy5i+GF1hq4AXcdQtlq5WFea
pUCs+UKbA094UBvAjeTILssPPBDi3dppsT86ZWgtJuVA6IYAiN2GyKukAq7pYGZe
hnnAJiThPbe+55zvk0i8+e0u++0WZoyXrLJTi+Tvw0If0qqjKRj6EuoePHwrchkS
y+k/6cknyYhh1T0U/Rft9Onl9G8BguWs6FVVOgoqw9q7pXtbasURePXBpnVNDr9O
J3GlJ5gPZUxJl9LABdmkEDPXBE4Mmuioy2X3gRDOkp0sUB1ny2oQJw==
-----END CERTIFICATE-----