Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/35edb8e4-2c20-3b8f-b534-c9cc0636391e.roa
File:                     35edb8e4-2c20-3b8f-b534-c9cc0636391e.roa (raw, json)
Hash identifier:          /QaUemY3IPU3i5FA4h4Mgpt9o5zx6FSPXmuFO8VteRE=
Subject key identifier:   A5:31:7D:89:6C:03:8D:62:63:BC:75:61:84:20:E4:CE:6C:D7:26:16
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F4328583D5A4FF93E78D855FADC6CC680
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/35edb8e4-2c20-3b8f-b534-c9cc0636391e.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Tue 23 Mar 2032 04:00:00 +0000
asID:                     36352
IP address blocks:        64.20.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 27 Mar 2023 14:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:4f:f9:3e:78:d8:55:fa:dc:6c:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Mar 23 04:00:00 2032 GMT
        Subject: CN=906e58f3-5593-4f52-a2ab-254a87dcd65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:d3:03:7d:fd:df:5d:d7:7c:3e:25:76:19:
                    e6:11:f8:08:6d:48:bd:70:b6:92:1f:7d:f3:a1:40:
                    cd:df:c5:89:a2:99:61:78:b1:c1:49:02:33:10:91:
                    51:38:a5:04:85:f7:07:00:63:6e:46:d9:91:1c:fb:
                    ec:ce:32:0e:df:e5:5b:13:60:31:d9:c2:6b:e2:ce:
                    40:dc:6b:4d:5a:4b:0c:1f:99:f9:3a:10:6f:80:31:
                    ab:d0:af:b5:58:b8:9d:94:62:54:60:12:d0:8c:4c:
                    92:18:61:90:d1:a8:a2:1f:63:0d:7b:6c:85:a0:c1:
                    12:48:df:6a:a5:1a:a7:24:07:c1:84:42:89:a8:f6:
                    d6:cd:8a:5f:36:1f:75:cc:5e:bb:8b:1f:f8:33:30:
                    e4:81:9b:f4:df:20:da:db:fc:8e:2f:0f:a9:7e:39:
                    85:f6:4f:48:49:20:b1:52:15:85:55:c4:e2:e3:fb:
                    fc:31:b8:e9:36:af:d0:d2:7c:da:ff:13:1f:5b:db:
                    ef:91:4f:5b:44:b7:7c:a5:65:2c:21:56:27:ad:ac:
                    89:13:e8:3a:f2:2c:2c:91:89:29:21:18:38:80:38:
                    fd:4d:bf:f2:0f:5e:09:c0:88:32:26:fc:02:ad:71:
                    47:3b:5e:ab:d8:a0:02:0f:d1:93:56:b5:09:02:21:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:31:7D:89:6C:03:8D:62:63:BC:75:61:84:20:E4:CE:6C:D7:26:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/35edb8e4-2c20-3b8f-b534-c9cc0636391e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:c6:75:b9:8b:b8:cb:50:56:da:2c:aa:12:b2:16:c2:cc:
         c8:d2:c3:4a:4a:a3:1e:a9:2d:39:c0:de:c1:86:9e:56:d5:7f:
         40:c7:dd:9f:99:10:fd:c2:27:d2:5b:3c:93:a4:00:c1:67:9a:
         5f:9d:7c:c1:55:35:9d:f9:fc:0f:a3:d1:4d:a8:6b:6b:71:6a:
         aa:8b:f3:65:8c:71:03:12:82:91:46:f2:8d:37:9d:9f:92:ee:
         5d:dc:8c:59:53:b5:8e:9a:17:03:ea:67:05:82:1a:b4:42:92:
         12:3e:07:97:c0:f1:68:c0:eb:ac:3a:67:08:c5:0f:1e:d5:dd:
         b0:f4:e5:5b:6f:37:2d:0f:6f:19:04:15:8e:91:45:15:1d:0a:
         95:b2:8b:c1:3f:da:2b:52:de:63:b6:9a:f3:10:b0:5b:1f:f6:
         19:63:a9:9c:24:45:ef:6d:dd:3e:94:32:df:cb:80:0e:7f:7b:
         13:e6:e5:76:92:0b:6c:88:ce:c1:0b:25:f4:99:6e:f2:f3:c0:
         65:6f:48:27:95:86:bd:ef:7f:4c:5d:c0:3f:7e:84:55:9c:7a:
         d4:cc:37:8b:11:86:e6:4f:79:fa:fb:ae:13:46:c3:c0:b9:37:
         5f:62:8a:07:b6:de:fd:8d:17:10:85:5f:ce:1f:7c:c6:7c:2e:
         36:18:16:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1aT/k+eNhV+txsxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk
M2RmMB4XDTIyMDMyNTA0MDAwMFoXDTMyMDMyMzA0MDAwMFowLzEtMCsGA1UEAxMk
OTA2ZTU4ZjMtNTU5My00ZjUyLWEyYWItMjU0YTg3ZGNkNjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJzTA339313XfD4ldhnmEfgIbUi9cLaSH33z
oUDN38WJoplheLHBSQIzEJFROKUEhfcHAGNuRtmRHPvszjIO3+VbE2Ax2cJr4s5A
3GtNWksMH5n5OhBvgDGr0K+1WLidlGJUYBLQjEySGGGQ0aiiH2MNe2yFoMESSN9q
pRqnJAfBhEKJqPbWzYpfNh91zF67ix/4MzDkgZv03yDa2/yOLw+pfjmF9k9ISSCx
UhWFVcTi4/v8MbjpNq/Q0nza/xMfW9vvkU9bRLd8pWUsIVYnrayJE+g68iwskYkp
IRg4gDj9Tb/yD14JwIgyJvwCrXFHO16r2KACD9GTVrUJAiGhuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUxfYlsA41iY7x1YYQg5M5s1yYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm
YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMzVlZGI4ZTQtMmMyMC0z
YjhmLWI1MzQtYzljYzA2MzYzOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5
MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1
ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx
MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBTQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0VxnW5i7jLUFbaLKoSshbCzMjSw0pKox6pLTnA3sGGnlbVf0DH3Z+Z
EP3CJ9JbPJOkAMFnml+dfMFVNZ35/A+j0U2oa2txaqqL82WMcQMSgpFG8o03nZ+S
7l3cjFlTtY6aFwPqZwWCGrRCkhI+B5fA8WjA66w6ZwjFDx7V3bD05VtvNy0PbxkE
FY6RRRUdCpWyi8E/2itS3mO2mvMQsFsf9hljqZwkRe9t3T6UMt/LgA5/exPm5XaS
C2yIzsELJfSZbvLzwGVvSCeVhr3vf0xdwD9+hFWcetTMN4sRhuZPefr7rhNGw8C5
N19iige23v2NFxCFX84ffMZ8LjYYFug=
-----END CERTIFICATE-----