Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/8ed6fb0c-a0f3-3566-9328-e074458fe988.roa
File:                     8ed6fb0c-a0f3-3566-9328-e074458fe988.roa (raw, json)
Hash identifier:          0dzU6UJf2aXSu2vcrVH8600SiUSd5kAAPKhynMKXhgo=
Subject key identifier:   63:16:25:C6:3D:9D:A3:FA:7D:53:16:F1:59:E6:3D:91:08:23:BB:17
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F4328583C973B56B36B44094959FBEC00
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/8ed6fb0c-a0f3-3566-9328-e074458fe988.roa
Signing time:             Tue 08 Jun 2021 04:00:00 +0000
ROA not before:           Tue 08 Jun 2021 04:00:00 +0000
ROA not after:            Thu 18 Apr 2024 04:00:00 +0000
asID:                     43350
IP address blocks:        192.101.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:3b:56:b3:6b:44:09:49:59:fb:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Jun  8 04:00:00 2021 GMT
            Not After : Apr 18 04:00:00 2024 GMT
        Subject: CN=d2ae6085-8e1a-4145-8b72-b93890922c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:d6:1a:f5:d6:42:d2:dd:74:da:12:69:5c:
                    41:cf:83:0d:9d:77:97:70:44:9e:f5:56:c8:39:af:
                    06:01:af:7e:b7:93:13:22:f1:96:2d:dc:0e:cc:78:
                    1e:14:64:56:d2:49:24:f8:c3:fc:f6:e3:d6:ba:cf:
                    96:7d:89:2b:f5:a3:b0:ac:89:a9:7f:d2:eb:43:e1:
                    48:bc:0e:69:6e:18:00:17:5c:c8:f0:f8:cd:d1:8a:
                    bd:f2:56:72:d8:26:41:ad:60:1c:4d:ea:21:b8:81:
                    3e:53:3d:c9:43:2c:23:e8:36:dc:cc:d0:6d:58:70:
                    0f:ed:6f:8b:f2:95:84:4d:27:98:0b:7e:0a:e1:b3:
                    ea:89:02:a3:9c:03:00:1a:80:47:67:06:97:6a:e4:
                    15:05:76:0f:9b:73:e2:8c:44:36:46:bc:0c:b1:e4:
                    63:31:e7:2f:ff:f9:69:dc:53:9b:c5:ff:8c:2e:07:
                    55:8d:a1:07:72:72:97:3d:f9:a5:1e:4d:d7:b7:48:
                    15:26:17:96:23:d8:93:3e:8e:1f:47:4b:e1:93:4a:
                    1f:a5:6b:30:e2:ce:af:ea:6d:62:be:55:a2:94:ab:
                    59:ab:d9:f3:b6:9b:38:dc:8f:27:6a:8a:d0:66:7d:
                    10:4d:76:e9:3f:f9:ed:87:24:89:c1:d0:80:bd:7d:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:16:25:C6:3D:9D:A3:FA:7D:53:16:F1:59:E6:3D:91:08:23:BB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/8ed6fb0c-a0f3-3566-9328-e074458fe988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:1e:57:0f:03:e5:99:44:a2:26:86:32:3e:6e:25:97:02:
         30:ca:95:ac:27:66:f2:bb:0f:fc:5c:2e:e9:ce:56:33:55:19:
         ee:ba:90:b6:4a:0c:cf:9c:d7:08:58:fa:a0:f9:2d:7b:38:a8:
         5c:82:4f:68:97:50:1c:a5:25:0c:62:21:2b:11:9d:76:63:b5:
         73:7b:76:5f:f6:3a:5a:fb:0e:21:6e:cb:20:c5:49:24:a6:55:
         64:2f:b2:ff:2b:75:6e:de:70:4f:ef:f1:54:0e:05:41:bc:3f:
         9d:31:59:d7:73:3e:34:63:02:fc:20:75:1a:59:35:e8:bd:b4:
         25:70:a0:0a:2f:73:8c:e4:a7:9b:db:dc:77:ca:d7:4e:d7:2d:
         d6:32:fb:0d:d0:c3:29:52:fd:9a:3b:ee:f9:02:4c:23:c6:50:
         9c:08:56:52:05:32:da:5c:e9:ab:c7:b1:ae:f2:b9:ed:2e:6e:
         11:8e:3a:2c:5d:16:4f:65:50:a2:e4:26:23:6f:43:5b:34:35:
         cb:50:7e:d6:24:c0:04:56:0c:d5:58:95:9b:33:c0:63:30:f4:
         03:ee:8d:04:ef:04:d9:89:9a:06:21:46:29:96:73:19:a7:a0:
         66:43:16:ff:49:29:6d:32:0a:c5:b4:bb:46:6f:1e:fe:81:4a:
         11:87:2b:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyXO1aza0QJSVn77AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk
OTQ1MB4XDTIxMDYwODA0MDAwMFoXDTI0MDQxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZDJhZTYwODUtOGUxYS00MTQ1LThiNzItYjkzODkwOTIyYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bLWGvXWQtLddNoSaVxBz4MNnXeXcESe9VbI
Oa8GAa9+t5MTIvGWLdwOzHgeFGRW0kkk+MP89uPWus+WfYkr9aOwrImpf9LrQ+FI
vA5pbhgAF1zI8PjN0Yq98lZy2CZBrWAcTeohuIE+Uz3JQywj6DbczNBtWHAP7W+L
8pWETSeYC34K4bPqiQKjnAMAGoBHZwaXauQVBXYPm3PijEQ2RrwMseRjMecv//lp
3FObxf+MLgdVjaEHcnKXPfmlHk3Xt0gVJheWI9iTPo4fR0vhk0ofpWsw4s6v6m1i
vlWilKtZq9nztps43I8naorQZn0QTXbpP/nthySJwdCAvX30pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMWJcY9naP6fVMW8VnmPZEII7sXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4
NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvOGVkNmZiMGMtYTBmMy0z
NTY2LTkzMjgtZTA3NDQ1OGZlOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh
NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4
ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw
NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABL2HlcPA+WZRKImhjI+biWXAjDKlawnZvK7D/xcLunOVjNVGe66kLZK
DM+c1whY+qD5LXs4qFyCT2iXUBylJQxiISsRnXZjtXN7dl/2Olr7DiFuyyDFSSSm
VWQvsv8rdW7ecE/v8VQOBUG8P50xWddzPjRjAvwgdRpZNei9tCVwoAovc4zkp5vb
3HfK107XLdYy+w3QwylS/Zo77vkCTCPGUJwIVlIFMtpc6avHsa7yue0ubhGOOixd
Fk9lUKLkJiNvQ1s0NctQftYkwARWDNVYlZszwGMw9APujQTvBNmJmgYhRimWcxmn
oGZDFv9JKW0yCsW0u0ZvHv6BShGHK/M=
-----END CERTIFICATE-----