Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7b462c31-d9c4-3b48-8f8a-0751b9a66920.roa
File:                     7b462c31-d9c4-3b48-8f8a-0751b9a66920.roa (raw, json)
Hash identifier:          JHY7rxPC/gmjPEFS4OETTT2kkqF4GY009jVMvM2KB5E=
Subject key identifier:   22:F2:7D:BF:2D:51:E4:8B:E5:14:F1:E8:FA:76:CC:4B:1F:9F:D5:D2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858403BD2148D2096A1B99BC22140
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7b462c31-d9c4-3b48-8f8a-0751b9a66920.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 18 Mar 2025 04:00:00 +0000
asID:                     49999
IP address blocks:        216.122.172.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 18 Apr 2023 02:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3b:d2:14:8d:20:96:a1:b9:9b:c2:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 18 04:00:00 2025 GMT
        Subject: CN=159abbd5-7d09-45f9-82ca-9f16bc540fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:c2:0a:17:c8:b8:67:b2:f0:a1:81:79:d1:
                    82:6a:b5:c1:9a:4c:c2:16:38:9f:c7:ca:0f:e7:38:
                    88:96:11:27:0f:78:65:92:82:64:43:ab:69:d4:ec:
                    ef:8e:bc:07:a4:be:9e:bd:2b:87:3c:cf:8e:61:0f:
                    1f:bf:dc:68:11:33:aa:9b:bc:b6:6d:a3:ef:d1:75:
                    88:f9:b5:80:10:d4:b7:36:1d:93:4f:a5:e0:3e:d5:
                    65:fb:46:5c:d5:d4:75:2a:50:1f:e5:74:6e:64:49:
                    47:0a:0f:7a:68:94:ad:63:6c:9d:68:20:eb:e1:8b:
                    ad:d0:bf:aa:ec:9d:82:1a:57:00:f6:61:e3:95:e5:
                    6a:df:f6:83:86:3a:d7:e1:aa:79:4c:12:10:7c:df:
                    49:12:9b:29:9f:73:17:08:e3:12:a8:32:47:e8:e5:
                    4c:03:8e:d7:47:43:b4:28:c0:2f:2e:f8:12:94:b0:
                    c9:68:63:87:50:b2:55:b9:97:7a:88:b0:6a:78:70:
                    fd:70:8d:75:61:a4:51:ba:05:a0:c6:c6:fe:db:11:
                    ae:bb:41:f0:62:7a:02:b2:2e:0c:20:4f:df:28:2b:
                    b9:37:e6:17:24:b4:1e:ac:e2:ec:2c:f4:c9:72:38:
                    18:e5:e3:4f:04:68:d5:d2:c1:7b:ec:66:7f:0d:7f:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F2:7D:BF:2D:51:E4:8B:E5:14:F1:E8:FA:76:CC:4B:1F:9F:D5:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7b462c31-d9c4-3b48-8f8a-0751b9a66920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:36:c4:f1:86:80:1f:6b:b1:51:00:34:4f:a3:2f:2b:7a:
         7b:e3:ce:5f:b8:bc:05:51:ae:f9:06:a2:5a:0a:03:f4:a8:ec:
         51:af:52:53:45:df:af:21:8e:6d:5c:ac:ad:27:91:01:bd:10:
         d0:e0:d2:95:ec:18:bb:34:94:6e:2e:74:b5:9c:54:b1:63:4a:
         95:6b:b3:64:23:71:6e:b3:4e:f9:80:70:7c:91:02:bb:27:4c:
         b4:5d:a0:f0:ec:ee:a2:bd:c0:a9:6a:33:c1:9a:4d:fd:1d:8d:
         7b:ba:f0:40:82:43:44:78:01:31:76:42:e2:e4:ac:75:08:2a:
         b9:53:7f:57:f1:dd:0f:1c:fa:c3:6e:a6:45:e0:c3:b3:55:30:
         73:8a:f1:20:cb:65:3e:d7:d2:e9:dd:d0:df:9b:52:54:af:bc:
         a2:d9:83:27:5e:db:48:30:36:e1:a6:25:02:3f:cf:b6:57:71:
         94:fd:8c:c8:b5:3f:19:a4:7e:91:b9:37:4b:d5:b5:54:d8:5b:
         3b:f7:3b:95:82:1e:63:17:0f:8e:86:80:34:b9:4e:46:bd:a5:
         43:e6:84:a2:c5:95:33:a1:b8:f6:37:b3:8c:c6:a9:5c:e2:04:
         72:98:a5:5e:d8:1a:9d:80:64:9f:8b:4e:f7:8a:55:88:f1:cb:
         60:02:15:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEA70hSNIJahuZvCIUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIyMTIxMzE4MjcwOVoXDTI1MDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
MTU5YWJiZDUtN2QwOS00NWY5LTgyY2EtOWYxNmJjNTQwZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCbCChfIuGey8KGBedGCarXBmkzCFjifx8oP
5ziIlhEnD3hlkoJkQ6tp1OzvjrwHpL6evSuHPM+OYQ8fv9xoETOqm7y2baPv0XWI
+bWAENS3Nh2TT6XgPtVl+0Zc1dR1KlAf5XRuZElHCg96aJStY2ydaCDr4Yut0L+q
7J2CGlcA9mHjleVq3/aDhjrX4ap5TBIQfN9JEpspn3MXCOMSqDJH6OVMA47XR0O0
KMAvLvgSlLDJaGOHULJVuZd6iLBqeHD9cI11YaRRugWgxsb+2xGuu0HwYnoCsi4M
IE/fKCu5N+YXJLQerOLsLPTJcjgY5eNPBGjV0sF77GZ/DX9HqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLyfb8tUeSL5RTx6Pp2zEsfn9XSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvN2I0NjJjMzEtZDljNC0z
YjQ4LThmOGEtMDc1MWI5YTY2OTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2HqsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEqNsTxhoAfa7FRADRPoy8renvjzl+4vAVRrvkGoloKA/So7FGvUlNF
368hjm1crK0nkQG9ENDg0pXsGLs0lG4udLWcVLFjSpVrs2QjcW6zTvmAcHyRArsn
TLRdoPDs7qK9wKlqM8GaTf0djXu68ECCQ0R4ATF2QuLkrHUIKrlTf1fx3Q8c+sNu
pkXgw7NVMHOK8SDLZT7X0und0N+bUlSvvKLZgyde20gwNuGmJQI/z7ZXcZT9jMi1
PxmkfpG5N0vVtVTYWzv3O5WCHmMXD46GgDS5Tka9pUPmhKLFlTOhuPY3s4zGqVzi
BHKYpV7YGp2AZJ+LTveKVYjxy2ACFaI=
-----END CERTIFICATE-----