Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/70751997-e207-3719-b85d-0b1c80e9a2a0.roa
File:                     70751997-e207-3719-b85d-0b1c80e9a2a0.roa (raw, json)
Hash identifier:          vrSZAkbz7gKbUlnufxyEs/gurDRqxvb8k0JT7WHlVg0=
Subject key identifier:   13:23:2C:68:61:5D:22:9E:A2:00:5C:41:62:2B:DD:0C:4D:F8:A4:CB
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F4328583DDFDBBA1EEA15D4DB84DD2480
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/70751997-e207-3719-b85d-0b1c80e9a2a0.roa
Signing time:             Wed 11 May 2022 17:48:07 +0000
ROA not before:           Wed 11 May 2022 17:48:07 +0000
ROA not after:            Tue 31 Dec 2030 05:00:00 +0000
asID:                     36369
IP address blocks:        66.118.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 May 2022 18:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:df:db:ba:1e:ea:15:d4:db:84:dd:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: May 11 17:48:07 2022 GMT
            Not After : Dec 31 05:00:00 2030 GMT
        Subject: CN=2aff6007-ca18-44c9-83f2-77933782b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:4f:50:51:5e:e4:6e:21:d1:08:aa:e0:01:
                    fb:4d:c4:67:dc:68:c0:a1:c3:a7:67:e5:5d:9b:bb:
                    24:55:18:f9:c2:f0:3c:02:a8:41:78:05:f5:18:07:
                    cd:ea:98:91:99:d9:ea:c7:da:20:69:04:cd:46:f8:
                    06:d1:91:95:02:de:ff:13:5c:6c:8c:de:a7:b7:74:
                    c0:0d:d7:40:88:45:ba:6b:a2:a0:31:74:86:b2:9c:
                    36:ba:f7:e7:12:b5:5c:76:0d:05:73:71:b6:51:26:
                    27:28:38:92:57:b3:68:5e:b3:04:13:69:ca:a2:60:
                    00:99:e4:01:fc:5d:cd:1e:b4:d7:9c:04:38:65:28:
                    71:8c:59:c1:4d:7f:51:e3:bd:88:9e:4a:8e:5d:f0:
                    0e:b4:c2:07:31:79:53:78:3a:36:2a:35:f4:ba:5b:
                    40:56:15:93:4e:03:ef:21:86:83:29:72:a6:69:f0:
                    15:30:f5:1b:7b:3e:47:ea:04:76:d2:8a:e6:71:ea:
                    40:08:89:1d:79:6e:2f:ae:ae:11:56:ad:17:72:ab:
                    90:b5:94:9b:34:e4:fd:0e:a4:fe:56:70:a2:3f:37:
                    f7:f3:25:f1:96:6b:85:51:9f:02:47:10:bc:e9:6c:
                    9e:ee:04:38:c7:14:f2:65:ea:bb:2d:11:b4:c0:3a:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:23:2C:68:61:5D:22:9E:A2:00:5C:41:62:2B:DD:0C:4D:F8:A4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/70751997-e207-3719-b85d-0b1c80e9a2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:95:e9:b5:19:0e:9e:97:98:fa:f4:7e:f3:ea:cc:e9:61:a5:
         36:be:96:9d:03:de:e2:31:24:ed:28:cd:e1:0a:af:d1:c7:cf:
         e3:3a:57:60:69:12:6c:58:5e:47:6b:95:2e:12:4a:27:07:ad:
         63:60:a6:52:44:e6:d4:73:89:8a:d9:fc:fe:ea:3c:34:94:73:
         99:b7:f0:7c:3d:ad:21:37:25:6f:72:25:ca:35:ca:44:7b:44:
         33:d9:97:eb:a1:bf:aa:fa:85:65:58:21:59:6b:8e:67:d2:c8:
         bb:3e:5f:54:91:91:2c:05:c6:18:ee:94:08:fd:b4:53:a7:39:
         4f:39:e9:0f:ff:f1:a7:34:25:61:1d:17:98:25:95:50:92:95:
         2a:17:24:e9:b4:28:c8:0f:63:22:f1:18:5a:2f:cd:08:fe:5f:
         d5:27:b1:db:58:37:a9:88:51:b5:b4:47:c2:c0:03:90:a4:a9:
         d0:b2:78:ee:d4:71:e9:59:78:54:02:60:9e:f2:53:2f:55:fd:
         ba:9a:f7:5b:ea:e1:ba:57:4c:fe:ef:fc:09:4c:c2:76:6e:6c:
         bc:df:cb:62:4d:cd:1a:0e:46:2a:4d:88:f3:f7:b8:50:b8:6a:
         fd:8e:51:8b:69:d1:6e:ac:84:30:8f:f4:24:84:68:f5:e6:7c:
         9d:0b:e2:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3f27oe6hXU24TdJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY4M2Y3MGEtNGQ4YS00ODllLWIwM2MtYWJjYTk0Y2Q3
ODUyMB4XDTIyMDUxMTE3NDgwN1oXDTMwMTIzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MmFmZjYwMDctY2ExOC00NGM5LTgzZjItNzc5MzM3ODJiM2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXNPUFFe5G4h0Qiq4AH7TcRn3GjAocOnZ+Vd
m7skVRj5wvA8AqhBeAX1GAfN6piRmdnqx9ogaQTNRvgG0ZGVAt7/E1xsjN6nt3TA
DddAiEW6a6KgMXSGspw2uvfnErVcdg0Fc3G2USYnKDiSV7NoXrMEE2nKomAAmeQB
/F3NHrTXnAQ4ZShxjFnBTX9R472InkqOXfAOtMIHMXlTeDo2KjX0ultAVhWTTgPv
IYaDKXKmafAVMPUbez5H6gR20ormcepACIkdeW4vrq4RVq0XcquQtZSbNOT9DqT+
VnCiPzf38yXxlmuFUZ8CRxC86Wye7gQ4xxTyZeq7LRG0wDr3WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMjLGhhXSKeogBcQWIr3QxN+KTLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgz
ZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNhOTRjZDc4NTIvNzA3NTE5OTctZTIwNy0z
NzE5LWI4NWQtMGIxYzgwZTlhMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTY4M2Y3MGEtNGQ4YS00ODllLWIw
M2MtYWJjYTk0Y2Q3ODUyL2E2ODNmNzBhLTRkOGEtNDg5ZS1iMDNjLWFiY2E5NGNk
Nzg1Mi5jcmwwHwYDVR0jBBgwFoAUuFkDntg3BBzZjRt1Jf/q8lgoSeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgzZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNh
OTRjZDc4NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOV6bUZDp6XmPr0fvPqzOlhpTa+lp0D3uIxJO0ozeEKr9HHz+M6V2Bp
EmxYXkdrlS4SSicHrWNgplJE5tRziYrZ/P7qPDSUc5m38Hw9rSE3JW9yJco1ykR7
RDPZl+uhv6r6hWVYIVlrjmfSyLs+X1SRkSwFxhjulAj9tFOnOU856Q//8ac0JWEd
F5gllVCSlSoXJOm0KMgPYyLxGFovzQj+X9UnsdtYN6mIUbW0R8LAA5CkqdCyeO7U
celZeFQCYJ7yUy9V/bqa91vq4bpXTP7v/AlMwnZubLzfy2JNzRoORipNiPP3uFC4
av2OUYtp0W6shDCP9CSEaPXmfJ0L4og=
-----END CERTIFICATE-----