Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/98147636-586b-3441-ab7b-a2c8ea698298.roa
File:                     98147636-586b-3441-ab7b-a2c8ea698298.roa (raw, json)
Hash identifier:          ywmk3nTHKwneSfsZt5F4bJ9EVyLfL8NSpXxyK4zRXGU=
Subject key identifier:   C4:1E:DA:79:10:17:43:9E:B9:43:C5:24:1F:6C:F1:5D:18:C2:FC:7C
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC8E8ED0A8A8A21C4C2AF00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/98147636-586b-3441-ab7b-a2c8ea698298.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        204.14.48.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:e8:ed:0a:8a:8a:21:c4:c2:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=b425b2be-8400-43e3-967f-787124260cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:8c:44:35:02:78:bb:47:34:2c:8c:a5:03:
                    1c:f1:99:77:7c:e0:52:61:74:3a:14:9d:f6:42:92:
                    70:24:df:bf:27:7c:95:5a:31:05:df:a6:06:98:6b:
                    f3:1b:00:4e:32:2c:41:af:10:c5:65:19:46:4a:b6:
                    25:6c:d0:44:9d:60:46:22:05:9b:b9:93:bd:10:1e:
                    df:90:e4:bf:3e:85:1f:5a:6d:1e:88:49:47:a6:05:
                    9c:ce:cc:ce:51:92:76:47:73:49:2d:de:1f:f2:30:
                    10:9a:a9:77:ea:c4:3c:7b:26:9f:e1:52:df:dc:36:
                    b9:24:25:04:1f:1c:d9:33:eb:7f:7d:24:58:76:3b:
                    61:f1:7d:4e:b4:7f:fb:e5:ec:8f:27:20:e5:b6:4e:
                    6b:8d:03:b1:24:aa:8e:9b:24:9d:c7:fd:77:6d:07:
                    5b:d6:ef:a3:bd:67:f6:f3:30:eb:e8:98:07:f4:7a:
                    fc:e7:36:de:4d:90:a4:0b:d6:5e:6c:e4:06:30:d7:
                    58:01:4e:d5:13:3e:fc:20:0c:5d:9b:9d:ee:c5:d8:
                    a0:8a:f3:e9:f2:ff:65:38:cc:03:dd:6c:c2:71:91:
                    91:2e:55:44:1c:93:d3:97:44:da:12:ed:a4:c0:55:
                    10:e2:69:a7:aa:bd:53:1a:57:7b:80:18:e1:40:9d:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1E:DA:79:10:17:43:9E:B9:43:C5:24:1F:6C:F1:5D:18:C2:FC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/98147636-586b-3441-ab7b-a2c8ea698298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:5a:97:71:81:5c:ec:56:42:0c:60:a9:71:1b:3b:e9:7f:
         93:9c:1c:c5:4b:f8:48:7e:29:40:e6:69:31:43:82:6c:fe:62:
         c9:31:4e:ef:70:25:fd:b8:ce:25:40:33:82:cd:a7:4a:c3:1b:
         23:92:1d:1e:8d:f5:d8:77:bf:df:74:5e:50:53:15:44:97:0a:
         77:60:9e:47:1c:5c:79:60:bc:25:18:18:a7:7c:5e:06:14:7e:
         74:b5:1e:7e:ce:44:60:a2:bf:ac:e8:60:41:f5:2a:ec:fd:07:
         db:38:e8:dc:68:d5:cc:f7:39:6b:97:e2:e6:2f:ad:db:c5:7c:
         51:08:7a:46:3c:5a:94:61:fb:ce:de:e7:b6:e4:03:28:03:bb:
         49:43:62:3c:c5:98:25:c4:b4:39:b7:1c:17:14:b5:f7:65:de:
         8b:82:40:28:8c:ce:66:79:0d:98:87:0b:bf:4f:25:80:49:b9:
         41:66:ca:95:2b:04:be:ad:c5:43:0d:a1:6d:76:37:bb:12:fa:
         1d:3f:11:b7:76:47:f0:93:d5:80:67:9e:d8:ff:91:9d:08:42:
         97:bd:04:a3:30:cd:d4:fc:86:b8:ec:63:10:0a:0b:e4:d5:ff:
         60:56:6e:3c:1b:55:10:67:a4:0f:e1:5f:e2:8a:28:b2:b8:d2:
         40:3c:46:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4byOjtCoqKIcTCrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTIyMDYwMTEyMDAwMFoXDTI4MDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk
YjQyNWIyYmUtODQwMC00M2UzLTk2N2YtNzg3MTI0MjYwY2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO2MRDUCeLtHNCyMpQMc8Zl3fOBSYXQ6FJ32
QpJwJN+/J3yVWjEF36YGmGvzGwBOMixBrxDFZRlGSrYlbNBEnWBGIgWbuZO9EB7f
kOS/PoUfWm0eiElHpgWczszOUZJ2R3NJLd4f8jAQmql36sQ8eyaf4VLf3Da5JCUE
HxzZM+t/fSRYdjth8X1OtH/75eyPJyDltk5rjQOxJKqOmySdx/13bQdb1u+jvWf2
8zDr6JgH9Hr85zbeTZCkC9ZebOQGMNdYAU7VEz78IAxdm53uxdigivPp8v9lOMwD
3WzCcZGRLlVEHJPTl0TaEu2kwFUQ4mmnqr1TGld7gBjhQJ3NvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQe2nkQF0OeuUPFJB9s8V0Ywvx8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTgxNDc2MzYtNTg2Yi0z
NDQxLWFiN2ItYTJjOGVhNjk4Mjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqLWpdxgVzsVkIMYKlxGzvpf5OcHMVL+Eh+KUDmaTFDgmz+YskxTu9w
Jf24ziVAM4LNp0rDGyOSHR6N9dh3v990XlBTFUSXCndgnkccXHlgvCUYGKd8XgYU
fnS1Hn7ORGCiv6zoYEH1Kuz9B9s46Nxo1cz3OWuX4uYvrdvFfFEIekY8WpRh+87e
57bkAygDu0lDYjzFmCXEtDm3HBcUtfdl3ouCQCiMzmZ5DZiHC79PJYBJuUFmypUr
BL6txUMNoW12N7sS+h0/Ebd2R/CT1YBnntj/kZ0IQpe9BKMwzdT8hrjsYxAKC+TV
/2BWbjwbVRBnpA/hX+KKKLK40kA8RqI=
-----END CERTIFICATE-----