Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/25b89b78-808f-35df-a787-51a284abe54d.roa
File:                     25b89b78-808f-35df-a787-51a284abe54d.roa (raw, json)
Hash identifier:          lU06BM4Ih4Dy4fj/CKFk1mWrqlJQmR6A5nFqEgtQvkE=
Subject key identifier:   E9:BE:38:C0:F5:1D:EA:15:72:D3:4A:28:E7:6A:F2:1C:04:8D:63:05
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F43285841610798D3A79D522234687C08
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/25b89b78-808f-35df-a787-51a284abe54d.roa
Signing time:             Tue 28 Mar 2023 20:35:59 +0000
ROA not before:           Tue 28 Mar 2023 20:35:59 +0000
ROA not after:            Mon 30 Jun 2025 04:00:00 +0000
asID:                     14618
IP address blocks:        199.73.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 Mar 2023 17:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:61:07:98:d3:a7:9d:52:22:34:68:7c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Mar 28 20:35:59 2023 GMT
            Not After : Jun 30 04:00:00 2025 GMT
        Subject: CN=db34153e-24f5-415a-b370-82eb8afedc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:fb:ba:58:ca:3f:ec:80:f0:24:3b:8b:3a:
                    bc:37:59:da:7d:a7:10:01:35:54:2b:5e:f6:81:ac:
                    5e:e8:8b:7f:1a:05:61:4e:f2:76:85:cb:4d:56:12:
                    2e:69:c4:d1:28:fd:c4:a5:fc:ce:9a:13:59:f4:ee:
                    c1:a4:8a:21:02:ae:d3:a2:8c:e9:8f:69:e9:d0:d6:
                    47:7b:c1:2c:33:6c:ba:5b:4f:00:15:01:78:c5:31:
                    be:04:12:ba:e3:b4:09:d5:c2:f5:d5:35:f9:c8:82:
                    42:51:b8:a6:48:28:51:e7:e5:e9:07:6d:6e:ea:69:
                    45:dd:d3:b6:05:e9:4b:25:7b:cf:76:a4:8d:88:30:
                    1a:48:e8:9d:c9:24:65:c3:7c:7c:b4:ea:2f:d4:78:
                    87:ff:db:b1:f0:d3:85:55:57:fb:28:f9:c9:b3:cb:
                    ed:cd:0a:a8:1c:7e:3c:12:7c:1c:d1:d6:09:e9:82:
                    e6:55:bd:6f:45:63:de:ed:63:11:62:bd:e6:88:6f:
                    08:68:64:a8:11:4b:a9:e0:ca:6e:bd:06:1c:a5:c4:
                    2d:5d:f2:0c:ac:59:47:b1:b5:bf:88:ba:03:2d:68:
                    e6:66:10:60:29:50:06:d0:62:6b:d5:49:26:3b:3c:
                    3c:be:65:48:e9:28:59:a5:fe:18:f8:bc:fb:b8:01:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:38:C0:F5:1D:EA:15:72:D3:4A:28:E7:6A:F2:1C:04:8D:63:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/25b89b78-808f-35df-a787-51a284abe54d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:39:24:cc:e8:86:b1:03:c1:1b:48:6b:e3:53:aa:37:27:6d:
         89:78:e3:07:11:26:7e:76:df:2f:3c:9f:57:2d:aa:aa:f2:2e:
         09:13:64:6a:40:8c:38:56:dd:ae:d5:b3:d3:d0:a9:29:5e:e2:
         02:a6:b4:0a:64:5c:aa:8d:13:42:f4:41:32:94:63:7b:4f:2a:
         b8:6a:8d:99:09:68:8b:96:21:1b:34:e8:ab:1c:ad:f0:b4:ef:
         80:11:26:a2:42:82:93:1a:cf:3c:97:f9:41:97:1c:9b:9b:87:
         08:17:3c:3f:3c:3e:96:e5:dc:c0:8b:e4:85:ae:48:af:20:82:
         47:b1:ab:04:7a:f3:a5:83:3a:bd:8a:5e:de:d0:83:f1:0f:84:
         7f:77:ce:44:a4:24:23:49:e5:bb:5b:57:e1:36:40:82:2c:25:
         12:96:3d:f3:1c:4a:92:12:69:77:cf:9b:1c:0d:b8:58:4a:c3:
         2c:fb:18:31:28:72:de:73:5f:db:fa:5b:6e:e1:8a:36:eb:f2:
         a9:74:98:99:7c:a6:1e:df:45:43:d3:dc:72:5c:23:a2:44:b4:
         70:23:71:63:7e:7b:4a:82:71:79:42:e9:b5:4f:32:a8:f4:bb:
         8f:77:58:f4:7a:de:5a:32:75:4b:41:8e:2d:36:16:76:fb:06:
         a7:09:75:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFhB5jTp51SIjRofAgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZkYzk5ODEtMWQ2Mi00NTAxLWEzY2UtOWFiMzg5YTQ5
YjRlMB4XDTIzMDMyODIwMzU1OVoXDTI1MDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGIzNDE1M2UtMjRmNS00MTVhLWIzNzAtODJlYjhhZmVkYzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPX7uljKP+yA8CQ7izq8N1nafacQATVUK172
gaxe6It/GgVhTvJ2hctNVhIuacTRKP3EpfzOmhNZ9O7BpIohAq7Toozpj2np0NZH
e8EsM2y6W08AFQF4xTG+BBK647QJ1cL11TX5yIJCUbimSChR5+XpB21u6mlF3dO2
BelLJXvPdqSNiDAaSOidySRlw3x8tOov1HiH/9ux8NOFVVf7KPnJs8vtzQqoHH48
Enwc0dYJ6YLmVb1vRWPe7WMRYr3miG8IaGSoEUup4MpuvQYcpcQtXfIMrFlHsbW/
iLoDLWjmZhBgKVAG0GJr1UkmOzw8vmVI6ShZpf4Y+Lz7uAGpvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOm+OMD1HeoVctNKKOdq8hwEjWMFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NmRj
OTk4MS0xZDYyLTQ1MDEtYTNjZS05YWIzODlhNDliNGUvMjViODliNzgtODA4Zi0z
NWRmLWE3ODctNTFhMjg0YWJlNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTZkYzk5ODEtMWQ2Mi00NTAxLWEz
Y2UtOWFiMzg5YTQ5YjRlLzU2ZGM5OTgxLTFkNjItNDUwMS1hM2NlLTlhYjM4OWE0
OWI0ZS5jcmwwHwYDVR0jBBgwFoAUzd1nPbP93i4sxOnlLZ999JawLmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81NmRjOTk4MS0xZDYyLTQ1MDEtYTNjZS05YWIz
ODlhNDliNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0l0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU5JMzohrEDwRtIa+NTqjcnbYl44wcRJn523y88n1ctqqryLgkTZGpA
jDhW3a7Vs9PQqSle4gKmtApkXKqNE0L0QTKUY3tPKrhqjZkJaIuWIRs06KscrfC0
74ARJqJCgpMazzyX+UGXHJubhwgXPD88Ppbl3MCL5IWuSK8ggkexqwR686WDOr2K
Xt7Qg/EPhH93zkSkJCNJ5btbV+E2QIIsJRKWPfMcSpISaXfPmxwNuFhKwyz7GDEo
ct5zX9v6W27hijbr8ql0mJl8ph7fRUPT3HJcI6JEtHAjcWN+e0qCcXlC6bVPMqj0
u493WPR63loydUtBji02Fnb7BqcJdTY=
-----END CERTIFICATE-----