Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/bd8bcead-a839-3153-be9f-fede01352ca8.roa
File:                     bd8bcead-a839-3153-be9f-fede01352ca8.roa (raw, json)
Hash identifier:          AYUdwNt8ytnb/qoyD0x2PCTcfYv+eeeNX1EwYjwYWBo=
Subject key identifier:   70:B1:1B:87:A2:08:DE:7D:46:3D:12:97:B8:E9:95:74:E4:2B:62:58
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F43285840C60F8A9D6CC548F80E716E80
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/bd8bcead-a839-3153-be9f-fede01352ca8.roa
Signing time:             Fri 27 Jan 2023 22:39:07 +0000
ROA not before:           Fri 27 Jan 2023 22:39:07 +0000
ROA not after:            Thu 24 Apr 2025 04:00:00 +0000
asID:                     200536
IP address blocks:        2602:faac:a0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 22 Feb 2023 15:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c6:0f:8a:9d:6c:c5:48:f8:0e:71:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Jan 27 22:39:07 2023 GMT
            Not After : Apr 24 04:00:00 2025 GMT
        Subject: CN=9461f7fe-2322-4c57-90d9-82638ea62afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ec:45:73:18:23:e7:1c:c7:01:cd:80:de:ba:
                    0a:34:7a:2b:93:4e:c7:1e:30:17:3e:87:b7:6e:c4:
                    5b:f4:01:72:b1:45:62:5f:e8:62:3e:c4:f0:cf:e9:
                    fd:ac:59:66:2b:cb:87:24:13:07:3b:fd:20:69:69:
                    0d:8c:75:47:35:a7:43:ed:3b:0f:bc:ac:33:32:4c:
                    bb:a5:bd:34:31:c7:6a:cf:f8:b2:fb:e6:8f:ef:c3:
                    c1:8a:4c:66:62:08:ba:eb:fe:52:23:f7:9a:4a:65:
                    0b:59:6a:86:25:fb:53:c9:ce:9c:f0:fe:0d:55:df:
                    1c:cd:00:4b:5c:17:24:f3:93:c8:3b:92:20:e0:0d:
                    68:6c:c5:d1:4d:fb:fd:af:f6:bd:bb:55:c6:8e:1d:
                    3c:6c:c4:e1:05:30:e4:26:e6:da:dd:fc:88:ea:62:
                    43:0f:c2:9f:f4:7d:cf:f1:56:d3:03:a9:58:5a:66:
                    d9:f0:a6:26:ad:0b:7e:53:30:99:ed:87:9e:85:9d:
                    be:fa:07:07:bc:56:22:64:8a:37:9e:40:18:9c:9e:
                    c9:a7:2d:98:e8:14:de:2f:28:d7:97:93:46:57:b0:
                    20:33:69:e0:c4:0c:56:c3:82:db:cb:e1:c7:c1:d5:
                    67:5f:6d:3f:d3:60:97:19:47:85:08:e8:81:b6:f6:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B1:1B:87:A2:08:DE:7D:46:3D:12:97:B8:E9:95:74:E4:2B:62:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/bd8bcead-a839-3153-be9f-fede01352ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faac:a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:45:76:16:38:53:19:2e:5c:45:da:bb:09:db:af:cb:74:
         52:7c:9e:a5:0e:4f:1d:38:c5:09:05:9b:d9:cb:df:98:44:6b:
         4b:f5:ae:ae:54:55:54:88:ec:31:b4:77:08:75:de:25:f7:6b:
         ee:16:00:3b:87:e9:87:0c:cf:ea:e0:6d:a7:94:dc:f6:02:ec:
         60:28:61:9e:b1:69:11:d0:98:a5:cd:13:24:c2:67:05:a0:a8:
         2b:a0:41:50:7b:8a:23:48:9d:7a:7e:b7:56:8b:13:82:e1:e6:
         89:8c:e8:7d:6e:6a:33:f6:7b:99:97:89:fc:e2:83:47:c4:92:
         21:28:0b:c2:93:bb:2a:4e:8e:b1:ba:71:3b:f0:cb:22:3f:47:
         f5:8c:18:ae:1f:49:92:9b:5e:83:69:e2:91:dc:71:ea:6b:a1:
         61:c7:c7:9e:25:a2:97:91:3f:8b:26:30:ff:11:f7:12:91:6f:
         88:26:56:d7:e6:1d:22:a2:cf:8d:e2:a4:01:a4:de:53:ae:ed:
         65:96:c4:23:bc:f0:6e:ee:25:a4:f0:10:e9:4f:ad:cd:bf:ba:
         bc:fb:e9:98:04:21:bb:cb:87:19:3b:fc:ce:14:c3:ae:02:c5:
         b9:74:a8:c5:c8:b1:f4:8a:11:78:ea:56:9e:47:f1:f4:cb:34:
         38:9e:75:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEDGD4qdbMVI+A5xboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBiMzU1NDYtNzY5ZS00MWE2LTk4N2UtMmE5NzMyNTU1
ZGU0MB4XDTIzMDEyNzIyMzkwN1oXDTI1MDQyNDA0MDAwMFowLzEtMCsGA1UEAxMk
OTQ2MWY3ZmUtMjMyMi00YzU3LTkwZDktODI2MzhlYTYyYWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+xFcxgj5xzHAc2A3roKNHork07HHjAXPoe3
bsRb9AFysUViX+hiPsTwz+n9rFlmK8uHJBMHO/0gaWkNjHVHNadD7TsPvKwzMky7
pb00Mcdqz/iy++aP78PBikxmYgi66/5SI/eaSmULWWqGJftTyc6c8P4NVd8czQBL
XBck85PIO5Ig4A1obMXRTfv9r/a9u1XGjh08bMThBTDkJuba3fyI6mJDD8Kf9H3P
8VbTA6lYWmbZ8KYmrQt+UzCZ7YeehZ2++gcHvFYiZIo3nkAYnJ7Jpy2Y6BTeLyjX
l5NGV7AgM2ngxAxWw4Lby+HHwdVnX20/02CXGUeFCOiBtvb6/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHCxG4eiCN59Rj0Sl7jplXTkK2JYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGIz
NTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1NTVkZTQvYmQ4YmNlYWQtYTgzOS0z
MTUzLWJlOWYtZmVkZTAxMzUyY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBiMzU1NDYtNzY5ZS00MWE2LTk4
N2UtMmE5NzMyNTU1ZGU0L2UwYjM1NTQ2LTc2OWUtNDFhNi05ODdlLTJhOTczMjU1
NWRlNC5jcmwwHwYDVR0jBBgwFoAU/fYXpYF8sxi34xH/sPzf0+zMCKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3
MzI1NTVkZTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6rACg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFx+RXYWOFMZLlxF2rsJ26/LdFJ8nqUOTx04xQkFm9nL35hEa0v1
rq5UVVSI7DG0dwh13iX3a+4WADuH6YcMz+rgbaeU3PYC7GAoYZ6xaRHQmKXNEyTC
ZwWgqCugQVB7iiNInXp+t1aLE4Lh5omM6H1uajP2e5mXifzig0fEkiEoC8KTuypO
jrG6cTvwyyI/R/WMGK4fSZKbXoNp4pHcceproWHHx54lopeRP4smMP8R9xKRb4gm
VtfmHSKiz43ipAGk3lOu7WWWxCO88G7uJaTwEOlPrc2/urz76ZgEIbvLhxk7/M4U
w64Cxbl0qMXIsfSKEXjqVp5H8fTLNDiedZU=
-----END CERTIFICATE-----