Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06082dfc-a85a-33d0-9f32-c1d730dcb967.roa
File:                     06082dfc-a85a-33d0-9f32-c1d730dcb967.roa (raw, json)
Hash identifier:          joHT9tKq31ZusdK4dV4dHR0LeXcvc67ttH2QGRtKe4A=
Subject key identifier:   12:9E:87:6E:33:8F:C9:AA:9E:5D:6A:FC:49:85:E5:25:46:45:C4:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DEFE19FE8AF59E894FB85B600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06082dfc-a85a-33d0-9f32-c1d730dcb967.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        96.245.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:e1:9f:e8:af:59:e8:94:fb:85:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=90db1b02-7e30-4d1a-b113-554e2b17abf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:cc:a6:e2:82:5b:26:1f:bf:9c:8f:5a:6e:
                    ab:33:a0:f5:d6:f9:87:cb:4b:fa:c3:d6:34:a2:64:
                    6f:30:2c:f5:9f:4d:d6:b7:36:a2:7a:36:ea:34:c5:
                    ac:67:a4:07:52:c6:68:e4:73:22:58:0e:00:6c:6f:
                    00:bd:03:c9:90:b2:b4:e6:74:e7:61:fe:11:1a:ff:
                    99:88:b0:f2:57:9f:ad:3d:2b:dd:03:25:17:de:2c:
                    f7:71:a6:ae:fc:3f:2f:08:50:0e:18:39:87:6a:9a:
                    16:59:c2:6e:a8:07:00:a4:77:23:31:31:8b:b4:c2:
                    8a:5f:5c:bc:e7:12:c5:01:12:3e:20:eb:06:8e:8f:
                    ce:27:61:92:97:30:fe:aa:c2:b0:12:e3:fd:a4:29:
                    10:b5:e8:4e:89:1e:e7:8f:ad:32:3b:29:79:2b:08:
                    d7:7b:ce:9e:a9:f9:ca:dc:47:e9:b0:4d:64:2f:f6:
                    7a:53:b5:5c:1a:6e:2c:68:b8:59:0e:e6:86:48:43:
                    4a:dc:eb:89:4f:a5:49:00:3e:2f:8e:71:d1:c0:13:
                    72:a8:47:e7:9d:7b:6c:4c:db:f3:6c:83:b9:9b:03:
                    e1:1f:36:44:18:b0:40:5f:aa:67:8a:65:1c:f9:22:
                    a0:4f:14:68:97:80:03:16:ca:d7:f4:67:a5:5c:c9:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9E:87:6E:33:8F:C9:AA:9E:5D:6A:FC:49:85:E5:25:46:45:C4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06082dfc-a85a-33d0-9f32-c1d730dcb967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:6d:d2:d3:ad:e4:3d:5a:49:79:0e:2f:be:06:96:5f:22:
         6d:a3:6a:59:ca:63:5d:d6:df:2d:9b:c2:cf:04:81:37:66:c0:
         e0:35:0f:2c:ec:a5:8a:29:e4:60:2e:f8:d7:2b:fc:4c:3b:c2:
         65:4b:e1:d4:0a:91:47:c1:56:51:53:25:08:4f:a2:ba:85:7a:
         6c:92:6d:01:9c:71:41:c0:86:9f:21:6c:32:9b:f8:e6:2b:db:
         b4:ea:79:53:17:59:50:8e:de:8d:84:5f:33:17:49:f6:1f:6a:
         be:cb:ad:d5:5f:55:33:80:6d:b5:32:1d:8a:7d:c8:f2:ff:61:
         79:d6:a4:3b:81:8e:c9:3c:23:cf:c9:31:72:08:8a:85:fd:3a:
         6b:2b:00:3f:78:46:22:7f:ac:ba:a6:5e:d0:b8:20:14:be:a5:
         b1:63:e2:00:61:94:e9:86:15:7f:e5:bd:9d:4a:69:49:ac:70:
         c4:a0:91:d2:16:11:06:e4:03:a8:2e:b9:52:4b:49:9b:5d:95:
         37:9d:a9:b9:0e:86:98:81:3f:cc:69:c7:20:f1:2b:3a:be:6d:
         df:37:a1:aa:a7:61:7a:3a:a0:3a:4c:94:59:7b:a9:6d:34:cf:
         08:53:e9:50:7d:55:a8:e7:7c:ed:e4:9c:35:ac:ef:6a:c6:a2:
         17:e7:2c:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3v4Z/or1nolPuFtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUxNzEyMDAwMFoXDTI1MDUxNjA0MDAwMFowLzEtMCsGA1UEAxMk
OTBkYjFiMDItN2UzMC00ZDFhLWIxMTMtNTU0ZTJiMTdhYmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi03MpuKCWyYfv5yPWm6rM6D11vmHy0v6w9Y0
omRvMCz1n03WtzaiejbqNMWsZ6QHUsZo5HMiWA4AbG8AvQPJkLK05nTnYf4RGv+Z
iLDyV5+tPSvdAyUX3iz3caau/D8vCFAOGDmHapoWWcJuqAcApHcjMTGLtMKKX1y8
5xLFARI+IOsGjo/OJ2GSlzD+qsKwEuP9pCkQtehOiR7nj60yOyl5KwjXe86eqfnK
3EfpsE1kL/Z6U7VcGm4saLhZDuaGSENK3OuJT6VJAD4vjnHRwBNyqEfnnXtsTNvz
bIO5mwPhHzZEGLBAX6pnimUc+SKgTxRol4ADFsrX9GelXMkrhwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBKeh24zj8mqnl1q/EmF5SVGRcSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDYwODJkZmMtYTg1YS0z
M2QwLTlmMzItYzFkNzMwZGNiOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYPUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATU5t0tOt5D1aSXkOL74Gll8ibaNqWcpjXdbfLZvCzwSBN2bA4DUPLOyl
iinkYC741yv8TDvCZUvh1AqRR8FWUVMlCE+iuoV6bJJtAZxxQcCGnyFsMpv45ivb
tOp5UxdZUI7ejYRfMxdJ9h9qvsut1V9VM4BttTIdin3I8v9hedakO4GOyTwjz8kx
cgiKhf06aysAP3hGIn+suqZe0LggFL6lsWPiAGGU6YYVf+W9nUppSaxwxKCR0hYR
BuQDqC65UktJm12VN52puQ6GmIE/zGnHIPErOr5t3zehqqdhejqgOkyUWXupbTTP
CFPpUH1VqOd87eScNazvasaiF+csRA==
-----END CERTIFICATE-----