Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d1a7fa1-4f0a-3779-a344-1f23d2d45bbc.roa
File:                     0d1a7fa1-4f0a-3779-a344-1f23d2d45bbc.roa (raw, json)
Hash identifier:          ToYPmJ/d5Pk5nSHM0idBCHPY0TdKhSiWTqseVB2LuBM=
Subject key identifier:   18:3D:9F:CA:6D:F3:A6:B8:02:74:4E:B6:1F:E4:BE:28:6D:D8:C8:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07157C952B7A76B0F92B0960
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d1a7fa1-4f0a-3779-a344-1f23d2d45bbc.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.250.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:15:7c:95:2b:7a:76:b0:f9:2b:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=02bfc0ae-0390-43c9-8607-c9c09f81042e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:28:41:69:cc:ee:24:6d:d7:94:db:c7:9f:
                    93:8e:40:e1:1d:e4:ed:ee:b6:56:ff:1b:20:b2:9e:
                    ad:84:7b:2e:31:83:1c:c7:25:15:ab:f3:f6:70:e3:
                    5b:70:43:f7:ce:fc:38:a8:dc:a6:df:72:cf:e9:c0:
                    6d:6e:b6:49:9e:02:3a:32:db:53:f3:7c:e1:09:cb:
                    fb:4e:94:15:36:90:ce:7e:67:11:03:a3:37:d9:2b:
                    2b:1b:8c:65:d6:0a:57:36:7e:83:1a:7d:3c:ea:73:
                    37:bf:43:d8:26:2b:1d:6b:a8:1f:d3:5f:ad:d3:c4:
                    85:2b:f5:e9:c0:3f:80:7d:8e:84:ad:77:8d:87:7c:
                    93:8f:78:f3:e4:e0:0d:f4:9d:b0:32:36:b8:2d:2a:
                    03:53:7d:0d:34:9a:a0:06:8a:19:43:be:41:8b:94:
                    8e:2c:7a:b7:6b:13:03:8b:2d:12:22:3f:ec:5d:1c:
                    8e:37:cf:80:50:cc:98:0b:5e:64:d1:22:26:eb:50:
                    fd:60:f5:94:bc:e4:90:94:50:2a:37:29:84:ef:67:
                    7d:a7:0a:32:19:58:e2:0d:f7:23:0c:9d:ca:bd:6f:
                    12:93:c1:a6:b1:d6:eb:71:30:c4:3e:94:34:7a:f8:
                    e6:13:1f:dd:5b:51:eb:3d:b1:e1:05:ea:ee:b1:58:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3D:9F:CA:6D:F3:A6:B8:02:74:4E:B6:1F:E4:BE:28:6D:D8:C8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d1a7fa1-4f0a-3779-a344-1f23d2d45bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.250.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bc:31:6f:f4:01:79:ec:aa:80:02:f7:8f:56:40:8d:23:c1:
         b9:11:82:bd:d2:d0:b3:81:52:dc:e0:4b:94:e0:b5:e6:d1:4c:
         67:b8:91:82:e8:cf:f9:7b:7c:5d:d0:58:3d:fd:89:71:aa:cf:
         11:8a:0d:70:78:dc:30:33:3f:95:13:cc:00:51:81:d5:1a:a3:
         ae:e2:be:47:dc:0f:c0:85:e8:54:e4:e2:44:d7:db:89:3b:41:
         8b:51:53:b9:cc:42:90:27:f2:3e:ee:08:37:b7:0b:ac:0f:e6:
         11:78:14:50:50:66:fa:9c:d8:28:4e:a6:a2:9c:0b:e2:3d:d5:
         04:bf:0a:b6:ff:7d:11:50:4f:15:95:f8:98:7e:7f:5f:3e:be:
         40:35:ea:ae:7f:5a:60:e8:f7:8c:06:ab:a9:e0:1b:9f:16:07:
         ab:ab:3d:04:93:89:06:73:b9:04:66:9f:a7:01:cc:d9:a7:68:
         9b:9b:f6:54:9a:46:2a:11:fa:8f:ef:e1:7b:49:83:25:76:5c:
         3d:21:a5:99:a9:e1:13:cb:94:0e:43:8e:10:5c:c2:47:0c:84:
         a0:7c:13:04:bc:9c:d1:b7:d5:b2:99:51:e4:c1:8c:fb:5b:7b:
         c2:9b:57:e5:12:a3:f5:78:a6:87:a4:fd:a5:96:60:2b:30:52:
         fd:a0:a5:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8HFXyVK3p2sPkrCWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MDJiZmMwYWUtMDM5MC00M2M5LTg2MDctYzljMDlmODEwNDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3QoQWnM7iRt15Tbx5+TjkDhHeTt7rZW/xsg
sp6thHsuMYMcxyUVq/P2cONbcEP3zvw4qNym33LP6cBtbrZJngI6MttT83zhCcv7
TpQVNpDOfmcRA6M32SsrG4xl1gpXNn6DGn086nM3v0PYJisda6gf01+t08SFK/Xp
wD+AfY6ErXeNh3yTj3jz5OAN9J2wMja4LSoDU30NNJqgBooZQ75Bi5SOLHq3axMD
iy0SIj/sXRyON8+AUMyYC15k0SIm61D9YPWUvOSQlFAqNymE72d9pwoyGVjiDfcj
DJ3KvW8Sk8GmsdbrcTDEPpQ0evjmEx/dW1HrPbHhBerusVjiwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBg9n8pt86a4AnROth/kviht2MiZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGQxYTdmYTEtNGYwYS0z
Nzc5LWEzNDQtMWYyM2QyZDQ1YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR/oAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEO8MW/0AXnsqoAC949WQI0jwbkRgr3S0LOBUtzgS5TgtebRTGe4kYLo
z/l7fF3QWD39iXGqzxGKDXB43DAzP5UTzABRgdUao67ivkfcD8CF6FTk4kTX24k7
QYtRU7nMQpAn8j7uCDe3C6wP5hF4FFBQZvqc2ChOpqKcC+I91QS/Crb/fRFQTxWV
+Jh+f18+vkA16q5/WmDo94wGq6ngG58WB6urPQSTiQZzuQRmn6cBzNmnaJub9lSa
RioR+o/v4XtJgyV2XD0hpZmp4RPLlA5DjhBcwkcMhKB8EwS8nNG31bKZUeTBjPtb
e8KbV+USo/V4poek/aWWYCswUv2gpXg=
-----END CERTIFICATE-----