Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b119b19-72d1-3af5-a3b3-fd816a078275.roa
File:                     2b119b19-72d1-3af5-a3b3-fd816a078275.roa (raw, json)
Hash identifier:          iccPZoVgyqMFS2DkZEMWn5HGadDF7t8wjgNj92gGuhw=
Subject key identifier:   4A:5F:7B:BA:CA:6A:D2:58:B5:63:16:63:57:33:02:8B:1A:38:9C:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DEFDCC91396F408058098F1E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b119b19-72d1-3af5-a3b3-fd816a078275.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.255.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:dc:c9:13:96:f4:08:05:80:98:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=7f19cba2-5fe5-4497-af6c-eadd2ecd224b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:0c:26:ae:db:b5:eb:27:7a:ed:95:4f:bc:
                    4c:60:8b:cc:ce:5d:e7:24:8c:2f:c2:2c:14:08:58:
                    9d:43:44:12:b5:07:ae:c4:ac:d5:a0:3c:99:8a:68:
                    c1:52:15:08:c9:91:04:7d:23:cb:16:0c:09:86:02:
                    ac:7b:8a:5d:ce:a3:1d:c6:01:50:fa:55:dc:f2:81:
                    06:45:c3:e1:04:0e:a2:4f:6b:3c:8b:d3:7e:87:22:
                    ed:c9:42:16:6e:22:e0:aa:7d:3d:aa:5b:fe:e2:9d:
                    21:7a:ef:06:69:1c:4a:01:06:e4:08:69:63:e8:8b:
                    ea:b5:13:c4:23:63:35:7f:5c:5a:4d:93:a7:71:23:
                    34:e9:ac:61:74:e8:37:aa:0e:f3:b1:5f:7b:18:ab:
                    ac:8c:a7:f7:6a:9c:02:83:f8:e5:d2:db:70:1a:e4:
                    b1:4e:49:73:b4:08:90:3a:33:6c:54:2f:63:99:43:
                    a8:e2:79:87:73:1c:a8:4c:88:70:e7:31:57:26:1d:
                    18:f1:4f:dc:77:88:11:dc:45:ce:e2:6f:20:53:0d:
                    8b:ce:95:50:2c:1d:c8:92:3f:04:86:73:c2:5e:9e:
                    50:e3:df:7f:6f:45:03:19:ea:9a:2b:fe:7c:42:95:
                    14:4f:1d:32:c7:fa:68:de:86:5a:0b:12:2c:3a:d0:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:7B:BA:CA:6A:D2:58:B5:63:16:63:57:33:02:8B:1A:38:9C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b119b19-72d1-3af5-a3b3-fd816a078275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.255.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:8c:3c:67:b7:1e:4d:b4:19:4a:40:58:19:3f:ed:ac:a1:
         31:8e:d9:a4:6f:85:be:88:58:3f:75:ba:81:32:ae:7f:e0:1e:
         1a:82:3f:bf:a6:a9:26:da:64:25:fa:b3:01:61:17:88:eb:42:
         f6:94:37:b7:c4:8d:0d:c4:20:4e:c3:83:ef:2c:11:31:81:c2:
         dd:c1:ef:47:36:72:36:ea:d2:44:6a:fc:22:bf:91:7c:e5:bd:
         39:aa:82:ab:5f:54:42:39:4e:42:f4:ef:47:c2:b0:c8:60:33:
         69:78:7b:12:90:13:21:3a:bf:9d:29:9f:61:23:ba:a9:e3:32:
         9f:63:0b:55:47:5d:d6:43:f2:bb:7c:73:6f:45:37:e8:e5:12:
         c7:14:6d:21:c9:9b:c8:73:82:7d:15:2e:d0:ff:2b:e3:60:d0:
         36:ad:7f:91:00:e4:38:60:9b:fc:64:8f:dc:82:db:c5:fc:47:
         56:e5:0b:30:2f:19:85:2e:42:80:1d:2c:38:f7:a8:e9:6f:bf:
         00:b9:84:58:18:c6:78:e6:89:88:bf:1d:51:65:d0:f1:1e:8f:
         69:98:ba:dc:50:f7:06:62:d1:d4:99:76:c7:39:37:25:c5:06:
         75:b2:fb:9c:76:09:f6:14:61:4e:2d:aa:1e:d6:f9:d7:1d:b1:
         fd:65:ed:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3v3MkTlvQIBYCY8eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUxNzEyMDAwMFoXDTI1MDUxNjA0MDAwMFowLzEtMCsGA1UEAxMk
N2YxOWNiYTItNWZlNS00NDk3LWFmNmMtZWFkZDJlY2QyMjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ0MJq7btesneu2VT7xMYIvMzl3nJIwvwiwU
CFidQ0QStQeuxKzVoDyZimjBUhUIyZEEfSPLFgwJhgKse4pdzqMdxgFQ+lXc8oEG
RcPhBA6iT2s8i9N+hyLtyUIWbiLgqn09qlv+4p0heu8GaRxKAQbkCGlj6IvqtRPE
I2M1f1xaTZOncSM06axhdOg3qg7zsV97GKusjKf3apwCg/jl0ttwGuSxTklztAiQ
OjNsVC9jmUOo4nmHcxyoTIhw5zFXJh0Y8U/cd4gR3EXO4m8gUw2LzpVQLB3Ikj8E
hnPCXp5Q499/b0UDGeqaK/58QpUUTx0yx/po3oZaCxIsOtBtXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpfe7rKatJYtWMWY1czAosaOJzWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmIxMTliMTktNzJkMS0z
YWY1LWEzYjMtZmQ4MTZhMDc4Mjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACifjDxntx5NtBlKQFgZP+2soTGO2aRvhb6IWD91uoEyrn/gHhqCP7+m
qSbaZCX6swFhF4jrQvaUN7fEjQ3EIE7Dg+8sETGBwt3B70c2cjbq0kRq/CK/kXzl
vTmqgqtfVEI5TkL070fCsMhgM2l4exKQEyE6v50pn2EjuqnjMp9jC1VHXdZD8rt8
c29FN+jlEscUbSHJm8hzgn0VLtD/K+Ng0Datf5EA5Dhgm/xkj9yC28X8R1blCzAv
GYUuQoAdLDj3qOlvvwC5hFgYxnjmiYi/HVFl0PEej2mYutxQ9wZi0dSZdsc5NyXF
BnWy+5x2CfYUYU4tqh7W+dcdsf1l7a8=
-----END CERTIFICATE-----