Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/695aa1b6-bfa9-3f02-b089-383b039ee7c3.roa
File:                     695aa1b6-bfa9-3f02-b089-383b039ee7c3.roa (raw, json)
Hash identifier:          2a4vfpeS6e1icCuDAzBdXf75gUG9Df/EsOEqkYvxbYs=
Subject key identifier:   9D:20:72:D3:4E:F7:75:4C:4F:7A:CB:46:9D:D8:FB:61:9C:2B:DB:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DDC4A27FD4034E10392048500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/695aa1b6-bfa9-3f02-b089-383b039ee7c3.roa
Signing time:             Tue 10 May 2022 12:00:00 +0000
ROA not before:           Tue 10 May 2022 12:00:00 +0000
ROA not after:            Fri 09 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        173.61.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:dc:4a:27:fd:40:34:e1:03:92:04:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 12:00:00 2022 GMT
            Not After : May  9 04:00:00 2025 GMT
        Subject: CN=256b63ab-39d2-4e61-b477-9f6fbdead3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:59:23:50:76:14:2f:e5:2e:25:c6:92:d1:
                    c5:65:24:bc:e6:e9:6a:d1:e0:cc:ea:65:bd:64:d6:
                    0a:78:64:e1:90:44:d3:77:32:84:a9:d3:da:1a:d5:
                    0e:62:a9:7e:6e:d6:92:e9:50:86:01:99:d1:89:83:
                    59:cd:ff:dd:42:db:cb:25:6a:14:1a:43:b4:51:9d:
                    1c:98:27:e4:27:10:7f:da:ea:1b:09:32:81:f3:19:
                    27:be:30:f9:86:70:7d:58:cd:13:94:df:3b:6a:f7:
                    d5:cf:da:1b:ed:7c:42:71:a2:83:8f:91:ff:2b:8a:
                    2f:9f:20:7e:dc:18:26:9d:ae:b7:c4:0c:eb:0a:d3:
                    2d:23:ac:7c:c3:d6:75:f8:c5:89:ad:ab:4c:53:2c:
                    c7:a9:23:94:76:f4:53:25:11:f3:ef:98:12:b1:a7:
                    ec:c0:10:65:73:9f:34:59:01:76:14:1b:3f:da:c7:
                    12:43:8e:71:1a:e1:34:3e:33:3d:4b:9e:59:12:3d:
                    bb:f5:ce:9c:b9:34:68:61:ad:ce:13:e2:ff:b5:58:
                    fc:10:39:b5:7f:e8:60:78:55:90:2a:27:b0:a1:95:
                    37:9b:ea:2f:a9:75:25:4d:a0:96:e6:d5:52:a0:fc:
                    e4:5c:92:e2:6d:38:fd:25:e4:fd:74:b2:e9:56:99:
                    0c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:72:D3:4E:F7:75:4C:4F:7A:CB:46:9D:D8:FB:61:9C:2B:DB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/695aa1b6-bfa9-3f02-b089-383b039ee7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:49:ac:07:d9:08:ad:0a:e2:d3:47:d9:e0:a2:5b:77:15:
         32:d4:4a:df:2d:23:86:22:3a:34:6b:1c:52:7b:86:9b:61:95:
         5a:29:f2:ab:26:52:db:05:99:78:f7:47:aa:8e:db:54:86:22:
         e2:58:9a:44:e1:6d:99:39:61:aa:c3:40:1c:b0:ba:29:81:f5:
         82:3a:d4:a4:fb:f4:1d:60:9a:70:49:8b:04:1f:a0:a7:dc:94:
         56:6b:4d:d5:a5:c7:18:fe:e6:19:bb:1c:15:2e:5c:94:4e:d6:
         3f:04:c5:8f:3d:c7:69:c9:de:c0:18:fd:04:98:09:00:f0:fa:
         c4:36:f3:f1:52:c7:2c:7b:4b:d8:12:e9:97:3c:4f:a9:d9:ee:
         8f:ba:86:05:ef:cd:b1:b6:88:87:b9:7e:a6:0e:5d:6a:94:03:
         22:31:e5:98:de:a4:67:58:75:20:7c:31:66:a3:a0:29:81:a1:
         93:11:37:24:26:1c:62:e3:fc:af:58:ba:8f:d0:30:6f:3b:10:
         b9:6f:07:f1:05:f2:d6:1f:2a:f9:4b:d3:44:ae:59:0c:3c:97:
         dd:fc:11:4d:3e:a2:0d:06:ff:81:53:a1:f2:5d:9b:2e:7a:41:
         3e:f0:29:e9:22:3a:10:b4:28:41:c0:c4:3a:a2:11:ed:3d:cf:
         59:e5:38:30
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3cSif9QDThA5IEhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUxMDEyMDAwMFoXDTI1MDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk
MjU2YjYzYWItMzlkMi00ZTYxLWI0NzctOWY2ZmJkZWFkM2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0tZI1B2FC/lLiXGktHFZSS85ulq0eDM6mW9
ZNYKeGThkETTdzKEqdPaGtUOYql+btaS6VCGAZnRiYNZzf/dQtvLJWoUGkO0UZ0c
mCfkJxB/2uobCTKB8xknvjD5hnB9WM0TlN87avfVz9ob7XxCcaKDj5H/K4ovnyB+
3Bgmna63xAzrCtMtI6x8w9Z1+MWJratMUyzHqSOUdvRTJRHz75gSsafswBBlc580
WQF2FBs/2scSQ45xGuE0PjM9S55ZEj279c6cuTRoYa3OE+L/tVj8EDm1f+hgeFWQ
KiewoZU3m+ovqXUlTaCW5tVSoPzkXJLibTj9JeT9dLLpVpkMQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ0gctNO93VMT3rLRp3Y+2GcK9ssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjk1YWExYjYtYmZhOS0z
ZjAyLWIwODktMzgzYjAzOWVlN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArT0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaY1JrAfZCK0K4tNH2eCiW3cVMtRK3y0jhiI6NGscUnuGm2GVWinyqyZS
2wWZePdHqo7bVIYi4liaROFtmTlhqsNAHLC6KYH1gjrUpPv0HWCacEmLBB+gp9yU
VmtN1aXHGP7mGbscFS5clE7WPwTFjz3HacnewBj9BJgJAPD6xDbz8VLHLHtL2BLp
lzxPqdnuj7qGBe/NsbaIh7l+pg5dapQDIjHlmN6kZ1h1IHwxZqOgKYGhkxE3JCYc
YuP8r1i6j9AwbzsQuW8H8QXy1h8q+UvTRK5ZDDyX3fwRTT6iDQb/gVOh8l2bLnpB
PvAp6SI6ELQoQcDEOqIR7T3PWeU4MA==
-----END CERTIFICATE-----