Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72dfd143-56fb-3861-b762-a723d09d7cf6.roa
File:                     72dfd143-56fb-3861-b762-a723d09d7cf6.roa (raw, json)
Hash identifier:          V32ULIZzF3QRgY8elQ38A93QknKHpZ8QWLX3AEC1VYo=
Subject key identifier:   BB:37:90:82:C1:2F:EF:EE:E5:C0:D2:59:D2:8D:D7:55:93:A7:4B:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583E038135578A5DFD489143DAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72dfd143-56fb-3861-b762-a723d09d7cf6.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.245.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:03:81:35:57:8a:5d:fd:48:91:43:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=8c31df63-eabd-4ae6-823b-aefc86ee9924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:10:72:e6:33:9b:a6:80:9f:86:e5:35:04:
                    07:81:02:cc:ab:3e:ac:1c:7c:fe:bf:0d:22:85:a6:
                    71:17:6c:39:6b:2d:5d:bf:22:34:9f:d5:c8:bb:8f:
                    5d:cc:79:9d:4a:93:33:86:e8:3a:d3:8a:9d:b9:de:
                    92:07:5b:4f:2d:9b:7c:36:5c:d5:6f:93:17:33:ef:
                    68:79:99:d5:2f:a6:ca:f5:18:fe:be:4f:be:bc:5d:
                    e3:14:bb:2d:f9:e6:2e:c6:48:bf:3d:5b:bb:d2:a4:
                    0a:ad:14:d3:94:ca:d8:cb:7c:5b:90:92:77:7e:8f:
                    fc:74:74:9f:16:29:d7:02:43:09:27:f3:c8:4e:99:
                    3d:ac:52:1f:13:26:0e:f5:cf:b3:a8:5c:da:bb:a6:
                    5c:4f:a6:45:1a:32:cf:f1:c2:1d:c7:68:f5:de:87:
                    ea:db:9a:5e:90:60:bd:34:8e:91:70:51:85:1c:28:
                    0c:16:ca:c6:21:33:73:7b:e6:9c:2f:a6:75:5c:88:
                    61:77:94:bd:f2:65:2c:a9:79:24:ac:fd:ad:e7:3c:
                    23:98:09:54:78:2e:5d:d8:aa:9a:ea:cd:2e:39:73:
                    3c:0e:48:c1:03:2c:78:18:70:4e:a5:5b:b2:6f:d6:
                    3f:0b:da:f5:06:92:72:d6:35:35:2b:7a:6e:d8:fe:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:37:90:82:C1:2F:EF:EE:E5:C0:D2:59:D2:8D:D7:55:93:A7:4B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72dfd143-56fb-3861-b762-a723d09d7cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:2f:8b:4f:07:a6:93:26:ea:3e:d8:be:31:90:4b:6f:28:
         d4:9c:00:c1:60:5d:7a:fb:b5:c1:9f:40:d5:fc:86:2b:82:10:
         30:d4:1b:02:b3:2a:78:fa:db:69:b3:36:53:4f:5d:ad:29:8a:
         56:97:70:ca:8c:d5:2f:9f:23:40:a1:4b:d6:fd:c8:1e:b0:9c:
         33:0c:3a:82:c1:9a:7f:ca:eb:5f:10:8f:54:02:7b:69:18:5e:
         14:f5:df:ed:54:8d:f6:05:2a:65:73:07:e1:61:35:e1:b4:b2:
         74:64:ff:81:26:bb:93:10:4b:a7:4e:7a:5a:a4:b9:dc:af:69:
         92:d5:00:05:0c:82:5e:5c:7b:b3:68:3d:b4:f6:56:79:26:21:
         1a:ee:0a:21:24:24:86:e4:bd:0e:e3:91:0d:86:12:d8:a1:8e:
         47:2f:23:6e:9a:b1:a7:32:f5:ee:8d:ad:93:89:b8:e4:14:cf:
         af:2e:58:31:88:cd:43:16:c4:f6:4b:f8:1d:5c:dd:32:23:38:
         b9:81:9a:45:ce:8b:50:3b:31:3c:d6:0a:27:b9:6d:2e:ec:e8:
         ac:a5:aa:41:87:4c:af:49:f5:29:45:0a:2e:2b:3e:76:d2:92:
         b8:00:97:f0:43:4f:e3:7e:2b:2e:ec:ee:c8:b0:10:aa:79:37:
         7b:c3:43:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4DgTVXil39SJFD2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUyNDEyMDAwMFoXDTI1MDUyMzA0MDAwMFowLzEtMCsGA1UEAxMk
OGMzMWRmNjMtZWFiZC00YWU2LTgyM2ItYWVmYzg2ZWU5OTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutYQcuYzm6aAn4blNQQHgQLMqz6sHHz+vw0i
haZxF2w5ay1dvyI0n9XIu49dzHmdSpMzhug604qdud6SB1tPLZt8NlzVb5MXM+9o
eZnVL6bK9Rj+vk++vF3jFLst+eYuxki/PVu70qQKrRTTlMrYy3xbkJJ3fo/8dHSf
FinXAkMJJ/PITpk9rFIfEyYO9c+zqFzau6ZcT6ZFGjLP8cIdx2j13ofq25pekGC9
NI6RcFGFHCgMFsrGITNze+acL6Z1XIhhd5S98mUsqXkkrP2t5zwjmAlUeC5d2Kqa
6s0uOXM8DkjBAyx4GHBOpVuyb9Y/C9r1BpJy1jU1K3pu2P6j3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLs3kILBL+/u5cDSWdKN11WTp0uFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzJkZmQxNDMtNTZmYi0z
ODYxLWI3NjItYTcyM2QwOWQ3Y2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR/UAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJNL4tPB6aTJuo+2L4xkEtvKNScAMFgXXr7tcGfQNX8hiuCEDDUGwKz
Knj622mzNlNPXa0pilaXcMqM1S+fI0ChS9b9yB6wnDMMOoLBmn/K618Qj1QCe2kY
XhT13+1UjfYFKmVzB+FhNeG0snRk/4Emu5MQS6dOelqkudyvaZLVAAUMgl5ce7No
PbT2VnkmIRruCiEkJIbkvQ7jkQ2GEtihjkcvI26asacy9e6NrZOJuOQUz68uWDGI
zUMWxPZL+B1c3TIjOLmBmkXOi1A7MTzWCie5bS7s6KylqkGHTK9J9SlFCi4rPnbS
krgAl/BDT+N+Ky7s7siwEKp5N3vDQ+A=
-----END CERTIFICATE-----