Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c98a294-0373-3624-8ed1-0c6dd0bb2463.roa
File:                     9c98a294-0373-3624-8ed1-0c6dd0bb2463.roa (raw, json)
Hash identifier:          cf7wpr9pNNm3gi0yEllv0C/byTQE22eXDb6DJxmbZws=
Subject key identifier:   9C:8D:17:60:F7:38:E4:A7:63:C2:BE:3A:F5:B1:F3:38:2B:7F:AC:04
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F072CFF102E74B0539678FF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c98a294-0373-3624-8ed1-0c6dd0bb2463.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        2600:40ff:fffb::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:2c:ff:10:2e:74:b0:53:96:78:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=2ddcf48b-66f7-48a0-9710-2765005ad8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:63:35:e6:4c:23:ad:c2:85:9b:63:19:47:
                    d7:29:c0:eb:41:96:bb:5e:b5:ef:02:82:0b:8a:27:
                    80:98:a6:b0:82:94:3a:d3:50:29:f8:24:07:85:51:
                    a8:a9:b4:0e:f2:12:88:d5:76:05:92:96:aa:fd:af:
                    13:ef:19:fe:99:d5:7e:01:c0:9e:5e:8b:b6:24:c4:
                    76:f1:45:2c:ed:a1:06:0b:98:41:8d:f3:11:f5:d5:
                    44:65:d8:8c:a2:37:a3:8e:ff:d1:e0:bc:d9:97:eb:
                    75:8e:a9:aa:a3:f9:6d:95:db:51:25:51:83:63:4b:
                    47:c8:32:1c:33:dd:1e:00:5b:8c:db:af:cc:88:da:
                    26:a9:14:47:8a:be:c2:7d:b0:00:56:dc:66:aa:0c:
                    9d:0b:10:09:5c:5c:83:1e:d3:83:b7:b7:c7:04:59:
                    6f:f0:76:27:18:99:5f:ed:45:17:56:d3:cd:97:55:
                    69:a1:75:d2:ed:94:03:b1:d8:e8:e3:9a:7c:d7:4f:
                    68:37:6c:39:e8:b2:91:93:26:e1:75:15:73:b3:2c:
                    16:1b:95:09:f0:54:2a:6f:9a:45:0f:05:de:b9:69:
                    f1:93:db:fa:79:f4:96:6e:cb:52:a0:91:b9:2e:e4:
                    f8:ab:11:ee:4e:29:b9:1b:6e:83:9f:ba:22:39:55:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:17:60:F7:38:E4:A7:63:C2:BE:3A:F5:B1:F3:38:2B:7F:AC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c98a294-0373-3624-8ed1-0c6dd0bb2463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:40ff:fffb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d8:7c:2e:f5:08:a0:db:5a:86:0b:b0:33:49:e4:a3:1c:a3:
         36:0a:00:bf:31:50:41:65:80:01:16:ad:6a:ac:bd:13:f4:8e:
         31:c5:ed:9e:78:5d:dc:5b:30:80:fd:54:43:e2:3d:62:61:33:
         6f:c3:05:1e:57:b5:5e:e0:d0:87:ec:c8:da:09:f0:80:7f:44:
         3c:83:1c:52:01:82:44:77:36:9e:d9:a9:80:d6:02:43:95:eb:
         dc:ef:d0:15:35:8d:58:38:77:57:51:4f:15:58:76:17:87:26:
         55:59:00:3b:ff:5b:23:e7:da:80:b6:8e:e7:86:fa:46:b9:26:
         6c:90:4b:42:e7:ba:e0:56:89:0f:9b:de:1e:d6:7f:c9:f0:74:
         00:18:7b:f6:ba:00:bb:ec:f3:f0:78:bb:65:e0:ba:4e:d7:05:
         24:88:03:b4:02:e2:11:25:14:8e:76:d0:30:9d:d7:0f:72:9f:
         48:0d:f7:19:de:b0:1b:48:1c:d9:3e:3a:97:ec:d1:59:76:c7:
         fd:39:ef:e1:ec:5f:44:98:93:55:8f:1b:5f:1c:ff:62:4b:69:
         f7:d0:b6:91:4e:f2:a7:a1:63:22:73:2e:4d:36:2f:e3:c2:2c:
         2d:75:c5:f3:84:32:0b:1e:5f:03:bd:b9:27:6c:e6:3c:f9:56:
         47:0f:10:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8HLP8QLnSwU5Z4/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MmRkY2Y0OGItNjZmNy00OGEwLTk3MTAtMjc2NTAwNWFkOGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3BjNeZMI63ChZtjGUfXKcDrQZa7XrXvAoIL
iieAmKawgpQ601Ap+CQHhVGoqbQO8hKI1XYFkpaq/a8T7xn+mdV+AcCeXou2JMR2
8UUs7aEGC5hBjfMR9dVEZdiMojejjv/R4LzZl+t1jqmqo/ltldtRJVGDY0tHyDIc
M90eAFuM26/MiNomqRRHir7CfbAAVtxmqgydCxAJXFyDHtODt7fHBFlv8HYnGJlf
7UUXVtPNl1VpoXXS7ZQDsdjo45p8109oN2w56LKRkybhdRVzsywWG5UJ8FQqb5pF
DwXeuWnxk9v6efSWbstSoJG5LuT4qxHuTim5G26Dn7oiOVV8awIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJyNF2D3OOSnY8K+OvWx8zgrf6wEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWM5OGEyOTQtMDM3My0z
NjI0LThlZDEtMGM2ZGQwYmIyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBA///7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKLYfC71CKDbWoYLsDNJ5KMcozYKAL8xUEFlgAEWrWqsvRP0jjHF
7Z54XdxbMID9VEPiPWJhM2/DBR5XtV7g0IfsyNoJ8IB/RDyDHFIBgkR3Np7ZqYDW
AkOV69zv0BU1jVg4d1dRTxVYdheHJlVZADv/WyPn2oC2jueG+ka5JmyQS0LnuuBW
iQ+b3h7Wf8nwdAAYe/a6ALvs8/B4u2Xguk7XBSSIA7QC4hElFI520DCd1w9yn0gN
9xnesBtIHNk+Opfs0Vl2x/057+HsX0SYk1WPG18c/2JLaffQtpFO8qehYyJzLk02
L+PCLC11xfOEMgseXwO9uSds5jz5VkcPEFc=
-----END CERTIFICATE-----