Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a685175f-069b-3b6e-96cf-e3ef755d5389.roa
File:                     a685175f-069b-3b6e-96cf-e3ef755d5389.roa (raw, json)
Hash identifier:          8QwwZiVGO2l1Fis28tnfK9UZCSzLcBRXUAePmPbKCAc=
Subject key identifier:   0B:84:8D:BA:36:C4:2F:F9:2C:F9:DA:13:15:E4:DA:08:D3:83:DF:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F0723186CCBC491EAF29210E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a685175f-069b-3b6e-96cf-e3ef755d5389.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.4.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 18:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:23:18:6c:cb:c4:91:ea:f2:92:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=bc9d60f9-9b42-43e8-98ee-e72285c4696a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:44:1d:ec:d7:0b:49:51:69:cf:bf:82:a7:
                    ff:7a:f7:83:58:99:c1:db:c8:45:dd:ec:26:ae:b3:
                    a2:33:cb:6b:32:ae:fa:b3:7e:67:2d:49:fb:ba:89:
                    f5:93:30:57:ca:8c:65:80:a7:b4:73:94:e7:c9:22:
                    e7:08:76:7e:78:f6:44:af:67:ea:07:ab:32:7e:66:
                    9a:39:e3:2b:c3:8a:ae:80:21:5a:63:ed:60:77:4e:
                    3a:ea:70:42:1f:b3:32:1a:d3:88:bb:8f:1b:24:4e:
                    bf:ff:94:52:47:45:e9:ec:e9:90:ab:36:65:da:ee:
                    f9:be:44:92:c4:38:3a:bd:e6:b8:db:cc:f8:45:58:
                    e5:5e:9d:e4:2e:7f:6e:65:16:a7:5b:36:6f:77:aa:
                    75:01:11:4d:5b:da:33:61:b1:5f:3f:3d:eb:e5:cd:
                    34:8a:e0:57:d6:88:4a:57:9c:c9:03:a0:3a:1e:2d:
                    60:4b:a9:d5:d4:8e:af:5b:fb:47:3d:16:38:1a:18:
                    1e:01:87:44:59:78:ee:d7:5a:be:0b:dc:dc:a7:17:
                    4c:8d:c8:e6:5f:89:ef:be:55:de:26:63:de:ae:bb:
                    b6:d5:37:7f:80:42:bd:f0:15:1e:5e:34:12:cc:2f:
                    35:3a:60:2f:e6:b9:67:e2:33:d7:75:51:41:12:c4:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:8D:BA:36:C4:2F:F9:2C:F9:DA:13:15:E4:DA:08:D3:83:DF:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a685175f-069b-3b6e-96cf-e3ef755d5389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.4.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:1f:f4:40:55:5e:d1:36:79:d6:7f:99:74:b5:68:03:2a:
         92:7c:5f:39:e0:7a:fe:c5:8e:35:ea:fc:4a:ad:fd:88:ca:c7:
         04:b6:6c:e8:60:d7:a8:ed:6b:72:05:bd:e6:f7:c3:12:55:fb:
         47:11:4f:ec:a3:20:92:2c:92:66:77:0e:c8:2c:aa:cf:f4:5a:
         e3:83:4e:ff:ba:59:24:50:64:bc:73:32:13:a3:aa:d0:b9:23:
         75:94:0f:f4:5a:4d:ae:04:b0:de:8e:cf:46:d7:b2:fc:9b:e6:
         92:3f:80:01:a4:46:c5:81:e3:3f:70:fe:91:53:a9:2c:cb:e7:
         b7:96:5b:8a:d4:28:44:5a:7b:aa:f0:d1:c3:80:61:fd:37:f6:
         82:2f:d1:1a:6b:b3:64:66:31:51:6a:89:10:1d:89:48:01:74:
         3e:f8:64:f8:e5:29:e6:85:bc:9f:b9:04:1d:d7:34:f7:d4:b0:
         15:fd:04:66:42:90:f0:7a:6f:21:b3:66:22:ca:f5:80:88:82:
         e8:53:e9:87:5d:29:68:73:b2:3e:18:69:a9:35:d5:72:34:f8:
         8e:58:06:67:6f:c3:1c:4a:33:54:89:e0:dc:91:44:78:56:f6:
         97:1c:f5:93:47:85:e7:93:19:7d:5f:0b:ba:9f:c3:b0:55:f0:
         5a:c6:29:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8HIxhsy8SR6vKSEOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YmM5ZDYwZjktOWI0Mi00M2U4LTk4ZWUtZTcyMjg1YzQ2OTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfVEHezXC0lRac+/gqf/eveDWJnB28hF3ewm
rrOiM8trMq76s35nLUn7uon1kzBXyoxlgKe0c5TnySLnCHZ+ePZEr2fqB6syfmaa
OeMrw4qugCFaY+1gd0466nBCH7MyGtOIu48bJE6//5RSR0Xp7OmQqzZl2u75vkSS
xDg6vea428z4RVjlXp3kLn9uZRanWzZvd6p1ARFNW9ozYbFfPz3r5c00iuBX1ohK
V5zJA6A6Hi1gS6nV1I6vW/tHPRY4GhgeAYdEWXju11q+C9zcpxdMjcjmX4nvvlXe
JmPerru21Td/gEK98BUeXjQSzC81OmAv5rln4jPXdVFBEsRpDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuEjbo2xC/5LPnaExXk2gjTg9/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTY4NTE3NWYtMDY5Yi0z
YjZlLTk2Y2YtZTNlZjc1NWQ1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARwSjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuYH/RAVV7RNnnWf5l0tWgDKpJ8Xzngev7FjjXq/Eqt/YjKxwS2bOhg
16jta3IFveb3wxJV+0cRT+yjIJIskmZ3Dsgsqs/0WuODTv+6WSRQZLxzMhOjqtC5
I3WUD/RaTa4EsN6Oz0bXsvyb5pI/gAGkRsWB4z9w/pFTqSzL57eWW4rUKERae6rw
0cOAYf039oIv0Rprs2RmMVFqiRAdiUgBdD74ZPjlKeaFvJ+5BB3XNPfUsBX9BGZC
kPB6byGzZiLK9YCIguhT6YddKWhzsj4Yaak11XI0+I5YBmdvwxxKM1SJ4NyRRHhW
9pcc9ZNHheeTGX1fC7qfw7BV8FrGKWo=
-----END CERTIFICATE-----