Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad829634-57c6-31d1-ba2c-eec0ae370fe1.roa
File:                     ad829634-57c6-31d1-ba2c-eec0ae370fe1.roa (raw, json)
Hash identifier:          MsWiEZk3aUo2FEEG86ogwKca1nsZNy7K3AQyd8md0tE=
Subject key identifier:   7A:96:26:A7:8C:E5:2B:A9:C8:B9:A2:36:23:25:10:08:77:56:D2:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB533782051741A02FFB07920
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad829634-57c6-31d1-ba2c-eec0ae370fe1.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        100.12.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:33:78:20:51:74:1a:02:ff:b0:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=03eee5cf-c188-464e-9db6-2a7c52163522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:1f:10:b2:09:b6:14:7a:32:1b:7a:3a:71:
                    d5:70:03:3d:2d:54:cf:ba:a6:ea:47:fe:92:5d:e2:
                    0a:fd:52:63:ee:d4:c2:12:03:4d:31:cd:2e:a0:a9:
                    60:7a:24:39:60:3f:3a:02:d4:11:a1:73:a4:e7:75:
                    b3:02:c5:59:0c:1e:ea:60:22:01:3a:80:78:1d:90:
                    08:4f:b1:65:01:fe:52:d0:76:42:0f:84:81:c5:9d:
                    6f:4f:9c:35:95:85:8f:10:40:a2:a6:2f:78:b7:e8:
                    f9:79:c8:5c:73:3b:1a:82:2a:d7:6f:69:67:12:26:
                    a6:38:62:2c:d0:5f:7d:a3:b5:08:d0:ac:44:a5:96:
                    8c:5d:ef:87:f8:bb:0e:dc:d7:cb:e6:84:d4:50:04:
                    31:0b:6a:ca:c3:b7:45:fa:98:33:41:ca:5e:8a:a9:
                    2c:bf:6d:46:f5:58:d9:c3:e1:3b:b0:35:8d:8d:a0:
                    32:81:75:5e:ef:a6:09:bf:80:23:90:9a:8f:78:de:
                    03:08:8c:2b:09:63:f5:54:ed:b6:28:e6:d5:c4:51:
                    5b:f8:a9:74:f8:8c:0e:f8:78:a2:eb:a7:53:fa:e7:
                    b2:d4:d2:19:c6:1f:2e:84:1e:4e:b8:20:88:d6:4e:
                    9c:d1:b6:45:30:ed:1c:c9:5b:04:f1:dc:f2:3c:3f:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:96:26:A7:8C:E5:2B:A9:C8:B9:A2:36:23:25:10:08:77:56:D2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad829634-57c6-31d1-ba2c-eec0ae370fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:65:5e:73:fe:37:a3:da:7e:91:5d:91:1e:2f:8b:8c:33:d8:
         7a:25:2d:bb:67:df:74:99:89:6f:46:ff:2b:db:64:e5:b5:3f:
         c5:a5:ea:e3:06:0a:1f:9e:d2:b6:a5:71:ae:64:23:5a:05:f1:
         eb:28:54:06:e4:f2:26:9f:f3:b4:73:89:f5:74:a6:d4:09:e2:
         df:06:5f:d2:01:fa:31:6a:bf:81:63:e3:a1:04:b7:3c:88:7a:
         f6:2d:91:37:7b:f9:d4:1a:bb:83:f0:fe:50:ff:6e:7c:84:f3:
         1c:9a:5f:d3:e1:7c:c2:72:51:d2:4c:53:8f:4f:5a:f9:57:66:
         b6:d3:ce:87:9f:c0:23:2e:b4:29:a2:d2:4d:d4:fb:a1:c7:c0:
         a1:4d:b5:17:b9:cc:9b:c8:77:e0:0d:c6:b7:6d:26:e5:d3:6c:
         33:1c:14:ab:f5:61:9c:28:9e:72:34:35:7a:d3:be:25:fe:e5:
         12:d2:5d:2f:71:8e:b9:47:6b:7a:a0:88:ee:49:03:c5:b5:95:
         a2:95:d9:59:9c:2f:f5:d8:cb:98:81:56:0e:95:f3:bc:7c:22:
         98:a6:0b:cf:db:53:d5:20:ce:29:4e:ae:f3:4e:67:a5:aa:19:
         2d:71:08:be:23:8a:a1:8e:e3:be:a9:f2:3d:d4:d8:83:e3:f0:
         dc:72:b1:38
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD21M3ggUXQaAv+weSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDQyNjEyMDAwMFoXDTI1MDQyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MDNlZWU1Y2YtYzE4OC00NjRlLTlkYjYtMmE3YzUyMTYzNTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA4fELIJthR6Mht6OnHVcAM9LVTPuqbqR/6S
XeIK/VJj7tTCEgNNMc0uoKlgeiQ5YD86AtQRoXOk53WzAsVZDB7qYCIBOoB4HZAI
T7FlAf5S0HZCD4SBxZ1vT5w1lYWPEECipi94t+j5echcczsagirXb2lnEiamOGIs
0F99o7UI0KxEpZaMXe+H+LsO3NfL5oTUUAQxC2rKw7dF+pgzQcpeiqksv21G9VjZ
w+E7sDWNjaAygXVe76YJv4AjkJqPeN4DCIwrCWP1VO22KObVxFFb+Kl0+IwO+Hii
66dT+uey1NIZxh8uhB5OuCCI1k6c0bZFMO0cyVsE8dzyPD/9bQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHqWJqeM5SupyLmiNiMlEAh3VtKDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWQ4Mjk2MzQtNTdjNi0z
MWQxLWJhMmMtZWVjMGFlMzcwZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZAwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcmVec/43o9p+kV2RHi+LjDPYeiUtu2ffdJmJb0b/K9tk5bU/xaXq4wYK
H57StqVxrmQjWgXx6yhUBuTyJp/ztHOJ9XSm1Ani3wZf0gH6MWq/gWPjoQS3PIh6
9i2RN3v51Bq7g/D+UP9ufITzHJpf0+F8wnJR0kxTj09a+VdmttPOh5/AIy60KaLS
TdT7ocfAoU21F7nMm8h34A3Gt20m5dNsMxwUq/VhnCiecjQ1etO+Jf7lEtJdL3GO
uUdreqCI7kkDxbWVopXZWZwv9djLmIFWDpXzvHwimKYLz9tT1SDOKU6u805npaoZ
LXEIviOKoY7jvqnyPdTYg+Pw3HKxOA==
-----END CERTIFICATE-----