Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce02beed-3cff-397b-9402-e3793e36b3e2.roa
File:                     ce02beed-3cff-397b-9402-e3793e36b3e2.roa (raw, json)
Hash identifier:          BzpJNBuawUDThEi1USX7WFUv5mP3sfzDuqjbV3A9GME=
Subject key identifier:   68:B7:28:95:7F:00:DF:1E:28:63:AE:9E:A8:4D:F7:11:25:40:15:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07378BB35AC5D30BCC41CE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce02beed-3cff-397b-9402-e3793e36b3e2.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        162.84.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:37:8b:b3:5a:c5:d3:0b:cc:41:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=93a3a7cb-cfa2-4166-a870-5efec3be4b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:ad:f5:68:13:ae:cc:4c:47:cb:7b:19:05:
                    74:8f:3a:a6:65:ea:9f:bf:9b:81:47:90:9e:89:49:
                    c3:68:1a:90:43:b9:f0:5c:17:ca:73:02:be:aa:91:
                    86:e5:8d:24:c5:db:82:ce:0c:02:b5:ee:5c:ca:e5:
                    43:7d:ea:26:3e:df:56:fc:12:0f:51:9f:7f:16:89:
                    56:61:0e:a9:2a:cd:00:65:79:51:d6:a3:f2:93:f4:
                    e4:9c:85:28:ea:ef:44:37:20:2c:4d:5b:5f:d0:19:
                    02:17:85:3e:c5:05:79:08:88:9e:39:6d:a8:17:18:
                    0f:9e:92:9e:ca:2c:e2:1d:85:a2:e5:db:a5:38:cf:
                    cf:67:5d:75:55:dd:cb:1e:d3:99:95:cc:4c:39:22:
                    7c:67:47:b2:88:87:09:ea:c8:ad:c5:0e:8f:7e:52:
                    db:da:ad:8a:3f:3d:12:99:60:60:67:50:76:f0:83:
                    ac:b4:b8:63:dd:be:c6:47:21:e1:20:fd:7a:ba:4f:
                    c3:f0:bd:74:ed:2b:5d:50:a4:04:bd:1b:eb:86:7f:
                    b2:a1:a1:97:62:eb:fa:95:62:50:03:f3:1e:92:95:
                    57:28:67:ad:b9:91:1f:7b:06:61:cb:f1:48:e6:36:
                    9d:ab:de:c8:94:44:e7:cc:cf:05:35:7b:ae:2f:dd:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B7:28:95:7F:00:DF:1E:28:63:AE:9E:A8:4D:F7:11:25:40:15:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce02beed-3cff-397b-9402-e3793e36b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.84.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a8:ad:57:26:b0:08:d8:f9:32:e0:87:5e:69:35:8a:34:f1:
         42:65:2b:86:2d:f9:7b:fe:52:97:b8:aa:16:90:c7:78:85:10:
         89:94:2d:4b:13:2e:b9:99:01:59:a4:8a:c6:1c:ed:6d:ee:b3:
         b3:0c:75:48:b6:87:f5:d6:a0:cd:6d:9c:1a:b8:b1:c4:ca:48:
         f7:d0:fa:ce:b7:9e:41:28:00:8d:d8:08:df:40:89:37:a8:49:
         aa:9a:d6:df:af:13:c6:32:38:e8:e7:54:09:c6:44:42:df:65:
         d9:a5:67:d8:f7:89:6b:b4:01:d8:15:5b:4c:8e:fa:e3:72:cf:
         c7:01:35:d9:1e:78:bd:45:25:30:69:58:f7:e2:0e:eb:99:5e:
         13:d7:ff:27:f3:44:cf:85:59:be:34:81:f4:4f:7d:6f:3a:af:
         3b:01:15:97:89:97:9a:cc:94:fd:bc:c6:70:6a:fe:88:df:67:
         5f:82:fe:b2:a1:da:4e:a8:c1:c5:d6:9f:e8:10:8c:6a:1e:1b:
         e3:8a:d4:6c:8b:d0:76:3c:5c:f8:a5:f6:f1:44:e9:1e:36:fb:
         ca:ac:ca:c9:8d:88:0b:b0:6d:d3:ad:00:aa:67:91:d7:83:60:
         68:8f:33:16:1f:c7:1b:f0:35:6d:fc:fe:be:0e:2a:c9:12:3c:
         c3:55:26:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8HN4uzWsXTC8xBzkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
OTNhM2E3Y2ItY2ZhMi00MTY2LWE4NzAtNWVmZWMzYmU0YjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJqt9WgTrsxMR8t7GQV0jzqmZeqfv5uBR5Ce
iUnDaBqQQ7nwXBfKcwK+qpGG5Y0kxduCzgwCte5cyuVDfeomPt9W/BIPUZ9/FolW
YQ6pKs0AZXlR1qPyk/TknIUo6u9ENyAsTVtf0BkCF4U+xQV5CIieOW2oFxgPnpKe
yiziHYWi5dulOM/PZ111Vd3LHtOZlcxMOSJ8Z0eyiIcJ6sitxQ6PflLb2q2KPz0S
mWBgZ1B28IOstLhj3b7GRyHhIP16uk/D8L107StdUKQEvRvrhn+yoaGXYuv6lWJQ
A/MekpVXKGetuZEfewZhy/FI5jadq97IlETnzM8FNXuuL92/LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGi3KJV/AN8eKGOunqhN9xElQBUdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2UwMmJlZWQtM2NmZi0z
OTdiLTk0MDItZTM3OTNlMzZiM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHolSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyorVcmsAjY+TLgh15pNYo08UJlK4Yt+Xv+Upe4qhaQx3iFEImULUsT
LrmZAVmkisYc7W3us7MMdUi2h/XWoM1tnBq4scTKSPfQ+s63nkEoAI3YCN9AiTeo
Saqa1t+vE8YyOOjnVAnGRELfZdmlZ9j3iWu0AdgVW0yO+uNyz8cBNdkeeL1FJTBp
WPfiDuuZXhPX/yfzRM+FWb40gfRPfW86rzsBFZeJl5rMlP28xnBq/ojfZ1+C/rKh
2k6owcXWn+gQjGoeG+OK1GyL0HY8XPil9vFE6R42+8qsysmNiAuwbdOtAKpnkdeD
YGiPMxYfxxvwNW38/r4OKskSPMNVJuc=
-----END CERTIFICATE-----