Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa
File:                     d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa (raw, json)
Hash identifier:          wO4ElzMES8gc/3YrH5yuVPgwuMYaflhv97L9k328C4w=
Subject key identifier:   37:53:65:85:72:48:41:44:DE:A3:D1:AA:7A:E7:12:92:56:E8:E7:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB5351C5F8919D47274492A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        199.202.120.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:35:1c:5f:89:19:d4:72:74:49:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=4ca900a4-7593-48b5-8255-4a90914607ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e4:5a:5a:96:e6:d3:aa:c0:96:d7:e8:47:f0:
                    19:be:d4:f6:69:04:63:47:66:f7:99:03:c1:23:76:
                    e7:9b:68:7a:a0:ec:55:bb:0a:dd:42:de:ae:3d:47:
                    75:7f:e3:61:56:4b:b9:05:40:e7:e4:09:2b:48:7f:
                    ce:22:45:16:bf:11:2f:f6:5c:42:3b:e0:32:b7:b1:
                    a9:b6:c0:3e:a8:c0:13:1c:8c:78:ba:60:9d:ca:7d:
                    15:1c:a1:32:e7:0c:91:d6:f1:4c:52:c6:8b:d1:05:
                    4d:12:3e:87:e4:15:14:34:1f:a9:91:2c:99:b9:c1:
                    6d:4e:41:35:0a:68:b3:41:df:60:3f:7a:ba:e3:a8:
                    13:ca:c6:e7:cc:47:48:4f:fe:59:ed:c0:28:36:52:
                    7e:0f:88:c3:0d:3f:8a:65:65:11:89:69:fd:2e:9e:
                    b5:cf:a0:5e:0e:76:7a:d6:93:ee:ef:04:af:b3:fc:
                    53:45:84:4e:b8:c2:07:24:32:03:5e:e6:b1:d6:26:
                    ca:70:b6:c6:32:4a:0a:56:e6:0c:90:bb:bf:01:64:
                    91:5f:01:05:a4:54:b5:38:b9:67:41:00:80:28:49:
                    c9:9d:45:fe:27:f0:1b:48:fa:52:ad:5a:fa:94:1a:
                    a4:d6:0a:63:84:7f:ed:5b:5d:40:d4:2c:da:a3:0f:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:65:85:72:48:41:44:DE:A3:D1:AA:7A:E7:12:92:56:E8:E7:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:7c:ca:46:42:b4:93:9e:1d:d5:2e:54:2b:af:c5:80:5e:
         b7:94:12:c3:aa:86:f1:35:ff:83:b3:87:4b:eb:5d:db:e3:a2:
         b9:80:3b:d1:1b:39:f4:b2:d2:ad:7b:cc:4a:38:c7:b6:e6:93:
         a9:09:32:db:2e:65:07:e3:aa:16:56:a3:f6:54:72:09:c2:22:
         66:d2:29:0b:95:3d:67:39:a7:0d:e8:fb:c5:f8:e9:cf:38:be:
         11:03:4e:8b:07:74:43:46:bb:00:2d:82:3e:64:df:23:e9:b5:
         29:68:a6:73:bc:e5:ed:f5:60:8a:ff:4c:f7:39:ab:86:54:2a:
         2d:99:0b:5c:99:0a:5b:10:1b:2e:24:e2:1f:e8:bd:fb:60:a7:
         e5:34:14:af:9a:00:9c:c9:d7:fe:d0:1f:b3:c1:1b:29:97:5b:
         3f:d1:cb:e7:49:d3:91:13:d0:40:35:e2:e0:49:5c:0d:34:38:
         0e:6c:10:af:e8:40:61:7a:73:9c:b8:65:bf:ed:8b:67:e0:c0:
         9a:b4:12:60:f5:a9:a3:44:9f:d1:31:87:a4:95:1c:f6:1e:be:
         75:e2:5c:38:60:02:b4:ac:d2:28:2a:46:7c:f2:ae:83:d5:ab:
         28:01:da:47:93:d7:d2:c2:5b:e7:4b:18:e6:99:1b:7c:cc:82:
         bc:83:66:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD21NRxfiRnUcnRJKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDQyNjEyMDAwMFoXDTI1MDQyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NGNhOTAwYTQtNzU5My00OGI1LTgyNTUtNGE5MDkxNDYwN2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+RaWpbm06rAltfoR/AZvtT2aQRjR2b3mQPB
I3bnm2h6oOxVuwrdQt6uPUd1f+NhVku5BUDn5AkrSH/OIkUWvxEv9lxCO+Ayt7Gp
tsA+qMATHIx4umCdyn0VHKEy5wyR1vFMUsaL0QVNEj6H5BUUNB+pkSyZucFtTkE1
CmizQd9gP3q646gTysbnzEdIT/5Z7cAoNlJ+D4jDDT+KZWURiWn9Lp61z6BeDnZ6
1pPu7wSvs/xTRYROuMIHJDIDXuax1ibKcLbGMkoKVuYMkLu/AWSRXwEFpFS1OLln
QQCAKEnJnUX+J/AbSPpSrVr6lBqk1gpjhH/tW11A1Czaow/7nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdTZYVySEFE3qPRqnrnEpJW6Of5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDJjMWM1ZWUtYjZkNy0z
MDcyLWI1YTktYWYzOTBlMTQyMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8p4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWMfMpGQrSTnh3VLlQrr8WAXreUEsOqhvE1/4Ozh0vrXdvjormAO9Eb
OfSy0q17zEo4x7bmk6kJMtsuZQfjqhZWo/ZUcgnCImbSKQuVPWc5pw3o+8X46c84
vhEDTosHdENGuwAtgj5k3yPptSlopnO85e31YIr/TPc5q4ZUKi2ZC1yZClsQGy4k
4h/ovftgp+U0FK+aAJzJ1/7QH7PBGymXWz/Ry+dJ05ET0EA14uBJXA00OA5sEK/o
QGF6c5y4Zb/ti2fgwJq0EmD1qaNEn9Exh6SVHPYevnXiXDhgArSs0igqRnzyroPV
qygB2keT19LCW+dLGOaZG3zMgryDZis=
-----END CERTIFICATE-----