Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde7c31f-cd65-3737-9ce4-cda356df322d.roa
File:                     dde7c31f-cd65-3737-9ce4-cda356df322d.roa (raw, json)
Hash identifier:          KpZzTXQhmWOW81hknL+0ncaVOpZlMDvxdKaUIoxwAsI=
Subject key identifier:   9D:8B:A8:37:34:82:2F:4C:66:82:29:29:6F:28:F1:00:7B:67:25:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F071E1D0E51C4A433E08F5A60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde7c31f-cd65-3737-9ce4-cda356df322d.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        70.106.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:1e:1d:0e:51:c4:a4:33:e0:8f:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=a081e452-cdc6-4925-9faf-83c8155b8cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:cc:6b:5d:f6:aa:b6:58:a6:44:9a:80:8a:
                    70:ec:6a:c1:26:c4:c8:a0:77:dc:ea:5b:ac:4d:d8:
                    73:dc:7e:c1:6a:9d:d0:4e:f9:0a:b7:9d:24:15:21:
                    ab:33:82:f3:54:4b:68:50:32:31:f1:3d:58:6a:67:
                    40:22:89:c8:90:ff:fc:80:e0:36:1d:45:87:06:a3:
                    64:59:06:b9:56:9b:88:b1:03:3b:39:8f:7d:dd:19:
                    8e:66:66:d0:31:fd:67:3a:ad:05:b7:1f:4a:2d:27:
                    2a:ad:c4:69:86:e3:76:d8:68:73:ec:20:4b:7c:14:
                    67:9a:09:d3:53:a7:c8:03:d2:21:a8:60:dd:12:84:
                    7d:b1:f3:58:cb:42:c9:60:6d:b3:ac:d0:1d:a6:bf:
                    86:96:c7:b5:e9:26:31:8a:f3:08:44:dd:79:15:b7:
                    f2:69:ce:8b:1f:a3:04:9b:ef:07:bf:08:9d:f1:da:
                    33:50:29:d1:fa:87:3f:1e:fd:f0:76:97:4b:ec:30:
                    5d:0c:50:5d:a4:02:ee:d2:0d:cb:22:8c:fa:47:c0:
                    87:2a:d0:b0:62:b0:3f:03:e3:c6:7c:a3:7e:51:d5:
                    3b:3a:fe:00:49:de:f0:9e:0d:c7:0c:0d:b4:59:94:
                    21:d0:17:81:00:7e:d8:60:32:8f:38:98:db:20:ad:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:A8:37:34:82:2F:4C:66:82:29:29:6F:28:F1:00:7B:67:25:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde7c31f-cd65-3737-9ce4-cda356df322d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:da:bf:9d:cf:d3:32:02:ab:2e:97:ea:b4:84:3f:b2:26:92:
         da:f2:eb:1b:30:f1:df:f1:d0:15:e2:d2:11:45:e3:31:f6:1b:
         60:7f:60:2f:b3:00:5b:72:f9:dd:cd:c4:f4:e1:c7:bf:f4:7d:
         0f:de:39:0d:93:0b:43:83:5a:77:22:ad:9d:8d:85:37:2f:71:
         99:22:38:12:dc:ba:3a:1c:f4:94:0b:bf:24:e5:23:f4:bc:24:
         b4:9e:33:27:4b:6b:b6:a6:3a:f0:80:5c:1b:36:e8:d9:d0:96:
         f0:02:2f:e9:11:78:b4:78:e8:a1:78:da:37:f3:2e:6e:1e:21:
         41:c0:50:8e:6f:67:40:8e:64:09:96:72:48:0b:23:93:ed:45:
         cc:81:c6:7a:17:63:63:96:54:8f:30:da:b0:3b:f2:c3:0f:32:
         07:f6:a7:79:09:90:b4:f3:f2:5a:14:2e:54:22:bd:fe:aa:75:
         08:05:f2:8a:98:84:4d:04:68:d8:29:fc:33:b3:d2:49:84:9c:
         7b:35:85:66:a4:d9:b3:9d:16:ca:d5:bf:d3:fa:31:7e:a1:f3:
         d9:7b:5b:a4:ae:8c:42:51:56:71:fd:56:a3:b3:24:65:2f:68:
         4f:92:bc:97:b6:69:1b:0b:d7:db:21:4c:09:e2:be:70:0a:fe:
         d2:0f:cf:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8HHh0OUcSkM+CPWmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YTA4MWU0NTItY2RjNi00OTI1LTlmYWYtODNjODE1NWI4Y2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMvMa132qrZYpkSagIpw7GrBJsTIoHfc6lus
Tdhz3H7Bap3QTvkKt50kFSGrM4LzVEtoUDIx8T1YamdAIonIkP/8gOA2HUWHBqNk
WQa5VpuIsQM7OY993RmOZmbQMf1nOq0Ftx9KLScqrcRphuN22Ghz7CBLfBRnmgnT
U6fIA9IhqGDdEoR9sfNYy0LJYG2zrNAdpr+Glse16SYxivMIRN15Fbfyac6LH6ME
m+8Hvwid8dozUCnR+oc/Hv3wdpdL7DBdDFBdpALu0g3LIoz6R8CHKtCwYrA/A+PG
fKN+UdU7Ov4ASd7wng3HDA20WZQh0BeBAH7YYDKPOJjbIK2ZnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2LqDc0gi9MZoIpKW8o8QB7ZyUCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGRlN2MzMWYtY2Q2NS0z
NzM3LTljZTQtY2RhMzU2ZGYzMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARmoOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzav53P0zICqy6X6rSEP7Imktry6xsw8d/x0BXi0hFF4zH2G2B/YC+z
AFty+d3NxPThx7/0fQ/eOQ2TC0ODWncirZ2NhTcvcZkiOBLcujoc9JQLvyTlI/S8
JLSeMydLa7amOvCAXBs26NnQlvACL+kReLR46KF42jfzLm4eIUHAUI5vZ0COZAmW
ckgLI5PtRcyBxnoXY2OWVI8w2rA78sMPMgf2p3kJkLTz8loULlQivf6qdQgF8oqY
hE0EaNgp/DOz0kmEnHs1hWak2bOdFsrVv9P6MX6h89l7W6SujEJRVnH9VqOzJGUv
aE+SvJe2aRsL19shTAnivnAK/tIPz8w=
-----END CERTIFICATE-----