Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12c33378-d71a-3618-bb0b-c894f83c9a3e.roa
File:                     12c33378-d71a-3618-bb0b-c894f83c9a3e.roa (raw, json)
Hash identifier:          cagxlz9JRo5zW+V++rrhicFelDK5OrxJt3lNgeM/3fY=
Subject key identifier:   D7:41:82:D8:BE:CB:6B:FF:6E:A7:3B:65:B4:FC:9B:1E:D7:2F:F3:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858413FC320EF0246DBAD0413E200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12c33378-d71a-3618-bb0b-c894f83c9a3e.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 19 Jun 2025 04:00:00 +0000
asID:                     31898
IP address blocks:        50.114.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3f:c3:20:ef:02:46:db:ad:04:13:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 19 04:00:00 2025 GMT
        Subject: CN=15dc5de1-8ea8-4919-9a25-f61018cd4530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:de:dc:88:66:03:aa:aa:58:68:e2:27:6f:
                    19:e7:ae:d3:81:2f:23:2f:79:5d:56:44:06:f7:26:
                    c0:65:83:85:6c:ac:15:cb:19:2b:d2:c6:cf:5b:24:
                    73:65:78:b3:f3:1a:56:bf:61:f8:3b:4c:a5:69:a6:
                    44:c5:ed:74:e2:8c:4c:40:d7:04:b6:43:37:d4:f4:
                    60:4e:1c:ad:86:f8:eb:3c:31:c6:a2:6a:d1:2d:44:
                    41:45:77:a0:14:21:f4:80:b3:9a:4f:7a:a7:3d:b6:
                    74:ba:a1:88:4f:d5:6a:94:46:ae:3e:c1:b8:bd:94:
                    a2:e1:f9:4e:54:a5:eb:69:cc:be:78:c5:16:76:17:
                    e9:ed:27:12:c6:dd:b7:6a:b6:70:a4:1c:6c:d5:5c:
                    31:a1:66:fa:36:0f:60:f9:04:e8:a7:40:2e:d5:f0:
                    68:92:44:52:31:7a:42:f7:3f:9d:a3:38:fc:b1:53:
                    6e:b9:50:06:95:18:42:fb:62:4d:5c:18:de:7d:0b:
                    84:dd:ee:f5:1f:46:c1:33:9f:b3:dd:80:5c:33:2f:
                    a7:98:29:19:a8:e0:17:cf:0f:13:c6:96:5f:0a:e4:
                    cb:e1:56:a2:dd:ce:a1:39:25:84:28:97:79:dc:0f:
                    d5:52:b6:ed:85:5e:6f:c5:b0:19:7e:f1:22:a6:49:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:41:82:D8:BE:CB:6B:FF:6E:A7:3B:65:B4:FC:9B:1E:D7:2F:F3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12c33378-d71a-3618-bb0b-c894f83c9a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:a7:fe:7b:fc:2c:c7:f1:13:48:13:a5:48:3c:85:56:3c:
         49:37:82:ab:7c:cb:6c:7e:d5:b1:bf:e9:07:ed:14:14:82:93:
         f9:b7:2d:28:09:a8:29:c7:a0:03:5d:59:16:e1:2a:03:81:a5:
         5e:b5:24:53:ca:4a:4c:79:a6:63:02:bb:74:f8:9a:cc:b3:5e:
         33:4f:d2:8e:e4:91:94:da:7d:f0:af:db:90:7d:39:d0:fa:bb:
         41:87:db:27:44:b2:32:3e:35:26:34:f7:bc:32:da:41:a3:71:
         0c:ea:03:c2:35:50:58:c1:84:ed:d6:22:49:6d:fd:7b:e0:5e:
         4c:a0:75:c7:fd:4c:57:71:be:6d:f3:df:86:8a:92:d4:9c:3d:
         2f:18:4f:b6:c5:10:04:f7:46:53:13:22:a9:0d:3c:56:fa:34:
         9a:64:70:6e:d7:56:ae:41:6a:fd:7a:d2:12:39:0c:9c:87:e4:
         46:b0:0a:62:bc:39:37:e7:53:2e:58:2b:f5:ff:24:d4:7a:80:
         b7:25:ac:d5:cd:ee:ac:a2:fd:13:53:66:24:4f:50:96:62:17:
         27:f5:46:32:e6:d9:bf:70:1e:8e:13:3c:44:da:f6:99:55:b5:
         69:ac:ab:9e:ae:f1:5c:4f:59:bb:8b:95:2b:9f:51:be:5d:ff:
         c3:d1:ed:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEE/wyDvAkbbrQQT4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDYxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MTVkYzVkZTEtOGVhOC00OTE5LTlhMjUtZjYxMDE4Y2Q0NTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0je3IhmA6qqWGjiJ28Z567TgS8jL3ldVkQG
9ybAZYOFbKwVyxkr0sbPWyRzZXiz8xpWv2H4O0ylaaZExe104oxMQNcEtkM31PRg
ThythvjrPDHGomrRLURBRXegFCH0gLOaT3qnPbZ0uqGIT9VqlEauPsG4vZSi4flO
VKXracy+eMUWdhfp7ScSxt23arZwpBxs1VwxoWb6Ng9g+QTop0Au1fBokkRSMXpC
9z+dozj8sVNuuVAGlRhC+2JNXBjefQuE3e71H0bBM5+z3YBcMy+nmCkZqOAXzw8T
xpZfCuTL4Vai3c6hOSWEKJd53A/VUrbthV5vxbAZfvEipkliHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdBgti+y2v/bqc7ZbT8mx7XL/MsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTJjMzMzNzgtZDcxYS0z
NjE4LWJiMGItYzg5NGY4M2M5YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARsp/57/CzH8RNIE6VIPIVWPEk3gqt8y2x+1bG/6QftFBSCk/m3LSgJ
qCnHoANdWRbhKgOBpV61JFPKSkx5pmMCu3T4msyzXjNP0o7kkZTaffCv25B9OdD6
u0GH2ydEsjI+NSY097wy2kGjcQzqA8I1UFjBhO3WIklt/XvgXkygdcf9TFdxvm3z
34aKktScPS8YT7bFEAT3RlMTIqkNPFb6NJpkcG7XVq5Bav160hI5DJyH5EawCmK8
OTfnUy5YK/X/JNR6gLclrNXN7qyi/RNTZiRPUJZiFyf1RjLm2b9wHo4TPETa9plV
tWmsq56u8VxPWbuLlSufUb5d/8PR7V4=
-----END CERTIFICATE-----