Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dd4894c-b62a-3235-8fb4-35b9f528de8d.roa
File:                     1dd4894c-b62a-3235-8fb4-35b9f528de8d.roa (raw, json)
Hash identifier:          VzyMwpv2S6OFcK9q7IW/WnddZrKecXDgbVrEzoxOQgU=
Subject key identifier:   DE:09:38:98:99:99:53:5C:B2:A7:3E:22:89:40:B8:30:F1:DF:75:75
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E97BA384EBEF02A27138CB840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dd4894c-b62a-3235-8fb4-35b9f528de8d.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Fri 18 Oct 2024 04:00:00 +0000
asID:                     21743
IP address blocks:        166.0.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:ba:38:4e:be:f0:2a:27:13:8c:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Oct 18 04:00:00 2024 GMT
        Subject: CN=03dc16a1-a795-494e-9cf3-36a4acf13744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:e1:0b:87:09:16:4b:70:cc:e5:c3:a9:de:
                    2e:fb:bf:17:ff:5f:c3:77:80:bf:93:c3:df:6e:ed:
                    bc:7c:ca:a0:b2:a9:a9:d0:b7:e2:0b:6c:a2:1e:fc:
                    41:63:0c:7a:5f:82:5a:a5:6a:8e:4d:90:18:51:54:
                    13:7d:70:cf:f2:7f:b0:4b:d5:cd:ec:f8:36:34:aa:
                    74:70:eb:ab:81:c4:18:0b:d8:40:1c:9d:6f:df:49:
                    b1:8d:bb:90:e2:67:ff:91:49:d1:9b:d9:da:79:63:
                    d0:a7:22:aa:ba:e8:b2:a9:42:ab:81:ad:9f:f5:7c:
                    dd:28:33:9b:73:d3:63:fb:80:50:fe:2e:6f:27:2a:
                    f0:2d:cc:52:73:97:70:58:2a:4e:95:3e:39:2c:d9:
                    ce:a1:d2:16:2a:18:1b:d6:b0:71:ec:a8:34:1e:86:
                    41:26:5a:05:8a:03:0b:d9:14:ef:d0:5d:54:34:8f:
                    a2:31:50:2d:0d:43:77:a7:ea:7e:ac:28:17:72:d4:
                    43:a2:21:c3:ad:7b:e3:1f:2a:bb:9f:38:c1:21:a0:
                    1c:34:9e:b7:5a:97:fb:7d:b8:3e:5e:8f:ab:b2:42:
                    db:ea:e4:21:55:a6:63:c8:ea:f4:63:2c:95:8f:39:
                    1c:b7:a7:7c:b0:4a:e3:22:08:63:9b:c9:b5:27:c5:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:38:98:99:99:53:5C:B2:A7:3E:22:89:40:B8:30:F1:DF:75:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dd4894c-b62a-3235-8fb4-35b9f528de8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:e9:c9:11:05:f0:e2:af:6a:35:41:73:1d:a0:c4:23:f5:
         5f:e3:80:90:f2:7d:59:4e:45:94:04:04:e3:7f:70:70:76:1f:
         d7:ee:90:ff:78:9f:b7:07:bf:32:c2:df:8e:24:e7:44:7a:67:
         7d:c4:0a:95:c2:3e:4a:d8:2b:11:72:94:0a:91:64:b2:89:2e:
         55:37:97:11:04:ca:81:8e:ee:ba:fe:ce:c2:60:aa:12:81:64:
         02:80:c8:a1:29:0b:11:51:8c:a3:a7:5f:93:c2:2e:d6:6a:3e:
         4c:5e:9c:60:f9:a9:ef:9d:7b:a8:62:36:47:ae:6a:45:11:f6:
         47:27:64:9b:46:9b:b0:c3:3a:4f:70:bc:49:50:85:cc:2d:94:
         31:72:f9:56:3d:c2:ff:0e:85:04:36:db:03:26:53:58:3c:42:
         48:ca:6a:6d:2e:aa:a5:df:f0:dc:57:ee:67:85:32:85:1b:81:
         62:5f:68:d7:4e:2f:3e:1d:09:03:4a:7d:38:27:39:b4:70:74:
         bf:a5:fa:05:a5:d0:7a:d1:e3:63:ae:6d:5c:33:a9:d5:b9:ea:
         18:31:21:56:2a:4f:9e:da:20:8a:d6:23:26:d8:1f:55:c9:ce:
         fe:05:0a:93:f1:cf:58:8e:ed:8b:a6:d2:26:dd:8a:aa:44:75:
         be:69:6d:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6XujhOvvAqJxOMuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MTAxODA0MDAwMFowLzEtMCsGA1UEAxMk
MDNkYzE2YTEtYTc5NS00OTRlLTljZjMtMzZhNGFjZjEzNzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwvhC4cJFktwzOXDqd4u+78X/1/Dd4C/k8Pf
bu28fMqgsqmp0LfiC2yiHvxBYwx6X4JapWqOTZAYUVQTfXDP8n+wS9XN7Pg2NKp0
cOurgcQYC9hAHJ1v30mxjbuQ4mf/kUnRm9naeWPQpyKquuiyqUKrga2f9XzdKDOb
c9Nj+4BQ/i5vJyrwLcxSc5dwWCpOlT45LNnOodIWKhgb1rBx7Kg0HoZBJloFigML
2RTv0F1UNI+iMVAtDUN3p+p+rCgXctRDoiHDrXvjHyq7nzjBIaAcNJ63Wpf7fbg+
Xo+rskLb6uQhVaZjyOr0YyyVjzkct6d8sErjIghjm8m1J8VbcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4JOJiZmVNcsqc+IolAuDDx33V1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWRkNDg5NGMtYjYyYS0z
MjM1LThmYjQtMzViOWY1MjhkZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2z6ckRBfDir2o1QXMdoMQj9V/jgJDyfVlORZQEBON/cHB2H9fukP94
n7cHvzLC344k50R6Z33ECpXCPkrYKxFylAqRZLKJLlU3lxEEyoGO7rr+zsJgqhKB
ZAKAyKEpCxFRjKOnX5PCLtZqPkxenGD5qe+de6hiNkeuakUR9kcnZJtGm7DDOk9w
vElQhcwtlDFy+VY9wv8OhQQ22wMmU1g8QkjKam0uqqXf8NxX7meFMoUbgWJfaNdO
Lz4dCQNKfTgnObRwdL+l+gWl0HrR42OubVwzqdW56hgxIVYqT57aIIrWIybYH1XJ
zv4FCpPxz1iO7Yum0ibdiqpEdb5pbXA=
-----END CERTIFICATE-----