Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2dd4a47b-de8a-3e1b-9ca8-44a128b94e9b.roa
File:                     2dd4a47b-de8a-3e1b-9ca8-44a128b94e9b.roa (raw, json)
Hash identifier:          4jveQOuSkj5/W85mjjZzNFsNaSAzg1LvZPUPDkG4kjU=
Subject key identifier:   57:3B:1D:84:CC:BC:15:F5:32:F7:03:41:CA:DD:95:A5:C4:F5:90:E9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841A1078B8D4F4AF17832195340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2dd4a47b-de8a-3e1b-9ca8-44a128b94e9b.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 24 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        108.165.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:a1:07:8b:8d:4f:4a:f1:78:32:19:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 24 04:00:00 2025 GMT
        Subject: CN=3eb31ba8-2926-4f6c-bd97-e241e92219d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:02:76:b3:ed:3b:9d:b6:8b:cd:bf:5b:07:
                    f6:67:8d:7b:6d:a3:4d:52:ce:0e:bc:b8:60:a9:66:
                    06:98:3b:7e:ff:65:ae:b4:9c:ab:8b:db:93:76:a2:
                    94:39:01:03:60:6e:c5:be:f4:01:22:17:43:d8:5b:
                    26:52:49:06:7d:ab:2e:ef:87:69:cd:93:77:6d:85:
                    c5:a4:c3:0e:69:af:b5:6c:75:df:f7:cf:a1:0c:1b:
                    53:34:72:54:be:95:49:26:15:83:2c:68:f0:14:fa:
                    67:67:4f:d7:89:b7:1a:74:ab:84:f4:17:44:c7:e2:
                    79:90:05:15:b2:f5:4d:de:1c:36:42:11:ac:05:59:
                    14:d4:ae:48:e8:b7:91:06:e0:53:8c:ee:61:2d:17:
                    da:14:f5:02:9d:21:c1:cf:87:ea:77:3b:99:0e:71:
                    a8:ed:43:b1:a2:c6:79:05:b9:3e:03:67:72:00:e4:
                    9b:9d:96:93:72:68:70:13:ef:c9:7e:87:12:1c:00:
                    31:20:8a:18:b8:8a:6d:2f:5c:07:20:dd:2a:69:93:
                    d2:f6:65:7d:ce:5b:7c:1d:7c:c2:07:3e:5e:73:fe:
                    1b:eb:8a:fe:89:68:68:26:b1:56:82:89:28:eb:7e:
                    f2:a0:9b:16:72:3c:02:46:e6:9c:7c:5e:2f:74:64:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:1D:84:CC:BC:15:F5:32:F7:03:41:CA:DD:95:A5:C4:F5:90:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2dd4a47b-de8a-3e1b-9ca8-44a128b94e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:22:be:5a:56:73:f1:dc:2d:4c:0f:e9:26:4c:ec:97:e0:
         35:42:cd:75:00:29:9f:25:a4:36:48:58:d3:82:73:72:de:b6:
         24:08:23:f4:15:b3:6c:f6:f2:5f:e7:d8:dc:7c:1c:bd:a1:2e:
         f0:c4:fc:c7:a9:20:4c:12:f2:58:67:cc:60:aa:09:dc:ee:19:
         e0:c2:73:8b:5e:84:e2:a8:77:da:c6:dd:84:a8:51:c3:83:55:
         15:95:81:79:2c:f6:99:54:a1:9c:77:49:df:18:71:01:86:51:
         dd:fa:03:55:f5:f8:fc:a4:a5:4f:7b:9d:c6:37:87:17:11:10:
         75:43:ec:d5:64:8e:92:b2:50:3f:41:0c:80:5e:18:e3:3d:c4:
         ba:f5:2b:b9:b4:fa:e8:5d:fb:10:48:b6:2b:d3:4a:4c:8f:67:
         68:01:77:b3:22:83:1e:37:d0:8f:b3:e0:84:14:e4:94:a5:e0:
         0b:5b:21:17:dc:39:0b:26:37:d2:d8:31:01:7f:7e:f7:1e:bc:
         04:19:e7:64:65:1c:8c:cc:b0:2d:36:ef:18:dd:6c:eb:64:c7:
         fa:86:dc:79:e6:71:a3:7a:ff:33:73:d0:aa:89:65:03:71:ef:
         12:cc:1d:db:85:fb:fe:7c:25:be:cb:ec:a7:00:f4:73:06:4a:
         9a:a6:de:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGhB4uNT0rxeDIZU0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDcyNDA0MDAwMFowLzEtMCsGA1UEAxMk
M2ViMzFiYTgtMjkyNi00ZjZjLWJkOTctZTI0MWU5MjIxOWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLICdrPtO522i82/Wwf2Z417baNNUs4OvLhg
qWYGmDt+/2WutJyri9uTdqKUOQEDYG7FvvQBIhdD2FsmUkkGfasu74dpzZN3bYXF
pMMOaa+1bHXf98+hDBtTNHJUvpVJJhWDLGjwFPpnZ0/XibcadKuE9BdEx+J5kAUV
svVN3hw2QhGsBVkU1K5I6LeRBuBTjO5hLRfaFPUCnSHBz4fqdzuZDnGo7UOxosZ5
Bbk+A2dyAOSbnZaTcmhwE+/JfocSHAAxIIoYuIptL1wHIN0qaZPS9mV9zlt8HXzC
Bz5ec/4b64r+iWhoJrFWgoko637yoJsWcjwCRuacfF4vdGRu1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFc7HYTMvBX1MvcDQcrdlaXE9ZDpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmRkNGE0N2ItZGU4YS0z
ZTFiLTljYTgtNDRhMTI4Yjk0ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnWIr5aVnPx3C1MD+kmTOyX4DVCzXUAKZ8lpDZIWNOCc3LetiQII/QV
s2z28l/n2Nx8HL2hLvDE/MepIEwS8lhnzGCqCdzuGeDCc4tehOKod9rG3YSoUcOD
VRWVgXks9plUoZx3Sd8YcQGGUd36A1X1+PykpU97ncY3hxcREHVD7NVkjpKyUD9B
DIBeGOM9xLr1K7m0+uhd+xBItivTSkyPZ2gBd7Migx430I+z4IQU5JSl4AtbIRfc
OQsmN9LYMQF/fvcevAQZ52RlHIzMsC027xjdbOtkx/qG3HnmcaN6/zNz0KqJZQNx
7xLMHduF+/58Jb7L7KcA9HMGSpqm3hg=
-----END CERTIFICATE-----