Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30ab91e1-0651-3c79-8a63-b3657922ade4.roa
File:                     30ab91e1-0651-3c79-8a63-b3657922ade4.roa (raw, json)
Hash identifier:          4VMSDlGWpgThzJkWeC5hLuzHS+TYN9rUyAugxHegBnI=
Subject key identifier:   37:D4:46:32:77:EF:2D:7A:DA:C7:AF:92:3F:48:38:2A:9E:37:FA:0C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F36BC48B6C91071E7EED48380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30ab91e1-0651-3c79-8a63-b3657922ade4.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 14 Dec 2024 05:00:00 +0000
asID:                     19437
IP address blocks:        23.26.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:36:bc:48:b6:c9:10:71:e7:ee:d4:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Dec 14 05:00:00 2024 GMT
        Subject: CN=677588d6-8411-4016-a4db-f21026db7180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:d3:7c:fc:8b:68:8b:5f:94:fd:f8:cb:34:
                    5f:85:bc:9e:b1:61:b0:13:f5:53:c8:55:1e:d6:ac:
                    47:19:9b:75:36:86:9c:d7:b4:5c:dc:87:11:a2:98:
                    e9:f6:a3:d8:67:6e:82:0f:b7:e8:03:ba:46:52:fb:
                    65:4e:0e:30:82:8c:d4:9a:2d:9c:8a:62:f0:24:ca:
                    45:d3:05:21:40:54:51:d8:d2:6f:9a:eb:8f:cd:43:
                    b5:52:79:af:86:71:0d:09:4e:8d:2e:02:13:a1:e4:
                    fc:57:02:f3:f2:f8:8e:e9:a4:29:a1:70:94:aa:96:
                    b3:35:69:e9:65:94:5b:02:04:e6:7c:b3:16:d3:3c:
                    08:e3:3f:90:a3:3d:7d:48:09:bf:c5:d0:c5:5d:2a:
                    41:83:c3:44:5b:cc:85:0a:8b:f8:4f:39:81:23:a9:
                    de:bb:36:93:71:17:2e:f9:bf:d6:ac:36:20:e3:2e:
                    6e:a6:ca:9b:dc:b3:c3:66:9b:44:eb:bd:a0:fa:ae:
                    2a:d9:68:ae:7e:74:67:5e:fb:f1:26:d6:70:82:ef:
                    92:f4:27:6d:29:de:71:65:0b:9d:e1:f5:08:04:43:
                    ae:55:79:0f:33:db:fc:02:fe:88:d5:b4:e4:d0:66:
                    23:87:cf:15:bf:ee:e3:fe:e9:bd:0f:b1:95:3f:a0:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:46:32:77:EF:2D:7A:DA:C7:AF:92:3F:48:38:2A:9E:37:FA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30ab91e1-0651-3c79-8a63-b3657922ade4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:24:20:f8:b8:78:3b:26:1c:f4:04:c6:e7:54:c0:ef:3f:f8:
         fe:83:e1:34:4c:17:d2:78:e8:7e:e8:df:e7:79:62:55:21:3c:
         2d:01:f9:71:c0:17:11:a9:0d:41:ce:75:6e:3f:c4:dc:e5:d3:
         55:f8:9d:9f:8d:cf:f2:7a:1b:7c:0c:04:28:8d:4c:14:59:27:
         0d:29:ad:a0:c1:72:71:29:32:55:f9:9a:e4:32:4f:a7:ba:af:
         14:cc:83:4d:67:3d:cb:b0:66:74:d0:61:6a:88:ae:87:54:3f:
         0c:42:f1:00:15:29:b2:3c:a5:9e:7c:f4:9a:00:76:52:ac:71:
         5c:ec:26:c2:83:6a:3a:87:06:c8:04:13:3b:98:4c:a8:fd:d4:
         d7:58:f6:c5:0b:93:1f:60:ee:6a:80:df:81:a0:12:d3:50:c1:
         66:68:83:a2:3f:28:f7:b1:42:a2:14:ea:00:d5:39:c0:4c:40:
         98:4d:d2:9a:76:d2:ce:e2:fe:d9:a6:6e:2d:1d:6d:cc:01:df:
         0f:3b:33:82:ec:4a:07:6f:10:e4:9c:0b:5e:a9:a9:36:62:b9:
         ca:cf:20:a8:98:11:f5:bf:ed:2c:4c:d2:be:20:8d:3a:18:c0:
         df:d1:57:23:59:76:6e:93:49:5d:df:5c:35:3a:e0:03:21:ac:
         26:8e:88:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD82vEi2yRBx5+7Ug4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MTIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
Njc3NTg4ZDYtODQxMS00MDE2LWE0ZGItZjIxMDI2ZGI3MTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEDTfPyLaItflP34yzRfhbyesWGwE/VTyFUe
1qxHGZt1Noac17Rc3IcRopjp9qPYZ26CD7foA7pGUvtlTg4wgozUmi2cimLwJMpF
0wUhQFRR2NJvmuuPzUO1UnmvhnENCU6NLgIToeT8VwLz8viO6aQpoXCUqpazNWnp
ZZRbAgTmfLMW0zwI4z+Qoz19SAm/xdDFXSpBg8NEW8yFCov4TzmBI6neuzaTcRcu
+b/WrDYg4y5upsqb3LPDZptE672g+q4q2WiufnRnXvvxJtZwgu+S9CdtKd5xZQud
4fUIBEOuVXkPM9v8Av6I1bTk0GYjh88Vv+7j/um9D7GVP6Bk9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfURjJ37y162sevkj9IOCqeN/oMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzBhYjkxZTEtMDY1MS0z
Yzc5LThhNjMtYjM2NTc5MjJhZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxrYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEkIPi4eDsmHPQExudUwO8/+P6D4TRMF9J46H7o3+d5YlUhPC0B+XHA
FxGpDUHOdW4/xNzl01X4nZ+Nz/J6G3wMBCiNTBRZJw0praDBcnEpMlX5muQyT6e6
rxTMg01nPcuwZnTQYWqIrodUPwxC8QAVKbI8pZ589JoAdlKscVzsJsKDajqHBsgE
EzuYTKj91NdY9sULkx9g7mqA34GgEtNQwWZog6I/KPexQqIU6gDVOcBMQJhN0pp2
0s7i/tmmbi0dbcwB3w87M4LsSgdvEOScC16pqTZiucrPIKiYEfW/7SxM0r4gjToY
wN/RVyNZdm6TSV3fXDU64AMhrCaOiCo=
-----END CERTIFICATE-----