Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38ebf96c-d7c5-342f-b35b-d17853e02e9b.roa
File:                     38ebf96c-d7c5-342f-b35b-d17853e02e9b.roa (raw, json)
Hash identifier:          gx44b7+IGEDnB1r0Wld/vLg4YCHyInT2zP04sCj7e94=
Subject key identifier:   95:67:42:4C:C1:F4:9C:70:6B:24:B0:3D:CE:8A:DF:7D:A3:20:43:AE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841C26C5D977C5D2B9F1EC20D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38ebf96c-d7c5-342f-b35b-d17853e02e9b.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 05 Aug 2025 04:00:00 +0000
asID:                     213257
IP address blocks:        23.26.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:c2:6c:5d:97:7c:5d:2b:9f:1e:c2:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Aug  5 04:00:00 2025 GMT
        Subject: CN=d5b0e04a-e0b3-409e-a9a4-b382df48eeca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:bc:8d:10:86:be:42:06:ed:cd:df:0f:6c:
                    e3:d2:38:9e:c4:5e:39:63:b7:10:86:99:b6:11:e3:
                    db:21:dd:c1:0c:68:62:b4:82:7a:54:38:b5:cc:fd:
                    7d:64:ba:c2:2a:d9:d6:31:3f:f6:b5:67:47:07:26:
                    34:5f:7b:4c:f0:f8:c3:18:e6:32:92:45:94:26:7d:
                    d6:17:f6:58:92:0b:0c:75:19:dc:e3:04:dd:f0:22:
                    99:b0:8a:f8:94:ff:6a:c0:67:df:8e:1a:4f:1a:00:
                    b7:87:5d:ad:4d:73:18:52:ea:f2:3c:2d:56:e5:4c:
                    64:18:c5:11:2b:bb:30:4f:23:ac:bb:12:17:91:8d:
                    fb:6c:03:db:05:62:79:07:ad:2e:59:91:ab:59:48:
                    9f:9b:81:c8:45:fe:61:67:1a:00:98:2a:7f:da:ee:
                    22:ee:dc:c2:29:34:14:af:48:53:19:db:3e:e2:34:
                    b7:0f:e0:a8:27:ba:92:4a:b1:6f:13:25:91:00:53:
                    90:ce:e4:87:d1:82:69:67:4a:c0:c3:92:80:86:a8:
                    e4:ac:ff:e6:ac:e0:d3:31:80:83:5c:9a:f4:29:ed:
                    1f:e9:89:23:e3:ae:03:2a:8c:e4:4b:3c:a8:92:18:
                    6c:10:84:87:c5:a1:50:de:68:70:87:53:ad:cc:da:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:67:42:4C:C1:F4:9C:70:6B:24:B0:3D:CE:8A:DF:7D:A3:20:43:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38ebf96c-d7c5-342f-b35b-d17853e02e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:62:f1:b4:4b:d5:c8:66:8f:0d:af:4a:33:0f:b9:3e:e0:6f:
         a5:63:b1:98:5b:3b:3b:38:7f:a4:dd:fa:31:65:f9:9c:4f:94:
         60:eb:9d:f9:46:94:00:e8:13:c2:98:bd:66:16:9c:95:6f:d2:
         1a:34:89:b2:82:98:41:ae:8d:95:82:2b:e9:5b:4e:00:bc:99:
         af:23:55:e8:a3:52:1c:d7:01:1d:68:13:07:b1:f4:fc:19:f5:
         54:bd:b4:d7:a7:54:52:2f:cf:08:cc:d5:35:03:c6:69:1f:7b:
         26:c3:00:d0:58:4b:eb:16:0a:67:b0:25:28:f2:9e:5d:89:f0:
         34:50:9e:50:d8:89:9e:93:d8:ff:e0:8d:82:5c:6c:c0:1e:0c:
         a4:48:e9:5d:09:00:e6:54:53:ce:81:5f:b5:94:d1:45:b8:71:
         d0:de:d0:88:79:83:2f:58:3f:2a:68:58:37:3b:26:ea:3e:49:
         fd:92:d4:09:33:62:5e:ba:fd:c5:03:e5:58:8f:9a:fb:3c:35:
         7a:8f:e3:c1:d8:f7:0d:2e:f6:be:34:17:5a:46:ab:79:f5:71:
         ef:4d:a5:52:88:4f:12:cc:fb:0c:d6:58:b3:b2:bc:11:96:6f:
         aa:15:d9:40:9b:34:f0:12:2a:23:78:a9:83:92:fb:f7:d1:8a:
         17:0a:eb:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHCbF2XfF0rnx7CDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDViMGUwNGEtZTBiMy00MDllLWE5YTQtYjM4MmRmNDhlZWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8y8jRCGvkIG7c3fD2zj0jiexF45Y7cQhpm2
EePbId3BDGhitIJ6VDi1zP19ZLrCKtnWMT/2tWdHByY0X3tM8PjDGOYykkWUJn3W
F/ZYkgsMdRnc4wTd8CKZsIr4lP9qwGffjhpPGgC3h12tTXMYUuryPC1W5UxkGMUR
K7swTyOsuxIXkY37bAPbBWJ5B60uWZGrWUifm4HIRf5hZxoAmCp/2u4i7tzCKTQU
r0hTGds+4jS3D+CoJ7qSSrFvEyWRAFOQzuSH0YJpZ0rAw5KAhqjkrP/mrODTMYCD
XJr0Ke0f6Ykj464DKozkSzyokhhsEISHxaFQ3mhwh1OtzNpQewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVnQkzB9JxwaySwPc6K332jIEOuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzhlYmY5NmMtZDdjNS0z
NDJmLWIzNWItZDE3ODUzZTAyZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABli8bRL1chmjw2vSjMPuT7gb6VjsZhbOzs4f6Td+jFl+ZxPlGDrnflG
lADoE8KYvWYWnJVv0ho0ibKCmEGujZWCK+lbTgC8ma8jVeijUhzXAR1oEwex9PwZ
9VS9tNenVFIvzwjM1TUDxmkfeybDANBYS+sWCmewJSjynl2J8DRQnlDYiZ6T2P/g
jYJcbMAeDKRI6V0JAOZUU86BX7WU0UW4cdDe0Ih5gy9YPypoWDc7Juo+Sf2S1Akz
Yl66/cUD5ViPmvs8NXqP48HY9w0u9r40F1pGq3n1ce9NpVKITxLM+wzWWLOyvBGW
b6oV2UCbNPASKiN4qYOS+/fRihcK65g=
-----END CERTIFICATE-----