Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55c4c69b-cf5f-3a38-ad06-006859cef5e6.roa
File:                     55c4c69b-cf5f-3a38-ad06-006859cef5e6.roa (raw, json)
Hash identifier:          bH/sppI03xo9CEP3jskrtCIx2+N3/XGpqF/VVS3RN/g=
Subject key identifier:   54:3D:5F:4E:B6:60:02:05:C9:29:68:AE:D2:08:F9:83:45:D7:9F:97
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858408F76D9A4A43AFB1F5D1D3600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55c4c69b-cf5f-3a38-ad06-006859cef5e6.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 17 Apr 2025 04:00:00 +0000
asID:                     207429
IP address blocks:        166.0.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:76:d9:a4:a4:3a:fb:1f:5d:1d:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Apr 17 04:00:00 2025 GMT
        Subject: CN=05d301d2-b346-4426-9908-33715bf6ea0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:1d:37:1c:70:17:01:fc:95:d7:51:57:12:
                    ff:39:95:1f:9b:86:e8:19:b7:ec:b2:61:57:52:c0:
                    8f:ed:9d:44:79:78:54:1c:39:82:fb:e0:33:cd:21:
                    93:9c:c8:8f:63:9b:1c:07:3e:0a:15:5e:0d:f2:bc:
                    91:08:7a:21:08:b6:ce:e2:a1:b9:4b:f8:a2:79:08:
                    91:ca:87:9c:0e:93:68:59:a5:cb:1a:fe:53:11:ec:
                    f4:a0:3a:aa:75:9a:d4:a9:dd:e5:a1:18:88:ea:50:
                    4d:5d:05:b7:55:d0:a9:99:ec:21:c4:6d:90:ed:7f:
                    0f:cd:3c:b9:f9:14:ef:92:5f:c3:f5:e0:4a:a9:c6:
                    bf:28:f5:92:ee:8c:ea:c6:d8:98:b7:76:29:94:9e:
                    71:14:5b:d1:14:8c:8b:fd:be:02:69:df:f5:76:e1:
                    e2:ff:d4:ea:53:be:44:7f:92:18:fa:98:3c:be:8a:
                    c6:54:fb:53:19:b0:dc:8c:a4:49:76:cc:62:66:4e:
                    d5:ad:c7:59:70:b4:2f:f7:c3:20:54:0a:bf:09:e7:
                    65:91:c8:2f:6a:fc:e0:91:75:d9:e4:a7:96:e9:44:
                    ad:39:30:45:3d:27:17:51:11:5c:8c:82:a3:8b:02:
                    93:26:22:c6:84:a3:4e:92:93:d2:35:d0:56:a8:de:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:5F:4E:B6:60:02:05:C9:29:68:AE:D2:08:F9:83:45:D7:9F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55c4c69b-cf5f-3a38-ad06-006859cef5e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:d5:51:90:78:1d:06:f8:b6:97:80:7c:33:9c:e7:d7:bc:
         b4:17:94:b6:3c:96:52:81:83:8e:d8:05:97:9e:0f:2f:ee:63:
         5c:12:ac:fe:eb:dd:bb:22:82:ec:1c:6f:88:6b:2b:d9:be:83:
         49:75:2a:25:36:7a:51:9e:bd:a6:07:f3:5e:79:08:41:9e:23:
         3e:73:f0:9f:d5:0f:fd:a0:be:06:21:1c:7a:fc:c6:6c:12:27:
         23:a8:29:46:8d:8d:b4:65:e0:82:8e:e6:2b:2a:08:a5:7c:dd:
         5c:09:96:d3:24:bc:c6:26:d2:71:d5:de:45:b7:1a:06:fc:dd:
         97:7b:8d:d0:aa:be:29:e3:47:a9:c7:f8:c8:69:90:60:09:83:
         a7:14:aa:a4:f0:47:73:2b:89:b4:a0:b4:50:81:ae:12:04:9e:
         d9:e6:3d:a8:30:aa:4b:3b:ab:4a:d2:46:d4:06:48:00:b9:df:
         89:b5:f1:75:fa:36:31:07:94:cb:ab:e4:c3:33:58:b3:3d:6f:
         be:ee:98:fc:98:df:10:ab:fb:07:ec:fa:4b:25:6d:c4:41:14:
         02:de:bc:71:ec:e1:0a:d4:1f:1d:91:58:75:1e:4b:78:f1:51:
         08:a9:53:61:72:7e:cb:88:d2:8b:6f:9f:d2:9d:10:57:17:17:
         76:35:e5:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECPdtmkpDr7H10dNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDQxNzA0MDAwMFowLzEtMCsGA1UEAxMk
MDVkMzAxZDItYjM0Ni00NDI2LTk5MDgtMzM3MTViZjZlYTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1sdNxxwFwH8lddRVxL/OZUfm4boGbfssmFX
UsCP7Z1EeXhUHDmC++AzzSGTnMiPY5scBz4KFV4N8ryRCHohCLbO4qG5S/iieQiR
yoecDpNoWaXLGv5TEez0oDqqdZrUqd3loRiI6lBNXQW3VdCpmewhxG2Q7X8PzTy5
+RTvkl/D9eBKqca/KPWS7ozqxtiYt3YplJ5xFFvRFIyL/b4Cad/1duHi/9TqU75E
f5IY+pg8vorGVPtTGbDcjKRJdsxiZk7VrcdZcLQv98MgVAq/CedlkcgvavzgkXXZ
5KeW6UStOTBFPScXURFcjIKjiwKTJiLGhKNOkpPSNdBWqN4eGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQ9X062YAIFySlortII+YNF15+XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTVjNGM2OWItY2Y1Zi0z
YTM4LWFkMDYtMDA2ODU5Y2VmNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8W1VGQeB0G+LaXgHwznOfXvLQXlLY8llKBg47YBZeeDy/uY1wSrP7r
3bsiguwcb4hrK9m+g0l1KiU2elGevaYH8155CEGeIz5z8J/VD/2gvgYhHHr8xmwS
JyOoKUaNjbRl4IKO5isqCKV83VwJltMkvMYm0nHV3kW3Ggb83Zd7jdCqvinjR6nH
+MhpkGAJg6cUqqTwR3MribSgtFCBrhIEntnmPagwqks7q0rSRtQGSAC534m18XX6
NjEHlMur5MMzWLM9b77umPyY3xCr+wfs+kslbcRBFALevHHs4QrUHx2RWHUeS3jx
UQipU2FyfsuI0otvn9KdEFcXF3Y15VA=
-----END CERTIFICATE-----