Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e43f591-aa83-3cbf-ba7b-dd7a4816bdf0.roa
File:                     6e43f591-aa83-3cbf-ba7b-dd7a4816bdf0.roa (raw, json)
Hash identifier:          HlfxjIh1ZRWyDgc0nsyAeTl+0mJ0Sx7gMUJuCX2zFbk=
Subject key identifier:   A1:BE:32:66:7A:A3:11:A2:E1:B8:BF:18:1E:DE:9B:97:CB:72:3C:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583B29BFF1C3A1EED3FC3413D700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e43f591-aa83-3cbf-ba7b-dd7a4816bdf0.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Sat 09 Dec 2023 05:00:00 +0000
asID:                     3356
IP address blocks:        50.114.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:29:bf:f1:c3:a1:ee:d3:fc:34:13:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Dec  9 05:00:00 2023 GMT
        Subject: CN=95fbd38f-0cbe-4538-8d75-68120965be89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:dc:43:85:33:40:f5:13:2b:ea:92:0f:1b:
                    af:3c:27:60:b4:90:e5:c9:51:8b:d8:3d:c5:96:3f:
                    7b:e6:90:8a:36:24:b8:d0:bb:e7:33:6c:b0:ea:d4:
                    81:84:f1:be:47:99:88:a6:f7:82:09:df:19:80:d0:
                    98:ef:b1:78:38:73:0d:62:36:f6:12:b1:ac:49:fd:
                    76:3a:65:c3:2c:d9:7f:86:35:78:79:69:5a:88:5d:
                    6b:60:fc:b7:3a:6d:ea:7c:f1:ec:36:66:5d:11:34:
                    f7:04:8b:4c:ed:56:da:9e:45:49:3d:c0:6f:b5:30:
                    2a:d8:6c:5f:b4:4a:6b:13:32:b8:12:61:9f:0f:53:
                    69:26:e4:d7:38:c0:8d:87:e5:2b:e4:1f:6d:5f:4a:
                    b7:9c:e5:1b:90:fc:7a:fa:c1:5b:86:4e:fc:5d:d6:
                    8d:c9:48:d6:0b:6a:b3:99:b5:e6:02:de:77:f6:9e:
                    70:9a:95:29:79:58:78:0c:19:10:de:35:9b:55:14:
                    ac:46:aa:ba:00:54:ea:b5:e2:59:46:4a:1a:9e:86:
                    da:d2:18:40:9b:14:b6:7b:bf:36:cb:a5:d1:d1:ea:
                    07:51:2d:f5:46:dc:cd:d9:5b:ee:77:e5:86:4b:03:
                    f6:e8:3c:e1:32:30:e4:da:2b:7e:61:0e:18:b7:26:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:32:66:7A:A3:11:A2:E1:B8:BF:18:1E:DE:9B:97:CB:72:3C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e43f591-aa83-3cbf-ba7b-dd7a4816bdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:24:fe:ed:d9:5c:5a:62:ff:80:f6:e4:ff:03:a7:e0:4d:61:
         59:fb:fe:64:1f:64:1f:63:ad:88:94:56:ec:74:83:0b:fe:45:
         fc:6c:0a:cf:66:44:4d:1d:68:02:5d:e5:70:d6:15:35:f8:b7:
         13:fc:2c:75:9e:4c:1e:5e:6a:c8:4f:3c:50:ab:ba:ae:b5:7c:
         fd:90:64:8d:4b:17:71:99:b4:96:fe:07:c2:22:0d:b3:71:cd:
         04:44:d6:7d:47:8b:f7:83:bc:c1:55:c3:dc:2f:ae:11:f6:08:
         68:65:da:fb:a7:6a:66:b8:4b:b5:58:7d:9f:e4:64:5d:8c:f0:
         b6:33:f2:a3:01:ef:10:57:23:2f:c9:7f:44:9a:2b:1f:d5:36:
         20:11:7c:fb:62:38:08:7d:d8:0e:50:0d:d1:fc:b4:ca:ac:f7:
         2c:98:2a:0e:16:99:85:eb:33:03:cd:e8:fe:68:84:dd:17:aa:
         1e:fe:78:b1:a8:50:1f:f3:99:35:fb:eb:67:32:7e:b5:f0:da:
         e5:ac:f9:c6:78:04:a0:ba:22:8d:49:7d:55:a3:20:31:5d:bb:
         c8:60:02:50:63:84:07:01:6b:37:e6:8e:45:07:b7:b6:60:e2:
         0a:b9:dd:fa:7d:c8:19:af:f3:77:02:aa:38:c8:d0:6f:2d:8b:
         cc:d2:53:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDspv/HDoe7T/DQT1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTA0MDAwMFoXDTIzMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
OTVmYmQzOGYtMGNiZS00NTM4LThkNzUtNjgxMjA5NjViZTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqjcQ4UzQPUTK+qSDxuvPCdgtJDlyVGL2D3F
lj975pCKNiS40LvnM2yw6tSBhPG+R5mIpveCCd8ZgNCY77F4OHMNYjb2ErGsSf12
OmXDLNl/hjV4eWlaiF1rYPy3Om3qfPHsNmZdETT3BItM7VbankVJPcBvtTAq2Gxf
tEprEzK4EmGfD1NpJuTXOMCNh+Ur5B9tX0q3nOUbkPx6+sFbhk78XdaNyUjWC2qz
mbXmAt539p5wmpUpeVh4DBkQ3jWbVRSsRqq6AFTqteJZRkoanoba0hhAmxS2e782
y6XR0eoHUS31RtzN2Vvud+WGSwP26DzhMjDk2it+YQ4YtyZ51QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKG+MmZ6oxGi4bi/GB7em5fLcjzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmU0M2Y1OTEtYWE4My0z
Y2JmLWJhN2ItZGQ3YTQ4MTZiZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnIUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIk/u3ZXFpi/4D25P8Dp+BNYVn7/mQfZB9jrYiUVux0gwv+RfxsCs9m
RE0daAJd5XDWFTX4txP8LHWeTB5eashPPFCruq61fP2QZI1LF3GZtJb+B8IiDbNx
zQRE1n1Hi/eDvMFVw9wvrhH2CGhl2vunama4S7VYfZ/kZF2M8LYz8qMB7xBXIy/J
f0SaKx/VNiARfPtiOAh92A5QDdH8tMqs9yyYKg4WmYXrMwPN6P5ohN0Xqh7+eLGo
UB/zmTX762cyfrXw2uWs+cZ4BKC6Io1JfVWjIDFdu8hgAlBjhAcBazfmjkUHt7Zg
4gq53fp9yBmv83cCqjjI0G8ti8zSU1M=
-----END CERTIFICATE-----