Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/827b223b-46d7-3bd7-a4f1-4a6cf58d2186.roa
File:                     827b223b-46d7-3bd7-a4f1-4a6cf58d2186.roa (raw, json)
Hash identifier:          T+EVR6ZekYmVhJ90Bo4IW5oFEojqxoPchHevjLpQ4G0=
Subject key identifier:   0F:5C:63:3E:76:FE:14:12:5A:86:7E:D5:C2:CF:5D:AC:13:84:F3:EE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E8B4375913DB25F248E55E400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/827b223b-46d7-3bd7-a4f1-4a6cf58d2186.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 14 Oct 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        50.114.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8b:43:75:91:3d:b2:5f:24:8e:55:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Oct 14 04:00:00 2024 GMT
        Subject: CN=a1111d68-89aa-4261-a912-ea9bead5311b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:a1:60:df:03:e6:2e:22:9a:d4:a5:d7:56:
                    c7:91:42:00:78:23:c9:30:98:26:c3:7f:47:ac:29:
                    86:7f:eb:55:16:63:ff:c6:84:4f:eb:08:12:c0:11:
                    a1:86:b7:2a:5d:d4:b6:ff:83:5e:21:ec:85:09:a6:
                    a5:e0:d9:d0:78:86:9b:1a:de:11:d3:80:43:09:a8:
                    e2:c4:14:63:b7:3e:24:f5:6c:2a:08:a5:6d:c0:2e:
                    1d:26:36:7e:ee:3a:4e:da:80:27:2e:85:b9:6e:0b:
                    52:fb:07:00:bb:8d:99:fd:49:32:d6:7c:d0:a2:cc:
                    cc:d1:a3:e7:1e:f7:92:c2:0b:d7:2d:5f:16:69:55:
                    ec:c6:58:c3:a9:f7:2b:61:db:7e:f7:9e:68:f0:09:
                    12:07:5b:18:40:0b:1d:1a:ba:c3:3d:82:95:f1:19:
                    9a:f1:f3:e4:9e:95:37:a5:b3:85:4b:75:6b:a6:b3:
                    42:fe:3b:11:08:96:ab:dd:4c:4c:1f:db:ae:cd:85:
                    14:6e:f1:01:97:3a:7c:c0:c6:9e:18:37:74:b6:47:
                    34:b3:53:d3:2c:fa:cc:92:17:35:4f:5f:ff:0f:6a:
                    3c:e3:0c:eb:ab:e1:13:6a:3d:9c:6b:79:ae:cb:cc:
                    39:71:86:b0:c5:48:d0:c3:b4:74:4b:e4:80:5d:e2:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:63:3E:76:FE:14:12:5A:86:7E:D5:C2:CF:5D:AC:13:84:F3:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/827b223b-46d7-3bd7-a4f1-4a6cf58d2186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b4:1b:5b:41:09:70:75:6d:ba:29:b1:2d:c7:83:61:8d:73:
         e5:b6:9c:63:1c:95:a9:66:c3:a9:cc:6a:a3:ff:33:d4:8f:a9:
         53:a7:ff:62:61:ec:8e:91:1c:a3:7f:f1:3f:a4:dc:cd:dc:ba:
         20:65:91:26:00:a6:90:bd:dd:e0:d2:7a:4e:72:63:72:e2:a8:
         2c:4e:f5:fe:93:f4:b0:b9:25:46:f0:bd:bc:4e:04:70:f9:82:
         af:2b:98:33:89:86:f2:3c:f1:e6:3e:48:69:f6:0b:00:84:be:
         0a:8b:1b:6a:be:9e:b3:2c:fd:f7:35:c8:1d:09:d7:cc:d0:e1:
         28:82:c3:d3:1b:95:de:23:c1:25:58:5b:94:11:66:cd:7c:f9:
         69:7c:5f:07:ff:99:51:78:51:ed:4e:d7:e6:ab:f2:ce:b6:2e:
         9b:b3:94:8e:13:99:f2:00:a3:aa:9c:41:8d:c0:1f:d3:66:49:
         29:08:c2:61:4f:ca:12:3f:46:68:f0:f0:ff:3c:48:6c:97:af:
         e9:0d:42:84:88:26:60:88:a2:00:c3:1e:37:93:af:3a:ec:d3:
         38:40:cc:97:8d:2c:9a:f1:18:a5:f6:2b:37:47:3f:d0:7a:66:
         a8:2a:c0:f4:91:b0:0b:6a:a6:71:6d:62:4d:dc:71:f5:fd:0a:
         e7:f7:8e:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6LQ3WRPbJfJI5V5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MTAxNDA0MDAwMFowLzEtMCsGA1UEAxMk
YTExMTFkNjgtODlhYS00MjYxLWE5MTItZWE5YmVhZDUzMTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCShYN8D5i4imtSl11bHkUIAeCPJMJgmw39H
rCmGf+tVFmP/xoRP6wgSwBGhhrcqXdS2/4NeIeyFCaal4NnQeIabGt4R04BDCaji
xBRjtz4k9WwqCKVtwC4dJjZ+7jpO2oAnLoW5bgtS+wcAu42Z/Uky1nzQoszM0aPn
HveSwgvXLV8WaVXsxljDqfcrYdt+955o8AkSB1sYQAsdGrrDPYKV8Rma8fPknpU3
pbOFS3VrprNC/jsRCJar3UxMH9uuzYUUbvEBlzp8wMaeGDd0tkc0s1PTLPrMkhc1
T1//D2o84wzrq+ETaj2ca3muy8w5cYawxUjQw7R0S+SAXeIfqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9cYz52/hQSWoZ+1cLPXawThPPuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODI3YjIyM2ItNDZkNy0z
YmQ3LWE0ZjEtNGE2Y2Y1OGQyMTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKq0G1tBCXB1bbopsS3Hg2GNc+W2nGMclalmw6nMaqP/M9SPqVOn/2Jh
7I6RHKN/8T+k3M3cuiBlkSYAppC93eDSek5yY3LiqCxO9f6T9LC5JUbwvbxOBHD5
gq8rmDOJhvI88eY+SGn2CwCEvgqLG2q+nrMs/fc1yB0J18zQ4SiCw9Mbld4jwSVY
W5QRZs18+Wl8Xwf/mVF4Ue1O1+ar8s62LpuzlI4TmfIAo6qcQY3AH9NmSSkIwmFP
yhI/Rmjw8P88SGyXr+kNQoSIJmCIogDDHjeTrzrs0zhAzJeNLJrxGKX2KzdHP9B6
ZqgqwPSRsAtqpnFtYk3ccfX9Cuf3jrg=
-----END CERTIFICATE-----