Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94efe339-549b-33a4-a7db-92a7fa239731.roa
File:                     94efe339-549b-33a4-a7db-92a7fa239731.roa (raw, json)
Hash identifier:          gCrapHalENInK3nXQ+YG4eaHnJtmVz08mkr7WFdq/RQ=
Subject key identifier:   09:01:8F:D1:7C:B3:C6:7A:F6:32:0D:93:47:B9:39:F3:6C:28:92:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583FB3C0C85D1F6986B6C410E100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94efe339-549b-33a4-a7db-92a7fa239731.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 28 Jan 2025 05:00:00 +0000
asID:                     147287
IP address blocks:        166.0.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b3:c0:c8:5d:1f:69:86:b6:c4:10:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jan 28 05:00:00 2025 GMT
        Subject: CN=ebb41067-9fcc-42e1-83cb-3f1d259b6f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:60:66:e2:ca:e7:e5:0b:8c:7a:af:08:5b:
                    b8:cc:f6:41:d2:55:42:14:46:71:12:c4:a4:37:ee:
                    45:16:58:c2:95:b3:7f:67:c2:ec:36:63:30:1a:25:
                    be:08:e2:4e:ca:d8:c3:e2:71:57:d3:9a:a3:77:e6:
                    05:5d:c3:ab:fd:08:6a:75:1a:be:93:f4:81:e7:d5:
                    17:b8:7d:dc:0b:ec:f3:d8:59:47:bf:66:72:4e:1f:
                    d9:c0:41:53:37:e4:67:f1:29:93:f4:11:9e:e3:89:
                    26:58:8b:82:22:ca:4e:fb:0f:83:86:d8:b1:77:23:
                    3d:49:8f:c0:ef:63:18:0a:10:21:e2:4e:6d:34:53:
                    e4:44:ca:44:76:66:ea:3c:36:57:09:eb:f8:2a:e3:
                    2d:08:9a:1a:85:5f:47:f8:4b:00:e0:b2:26:3b:71:
                    88:03:7f:38:6d:f0:0e:3b:51:ef:39:2d:6e:2d:3f:
                    8a:c1:08:20:65:b3:f1:10:3f:de:f0:d3:07:48:79:
                    3a:5d:58:20:0c:1a:96:24:e0:2c:9d:6a:1c:2d:a1:
                    ac:27:57:0b:63:07:5e:65:67:52:06:48:39:dd:d9:
                    70:e3:50:08:88:5b:34:93:ba:a6:6d:52:89:de:98:
                    68:45:74:86:b8:61:77:4d:38:89:e5:9d:5a:dc:b8:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:8F:D1:7C:B3:C6:7A:F6:32:0D:93:47:B9:39:F3:6C:28:92:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94efe339-549b-33a4-a7db-92a7fa239731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:04:1a:0d:6d:15:29:01:34:99:40:ad:5b:68:70:88:1f:39:
         9f:e9:0a:af:c9:ed:0e:c2:88:06:af:74:5c:e0:0f:77:2a:43:
         cf:0c:d4:65:ae:f7:34:dd:5c:08:31:53:26:70:57:78:61:25:
         86:c1:f5:f4:a7:d1:63:d5:3d:a7:dc:d6:2d:fc:e0:f2:32:db:
         b3:29:ab:7d:75:91:16:f6:6a:50:1b:80:8a:03:9d:36:0e:35:
         cc:a6:62:af:07:46:d0:cc:27:73:18:0e:0e:06:b7:ab:ec:e2:
         7f:fc:07:24:85:b6:94:dc:a8:d4:a7:6d:49:fe:12:d8:f9:56:
         f1:60:91:86:6d:03:0b:29:88:ce:d5:d6:16:fd:88:6b:ae:0c:
         5b:55:71:68:f8:f9:01:58:80:8f:25:23:f9:b3:83:b6:07:26:
         cf:1f:c7:e0:03:fa:25:cd:43:11:7d:a9:84:ba:e3:86:0f:b8:
         b1:e1:b7:da:e0:65:54:ac:06:74:cf:ef:c7:e7:5e:96:fc:74:
         bb:fe:e2:75:6d:2e:a4:a3:d7:e0:21:65:11:b9:33:d5:d4:81:
         31:c5:a5:57:bc:40:bf:42:7f:76:f0:fe:13:c3:97:fd:40:15:
         a2:4e:b5:66:ae:3c:c8:88:95:4b:9b:dd:83:63:a2:18:66:ac:
         68:c7:41:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+zwMhdH2mGtsQQ4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDEyODA1MDAwMFowLzEtMCsGA1UEAxMk
ZWJiNDEwNjctOWZjYy00MmUxLTgzY2ItM2YxZDI1OWI2ZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnRgZuLK5+ULjHqvCFu4zPZB0lVCFEZxEsSk
N+5FFljClbN/Z8LsNmMwGiW+COJOytjD4nFX05qjd+YFXcOr/QhqdRq+k/SB59UX
uH3cC+zz2FlHv2ZyTh/ZwEFTN+Rn8SmT9BGe44kmWIuCIspO+w+DhtixdyM9SY/A
72MYChAh4k5tNFPkRMpEdmbqPDZXCev4KuMtCJoahV9H+EsA4LImO3GIA384bfAO
O1HvOS1uLT+KwQggZbPxED/e8NMHSHk6XVggDBqWJOAsnWocLaGsJ1cLYwdeZWdS
Bkg53dlw41AIiFs0k7qmbVKJ3phoRXSGuGF3TTiJ5Z1a3LjLkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkBj9F8s8Z69jINk0e5OfNsKJJPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTRlZmUzMzktNTQ5Yi0z
M2E0LWE3ZGItOTJhN2ZhMjM5NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgChMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0EGg1tFSkBNJlArVtocIgfOZ/pCq/J7Q7CiAavdFzgD3cqQ88M1GWu
9zTdXAgxUyZwV3hhJYbB9fSn0WPVPafc1i384PIy27Mpq311kRb2alAbgIoDnTYO
NcymYq8HRtDMJ3MYDg4Gt6vs4n/8BySFtpTcqNSnbUn+Etj5VvFgkYZtAwspiM7V
1hb9iGuuDFtVcWj4+QFYgI8lI/mzg7YHJs8fx+AD+iXNQxF9qYS644YPuLHht9rg
ZVSsBnTP78fnXpb8dLv+4nVtLqSj1+AhZRG5M9XUgTHFpVe8QL9Cf3bw/hPDl/1A
FaJOtWauPMiIlUub3YNjohhmrGjHQcc=
-----END CERTIFICATE-----