Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae0216c8-1847-3ac5-b82a-c740855393e9.roa
File:                     ae0216c8-1847-3ac5-b82a-c740855393e9.roa (raw, json)
Hash identifier:          i2dPBxcpFqzSYlL6XaGuXLdn49bAkCZQoNIZ0xr/2sk=
Subject key identifier:   69:CE:D3:77:A0:69:61:88:11:06:47:29:86:24:65:91:57:E1:8A:CB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858414FF5E9FABBA7E022A9165F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae0216c8-1847-3ac5-b82a-c740855393e9.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 25 Jun 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        166.0.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4f:f5:e9:fa:bb:a7:e0:22:a9:16:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 25 04:00:00 2025 GMT
        Subject: CN=5f0ef779-273d-45c7-bf35-8cd03f0a5522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:c6:0b:50:04:ae:c0:56:dc:29:17:2c:8b:
                    62:27:77:72:e7:89:1e:a8:74:88:b2:89:1e:aa:74:
                    eb:e6:40:c8:86:1a:6c:87:fc:ca:37:1a:79:a0:26:
                    aa:3b:98:8c:8c:4b:08:f7:38:8d:1f:aa:59:65:db:
                    af:a5:a3:ff:b2:d4:80:3d:c7:49:ea:36:d2:7d:4b:
                    46:3e:38:d5:66:e7:10:07:a4:2b:36:06:2d:aa:ce:
                    f8:fe:f2:ad:c7:79:33:4d:ec:3b:83:d7:99:76:74:
                    87:e2:e4:50:77:a3:a1:a3:ea:ee:12:ea:12:7c:28:
                    95:bb:7b:53:58:48:7d:93:b5:40:d8:54:4b:40:2b:
                    24:2e:ad:89:6c:ee:b4:92:f0:e5:24:dd:0e:0c:92:
                    48:76:03:82:9b:52:dd:c1:b0:ff:69:ae:3c:b1:e1:
                    d9:86:35:b1:17:ed:0e:da:62:53:a0:79:b3:72:ca:
                    9a:50:eb:91:a6:83:f5:0a:09:dd:23:f2:6e:49:c1:
                    f6:89:26:ce:35:9c:22:62:33:41:d8:d7:54:7d:5e:
                    54:ff:2e:9b:c9:25:7f:04:4a:76:26:fd:fd:75:a0:
                    d1:70:16:0e:53:57:1b:31:5e:a1:d2:40:7f:82:56:
                    92:bd:96:88:04:15:8d:08:6c:63:5f:a8:08:6a:bc:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CE:D3:77:A0:69:61:88:11:06:47:29:86:24:65:91:57:E1:8A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae0216c8-1847-3ac5-b82a-c740855393e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:36:7a:8d:a4:8e:4c:e3:19:18:62:aa:d8:d4:94:e8:25:4b:
         3b:b2:fc:31:f7:da:6e:72:e6:27:16:0a:c0:7c:d6:9c:51:03:
         82:76:52:bd:5b:94:91:43:93:ad:8e:73:b4:aa:6c:98:a8:05:
         14:76:1a:c4:df:25:29:d6:fb:51:d4:89:fd:c6:31:2e:4b:26:
         7a:86:05:e2:5c:cf:38:a2:6a:ba:04:85:c6:db:61:c2:c0:53:
         a2:06:f8:db:80:4f:5c:04:cb:f5:3b:73:f8:54:18:02:21:ef:
         b5:5c:19:a0:10:21:0e:fa:5e:60:d7:37:2a:4c:f6:7d:72:62:
         92:6b:61:2e:0a:53:84:c0:de:2a:21:11:7c:7c:88:55:1f:73:
         39:06:c0:da:42:17:85:43:34:7c:75:c6:a7:46:7c:90:ff:92:
         57:1d:78:49:a7:87:54:74:bc:ba:4d:27:1f:b3:3e:a9:8e:7a:
         c6:e0:91:dc:52:36:5c:c1:73:e1:f1:f3:cf:34:77:41:57:0c:
         da:78:d4:5b:8b:d7:04:fe:98:e9:b9:8c:56:d2:92:e9:6c:e0:
         2a:9d:d5:9e:72:41:2a:87:51:e0:62:74:53:e2:35:bd:ae:b0:
         19:5c:89:4e:43:fb:60:24:49:9e:0a:8d:83:30:58:32:f8:58:
         bb:7c:d4:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFP9en6u6fgIqkWX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NWYwZWY3NzktMjczZC00NWM3LWJmMzUtOGNkMDNmMGE1NTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVDGC1AErsBW3CkXLItiJ3dy54keqHSIsoke
qnTr5kDIhhpsh/zKNxp5oCaqO5iMjEsI9ziNH6pZZduvpaP/stSAPcdJ6jbSfUtG
PjjVZucQB6QrNgYtqs74/vKtx3kzTew7g9eZdnSH4uRQd6Oho+ruEuoSfCiVu3tT
WEh9k7VA2FRLQCskLq2JbO60kvDlJN0ODJJIdgOCm1LdwbD/aa48seHZhjWxF+0O
2mJToHmzcsqaUOuRpoP1CgndI/JuScH2iSbONZwiYjNB2NdUfV5U/y6bySV/BEp2
Jv39daDRcBYOU1cbMV6h0kB/glaSvZaIBBWNCGxjX6gIarzofQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnO03egaWGIEQZHKYYkZZFX4YrLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWUwMjE2YzgtMTg0Ny0z
YWM1LWI4MmEtYzc0MDg1NTM5M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADM2eo2kjkzjGRhiqtjUlOglSzuy/DH32m5y5icWCsB81pxRA4J2Ur1b
lJFDk62Oc7SqbJioBRR2GsTfJSnW+1HUif3GMS5LJnqGBeJczziiaroEhcbbYcLA
U6IG+NuAT1wEy/U7c/hUGAIh77VcGaAQIQ76XmDXNypM9n1yYpJrYS4KU4TA3ioh
EXx8iFUfczkGwNpCF4VDNHx1xqdGfJD/klcdeEmnh1R0vLpNJx+zPqmOesbgkdxS
NlzBc+Hx8880d0FXDNp41FuL1wT+mOm5jFbSkuls4Cqd1Z5yQSqHUeBidFPiNb2u
sBlciU5D+2AkSZ4KjYMwWDL4WLt81J8=
-----END CERTIFICATE-----