Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b45b03f4-58ab-3ae6-aeb9-97c705e1af69.roa
File:                     b45b03f4-58ab-3ae6-aeb9-97c705e1af69.roa (raw, json)
Hash identifier:          RULMnIHLt76tZq23BCrmM4oFugRZGzCjFwDyIFCE0n8=
Subject key identifier:   FF:FC:F2:39:AF:10:82:8B:6E:C5:E9:70:AF:AA:9E:90:26:77:49:FE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841BD28504CF97B833DFC898000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b45b03f4-58ab-3ae6-aeb9-97c705e1af69.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 03 Aug 2025 04:00:00 +0000
asID:                     834
IP address blocks:        23.26.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bd:28:50:4c:f9:7b:83:3d:fc:89:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Aug  3 04:00:00 2025 GMT
        Subject: CN=c54b2726-42cf-4da0-b716-4fd09876dacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:3f:ac:4d:a7:72:43:d3:12:a3:f6:76:ae:
                    e8:a3:fb:bc:23:53:49:de:1e:85:94:c5:0d:92:76:
                    eb:3f:48:37:de:1b:15:67:32:e1:34:71:54:14:65:
                    ab:86:9f:39:e6:f6:17:a8:2e:2b:6a:57:aa:47:b6:
                    e7:c0:9e:ee:9d:3f:fb:a5:90:32:f1:ea:f1:8c:47:
                    0c:37:36:cb:28:17:89:50:8f:7c:01:82:dc:b6:5c:
                    8a:e5:9e:18:b4:fb:7f:2e:a2:ec:5c:78:25:b9:a4:
                    e2:8a:50:98:61:a5:66:5a:a3:64:20:c2:81:9d:c2:
                    4a:9f:da:75:21:b7:dc:69:28:85:2e:1f:6d:d1:f1:
                    9d:67:9e:a1:a4:64:90:60:31:cc:30:5d:8b:dd:c1:
                    20:56:6f:47:90:8b:00:ac:ba:9d:20:82:35:51:7f:
                    b4:a5:3c:f6:c3:cd:08:dd:98:f4:af:26:e3:80:69:
                    a5:8a:d5:6a:80:54:50:4a:71:d4:21:1f:50:5e:89:
                    41:dc:05:a2:a0:73:4a:1b:68:01:f9:07:60:b4:35:
                    bf:32:98:86:2a:14:23:91:ca:34:1d:cd:98:94:c1:
                    e6:db:8a:ed:7d:d9:f9:30:7c:09:e3:98:5d:b3:ef:
                    80:83:4d:9b:d8:d8:4d:f6:7b:ff:f5:19:4c:77:cd:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:F2:39:AF:10:82:8B:6E:C5:E9:70:AF:AA:9E:90:26:77:49:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b45b03f4-58ab-3ae6-aeb9-97c705e1af69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b4:2b:c5:b5:61:86:c4:31:30:c8:55:74:d3:42:c1:d2:4a:
         db:01:1e:7c:d6:17:0b:7a:d3:86:ef:73:7f:8f:04:fb:5a:c7:
         7f:58:76:93:7b:a7:66:2e:2f:f8:11:37:0d:ab:99:ab:09:22:
         4f:db:cf:66:14:84:3b:52:c9:65:d7:7f:dd:e1:09:89:1a:da:
         42:b8:8c:0a:ba:e3:6b:a5:fb:5f:d7:56:c8:d2:4d:8f:c8:d8:
         2a:20:aa:64:56:43:9a:ab:51:66:d3:3e:a5:63:ef:76:82:30:
         04:9e:d9:28:5f:2e:24:a2:be:b0:8f:46:ba:10:34:3f:e9:c7:
         0e:b3:88:0d:7f:00:2e:c4:c9:37:d5:4d:d0:1a:19:d8:f3:de:
         4f:78:32:9a:7d:96:c8:ca:72:71:8d:04:cf:2b:11:cb:07:77:
         66:2a:22:46:1b:38:4b:81:6b:1f:e7:13:94:c6:57:35:ab:c0:
         db:59:a3:db:c4:b7:b7:a4:29:fe:ad:51:14:fb:b6:ac:2c:61:
         4f:97:bc:49:5c:4e:d2:f7:92:50:04:e4:54:a0:0a:5e:69:89:
         3e:16:aa:0c:94:37:6d:a0:7e:83:1e:43:9c:9b:b7:a0:92:43:
         ea:f9:ff:ba:0a:0b:c0:c3:71:ee:8c:5c:1d:d8:8f:30:43:58:
         48:ee:86:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEG9KFBM+XuDPfyJgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDgwMzA0MDAwMFowLzEtMCsGA1UEAxMk
YzU0YjI3MjYtNDJjZi00ZGEwLWI3MTYtNGZkMDk4NzZkYWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhs/rE2nckPTEqP2dq7oo/u8I1NJ3h6FlMUN
knbrP0g33hsVZzLhNHFUFGWrhp855vYXqC4raleqR7bnwJ7unT/7pZAy8erxjEcM
NzbLKBeJUI98AYLctlyK5Z4YtPt/LqLsXHgluaTiilCYYaVmWqNkIMKBncJKn9p1
IbfcaSiFLh9t0fGdZ56hpGSQYDHMMF2L3cEgVm9HkIsArLqdIII1UX+0pTz2w80I
3Zj0rybjgGmlitVqgFRQSnHUIR9QXolB3AWioHNKG2gB+QdgtDW/MpiGKhQjkco0
Hc2YlMHm24rtfdn5MHwJ45hds++Ag02b2NhN9nv/9RlMd82QxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/88jmvEIKLbsXpcK+qnpAmd0n+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjQ1YjAzZjQtNThhYi0z
YWU2LWFlYjktOTdjNzA1ZTFhZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHG0K8W1YYbEMTDIVXTTQsHSStsBHnzWFwt604bvc3+PBPtax39YdpN7
p2YuL/gRNw2rmasJIk/bz2YUhDtSyWXXf93hCYka2kK4jAq642ul+1/XVsjSTY/I
2CogqmRWQ5qrUWbTPqVj73aCMASe2ShfLiSivrCPRroQND/pxw6ziA1/AC7EyTfV
TdAaGdjz3k94Mpp9lsjKcnGNBM8rEcsHd2YqIkYbOEuBax/nE5TGVzWrwNtZo9vE
t7ekKf6tURT7tqwsYU+XvElcTtL3klAE5FSgCl5piT4WqgyUN22gfoMeQ5ybt6CS
Q+r5/7oKC8DDce6MXB3YjzBDWEjuhuQ=
-----END CERTIFICATE-----