Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df3800ff-fa91-3b38-9402-c5516d3e28e0.roa
File:                     df3800ff-fa91-3b38-9402-c5516d3e28e0.roa (raw, json)
Hash identifier:          CD4Egur4aYYsJbgg0SZ4ZjGzdZCAEAHlGdEA+eAzHJo=
Subject key identifier:   86:50:BF:54:C7:D3:FE:28:02:35:B0:4C:2D:67:D5:CE:26:49:39:EC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840523DD700B05152F8F249DE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df3800ff-fa91-3b38-9402-c5516d3e28e0.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 26 Mar 2025 04:00:00 +0000
asID:                     204843
IP address blocks:        108.165.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:52:3d:d7:00:b0:51:52:f8:f2:49:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Mar 26 04:00:00 2025 GMT
        Subject: CN=36b7400a-f8e7-497c-81af-c1e11a834466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:03:57:a1:ec:e7:e1:30:c8:ff:fe:9e:e1:
                    62:58:b3:51:34:c4:22:16:59:92:34:53:91:df:17:
                    7a:9d:25:48:2f:24:5b:a5:4d:52:57:86:2d:ff:13:
                    bc:29:75:e4:fe:2b:ab:7c:31:0f:5f:58:0b:09:dd:
                    45:70:8e:1c:df:1d:7d:b5:05:1d:ad:35:0a:35:f1:
                    ca:99:0c:23:1f:da:86:4a:2a:66:66:95:a5:76:d0:
                    4f:77:0b:b1:85:ad:42:2f:96:15:04:70:60:5f:ea:
                    65:8b:a6:bf:3d:f4:90:4a:7a:fd:c4:97:0f:48:57:
                    db:c2:ac:2e:dc:37:a6:e5:b5:14:f1:f5:93:08:b8:
                    25:d1:bd:76:a7:6b:2a:05:bf:54:44:0c:e7:f6:6a:
                    88:69:4b:bf:c4:15:81:59:f2:69:04:5f:38:74:b7:
                    d8:45:76:8b:49:c9:41:42:3e:f6:f7:21:5a:a9:97:
                    97:78:28:c3:5f:ed:1a:ce:6a:b3:1f:b1:08:1d:7f:
                    39:ab:00:1b:91:b1:48:c8:9f:f1:18:05:e4:b4:59:
                    55:3d:a7:67:a5:e9:53:4f:e8:bb:24:79:d0:45:03:
                    d3:0c:0d:4a:6e:b7:d5:1d:67:bf:ed:f1:0c:a1:b7:
                    19:23:73:4c:3a:47:dd:b0:dc:59:d2:dc:26:2e:c5:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:50:BF:54:C7:D3:FE:28:02:35:B0:4C:2D:67:D5:CE:26:49:39:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df3800ff-fa91-3b38-9402-c5516d3e28e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9f:d3:ee:d8:f9:5a:a6:5f:0c:c8:cc:76:15:ee:f7:fb:b4:
         fd:22:c8:b1:48:13:23:09:24:69:c0:86:b9:25:c1:51:a8:eb:
         68:2f:5d:80:0d:4c:d7:e9:26:04:41:18:c3:3a:7d:e2:8c:6c:
         98:c0:8f:98:00:ac:01:e8:63:df:86:30:0b:fa:a9:e3:8a:bf:
         78:c8:b2:8d:10:51:72:40:e7:cd:ef:b4:93:46:d6:b1:79:af:
         9c:df:e2:49:5d:fe:f4:37:32:df:ca:e7:1e:41:fb:7f:6e:1a:
         4c:31:39:24:52:3a:80:4e:bf:78:3f:a8:39:16:90:56:dc:d6:
         78:6d:cf:62:f4:06:86:cf:a8:2e:88:9b:a3:73:73:1f:2a:6d:
         42:3c:09:63:3f:d0:98:de:7e:83:47:cf:a5:eb:28:e7:b5:25:
         61:b1:6a:cd:ec:1d:9e:94:e7:71:bd:9d:d8:1c:09:04:b0:a2:
         6d:9f:b8:56:ff:41:8c:e5:7f:b4:90:76:78:1a:44:b9:f5:ab:
         77:8c:6f:35:c0:b9:4d:a3:79:82:df:27:19:1e:8e:19:15:39:
         6f:b2:3a:42:2d:e1:38:ca:a1:8c:e4:e9:66:f7:04:1d:97:09:
         d5:bd:87:f4:cf:01:09:5f:a5:cf:21:17:65:db:f6:cd:e0:6a:
         e3:98:7b:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBSPdcAsFFS+PJJ3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDMyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MzZiNzQwMGEtZjhlNy00OTdjLTgxYWYtYzFlMTFhODM0NDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYIDV6Hs5+EwyP/+nuFiWLNRNMQiFlmSNFOR
3xd6nSVILyRbpU1SV4Yt/xO8KXXk/iurfDEPX1gLCd1FcI4c3x19tQUdrTUKNfHK
mQwjH9qGSipmZpWldtBPdwuxha1CL5YVBHBgX+pli6a/PfSQSnr9xJcPSFfbwqwu
3Dem5bUU8fWTCLgl0b12p2sqBb9URAzn9mqIaUu/xBWBWfJpBF84dLfYRXaLSclB
Qj729yFaqZeXeCjDX+0azmqzH7EIHX85qwAbkbFIyJ/xGAXktFlVPadnpelTT+i7
JHnQRQPTDA1KbrfVHWe/7fEMobcZI3NMOkfdsNxZ0twmLsVy2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZQv1TH0/4oAjWwTC1n1c4mSTnsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGYzODAwZmYtZmE5MS0z
YjM4LTk0MDItYzU1MTZkM2UyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSf0+7Y+VqmXwzIzHYV7vf7tP0iyLFIEyMJJGnAhrklwVGo62gvXYAN
TNfpJgRBGMM6feKMbJjAj5gArAHoY9+GMAv6qeOKv3jIso0QUXJA583vtJNG1rF5
r5zf4kld/vQ3Mt/K5x5B+39uGkwxOSRSOoBOv3g/qDkWkFbc1nhtz2L0BobPqC6I
m6Nzcx8qbUI8CWM/0JjefoNHz6XrKOe1JWGxas3sHZ6U53G9ndgcCQSwom2fuFb/
QYzlf7SQdngaRLn1q3eMbzXAuU2jeYLfJxkejhkVOW+yOkIt4TjKoYzk6Wb3BB2X
CdW9h/TPAQlfpc8hF2Xb9s3gauOYe2o=
-----END CERTIFICATE-----