Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e266a00b-87cc-3a76-a265-7f93d23f5e11.roa
File:                     e266a00b-87cc-3a76-a265-7f93d23f5e11.roa (raw, json)
Hash identifier:          2O5fxbtRzVk7KsEuSS++zVy1Wp7W2KgAQ02jC4c9jZY=
Subject key identifier:   68:3D:CA:36:83:BA:2A:7E:8D:5B:83:82:2A:55:17:AA:BD:62:F5:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584163E94C4B57E291C3E6C6F380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e266a00b-87cc-3a76-a265-7f93d23f5e11.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 02 Jul 2025 04:00:00 +0000
asID:                     212219
IP address blocks:        108.165.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:63:e9:4c:4b:57:e2:91:c3:e6:c6:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  2 04:00:00 2025 GMT
        Subject: CN=d38656a0-be3c-40c0-bf47-759d21f597b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:f9:24:28:49:c7:54:e9:4b:09:71:2b:e5:
                    67:bd:42:e0:4a:0a:cc:7b:21:cf:7b:16:35:59:09:
                    62:50:15:2d:a9:9d:fb:de:1a:09:66:5f:45:65:2b:
                    47:24:d4:93:13:75:be:f1:90:6e:16:e5:e2:b7:92:
                    fe:92:47:f5:d4:5d:06:c3:c8:d5:90:69:96:29:fd:
                    6d:5d:07:3a:64:9e:58:c2:f8:08:e6:26:15:a4:b7:
                    9a:79:df:dc:ef:f0:d4:fb:21:d4:88:94:68:9e:15:
                    be:e6:01:39:f5:fe:0a:f9:8c:7a:18:56:7a:f7:e1:
                    b0:da:a5:95:3a:8d:50:66:fb:fc:9b:ea:a6:87:98:
                    5d:5e:77:a4:3d:00:f6:3f:03:08:ff:5a:e2:ed:75:
                    f3:99:59:e6:5c:d0:1b:41:15:c9:45:c5:de:7c:f4:
                    01:e3:98:ce:fa:4e:50:27:fa:bd:8d:ba:f1:49:87:
                    2f:ca:96:c2:c7:17:aa:2c:f8:bc:95:1a:61:a7:cb:
                    68:f6:d4:a6:f0:24:4f:e8:be:41:4b:7b:cd:d0:64:
                    a4:8f:bb:f1:a3:5f:ed:81:41:d6:d7:88:c7:67:cf:
                    5c:89:95:72:28:b6:ae:ef:0d:72:f4:71:79:1d:a2:
                    02:3d:d1:ba:29:44:d4:af:13:c5:c7:7c:32:a8:dc:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:CA:36:83:BA:2A:7E:8D:5B:83:82:2A:55:17:AA:BD:62:F5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e266a00b-87cc-3a76-a265-7f93d23f5e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e5:d5:7b:91:e5:e9:e9:46:71:f4:46:e3:99:96:5b:42:47:
         88:f7:bc:2e:1d:1d:f2:0c:dc:d0:ee:a6:8b:bd:78:5c:ef:c1:
         56:59:2c:29:bb:0c:33:91:99:60:3f:c9:86:c4:8b:e6:d3:f2:
         c1:b4:65:8f:63:c5:ef:ca:c4:8f:af:b7:f9:c1:e7:3b:ec:a4:
         da:6b:ce:b9:26:67:cf:08:73:6e:be:d3:bd:3e:8a:3a:c7:49:
         7a:b5:3a:3c:7c:ff:7b:2e:3c:ce:ed:c7:ca:8a:3f:08:bb:25:
         f7:85:19:28:28:79:8c:75:f3:24:23:fc:d0:e7:7f:f4:c8:cc:
         6c:8b:f3:a2:eb:cc:08:b8:9a:5c:18:b8:94:c4:c4:26:32:9a:
         39:ee:93:47:35:a3:51:c6:2b:a9:63:d7:fd:8d:74:a1:b8:66:
         50:32:a5:a1:a9:60:1b:46:51:c4:f4:4a:b3:c5:1e:36:65:ca:
         cc:87:9d:e4:d0:18:b0:16:2d:de:bb:53:06:32:1e:27:85:b2:
         52:ac:7b:81:14:fb:8c:96:5c:d9:eb:80:6c:71:7b:44:a9:cc:
         50:cb:2b:c7:3b:28:3c:12:6d:7c:4b:56:9a:0b:2e:fa:4e:ca:
         59:50:cc:88:54:66:1a:fd:54:55:cf:25:cb:8a:c3:e8:63:4c:
         5f:0f:db:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFj6UxLV+KRw+bG84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDcwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDM4NjU2YTAtYmUzYy00MGMwLWJmNDctNzU5ZDIxZjU5N2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGf5JChJx1TpSwlxK+VnvULgSgrMeyHPexY1
WQliUBUtqZ373hoJZl9FZStHJNSTE3W+8ZBuFuXit5L+kkf11F0Gw8jVkGmWKf1t
XQc6ZJ5YwvgI5iYVpLeaed/c7/DU+yHUiJRonhW+5gE59f4K+Yx6GFZ69+Gw2qWV
Oo1QZvv8m+qmh5hdXnekPQD2PwMI/1ri7XXzmVnmXNAbQRXJRcXefPQB45jO+k5Q
J/q9jbrxSYcvypbCxxeqLPi8lRphp8to9tSm8CRP6L5BS3vN0GSkj7vxo1/tgUHW
14jHZ89ciZVyKLau7w1y9HF5HaICPdG6KUTUrxPFx3wyqNwwAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGg9yjaDuip+jVuDgipVF6q9YvXeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTI2NmEwMGItODdjYy0z
YTc2LWEyNjUtN2Y5M2QyM2Y1ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzl1XuR5enpRnH0RuOZlltCR4j3vC4dHfIM3NDupou9eFzvwVZZLCm7
DDORmWA/yYbEi+bT8sG0ZY9jxe/KxI+vt/nB5zvspNprzrkmZ88Ic26+070+ijrH
SXq1Ojx8/3suPM7tx8qKPwi7JfeFGSgoeYx18yQj/NDnf/TIzGyL86LrzAi4mlwY
uJTExCYymjnuk0c1o1HGK6lj1/2NdKG4ZlAypaGpYBtGUcT0SrPFHjZlysyHneTQ
GLAWLd67UwYyHieFslKse4EU+4yWXNnrgGxxe0SpzFDLK8c7KDwSbXxLVpoLLvpO
yllQzIhUZhr9VFXPJcuKw+hjTF8P22Q=
-----END CERTIFICATE-----