Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee942f49-c34f-3df0-9d2a-ca5c8985a1f9.roa
File:                     ee942f49-c34f-3df0-9d2a-ca5c8985a1f9.roa (raw, json)
Hash identifier:          VrV20SphrapgIuyN9Mn1d6sEGA5ZawWI4Bl/ZyiKGxM=
Subject key identifier:   9F:30:8E:78:8F:AD:B4:FE:FD:8D:08:60:FC:53:9C:E7:B4:39:0D:B1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583D5E3C65C46A83E9D3793EFA60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee942f49-c34f-3df0-9d2a-ca5c8985a1f9.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Fri 28 Jun 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        23.26.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5e:3c:65:c4:6a:83:e9:d3:79:3e:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Jun 28 04:00:00 2024 GMT
        Subject: CN=5bbef6d9-1fce-438c-8abd-dc3961fdf4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:1e:16:e0:c3:3b:54:dc:d5:aa:58:63:0a:
                    17:c4:db:97:21:aa:d2:61:20:85:c6:80:85:bd:8f:
                    9e:d3:43:57:1d:e9:fc:97:28:6a:5e:66:c6:8f:6a:
                    41:12:da:3d:69:ba:85:37:5a:9a:5e:cd:ae:b7:2e:
                    81:e3:d2:14:be:ec:37:5b:f0:51:7d:df:48:3f:f3:
                    75:0a:ab:02:77:d8:33:eb:c1:77:32:68:5e:55:7b:
                    70:f5:f8:b3:0f:f0:0d:23:ef:92:bf:91:65:06:6d:
                    a5:c0:70:05:7c:b3:e6:e8:04:1d:aa:e4:08:37:45:
                    a7:63:56:27:a0:1f:d3:36:56:1d:76:76:c9:6d:df:
                    2d:11:1f:cd:87:f5:5c:44:e8:5b:d0:b2:64:72:db:
                    d6:2a:13:25:d8:60:e6:2d:8e:60:63:73:73:d3:f9:
                    16:71:87:c6:04:66:ed:26:79:af:ca:c5:6b:86:34:
                    02:92:88:f3:19:b7:d0:9b:fc:7d:26:65:50:36:51:
                    dd:ca:69:7e:42:40:28:9b:fd:ad:77:8f:49:f1:29:
                    5d:4e:21:c7:15:62:fc:60:68:b7:5e:fc:9e:4b:16:
                    5a:5d:d0:a5:3c:5f:64:84:4b:bd:db:02:03:75:52:
                    a7:e2:42:8a:b9:0d:de:12:92:76:6c:1b:3e:c2:e4:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:8E:78:8F:AD:B4:FE:FD:8D:08:60:FC:53:9C:E7:B4:39:0D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee942f49-c34f-3df0-9d2a-ca5c8985a1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d4:d9:7d:12:31:c2:25:55:71:5d:89:96:95:af:9c:e9:05:
         33:01:1e:5d:12:95:ab:44:58:7a:02:32:e2:f3:62:21:47:ad:
         a7:8b:c0:ee:40:c4:c6:f4:13:10:77:7c:b8:33:87:e1:bf:e6:
         b7:3e:15:d1:54:8f:44:13:ec:e4:f2:52:a2:35:de:c8:c5:4c:
         f2:d8:95:a2:72:42:78:9d:f6:2d:2e:06:db:15:2d:17:be:f5:
         b5:6a:ba:5e:11:c0:36:f9:03:78:81:9e:59:2a:da:8d:37:8a:
         37:ca:62:80:79:1c:2f:31:4d:13:d5:52:e5:01:d9:64:36:f3:
         ab:67:f6:fe:df:d8:a5:a0:8a:1e:0a:d3:bc:90:e1:6d:d6:a6:
         04:8d:70:5d:5c:ad:cd:d0:2b:ef:59:bc:fe:89:52:1b:4e:6a:
         7b:b2:64:d4:ce:c3:8f:1e:f4:88:71:16:ce:10:8b:c4:29:6b:
         0e:71:6b:ff:1e:72:de:ce:f6:c1:7f:79:99:c3:10:ee:00:9f:
         81:b4:20:e2:9d:7b:be:61:59:1e:29:d3:3e:2c:60:ea:8e:71:
         41:fc:96:4a:ec:cb:d0:1a:4a:c5:37:7e:39:fb:ed:f9:9b:21:
         09:fb:36:cb:97:27:5a:10:b3:84:f7:38:e1:9c:b3:ab:d5:75:
         3c:3a:02:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1ePGXEaoPp03k++mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTA0MDAwMFoXDTI0MDYyODA0MDAwMFowLzEtMCsGA1UEAxMk
NWJiZWY2ZDktMWZjZS00MzhjLThhYmQtZGMzOTYxZmRmNGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueceFuDDO1Tc1apYYwoXxNuXIarSYSCFxoCF
vY+e00NXHen8lyhqXmbGj2pBEto9abqFN1qaXs2uty6B49IUvuw3W/BRfd9IP/N1
CqsCd9gz68F3MmheVXtw9fizD/ANI++Sv5FlBm2lwHAFfLPm6AQdquQIN0WnY1Yn
oB/TNlYddnbJbd8tER/Nh/VcROhb0LJkctvWKhMl2GDmLY5gY3Nz0/kWcYfGBGbt
JnmvysVrhjQCkojzGbfQm/x9JmVQNlHdyml+QkAom/2td49J8SldTiHHFWL8YGi3
XvyeSxZaXdClPF9khEu92wIDdVKn4kKKuQ3eEpJ2bBs+wuTTQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8wjniPrbT+/Y0IYPxTnOe0OQ2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWU5NDJmNDktYzM0Zi0z
ZGYwLTlkMmEtY2E1Yzg5ODVhMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTU2X0SMcIlVXFdiZaVr5zpBTMBHl0SlatEWHoCMuLzYiFHraeLwO5A
xMb0ExB3fLgzh+G/5rc+FdFUj0QT7OTyUqI13sjFTPLYlaJyQnid9i0uBtsVLRe+
9bVqul4RwDb5A3iBnlkq2o03ijfKYoB5HC8xTRPVUuUB2WQ286tn9v7f2KWgih4K
07yQ4W3WpgSNcF1crc3QK+9ZvP6JUhtOanuyZNTOw48e9IhxFs4Qi8Qpaw5xa/8e
ct7O9sF/eZnDEO4An4G0IOKde75hWR4p0z4sYOqOcUH8lkrsy9AaSsU3fjn77fmb
IQn7NsuXJ1oQs4T3OOGcs6vVdTw6ApI=
-----END CERTIFICATE-----