Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ee3a0c37-a8ea-31c8-9fa6-ad2cf50a219e.roa
File:                     ee3a0c37-a8ea-31c8-9fa6-ad2cf50a219e.roa (raw, json)
Hash identifier:          ib0Ydbqj3n7HUDnx6cwWRjkBrqV+scZeouC1a9Mm8T0=
Subject key identifier:   97:C0:A4:AF:2C:D1:EF:73:B8:51:EB:12:46:DF:C2:46:4E:B0:50:36
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16497045171
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ee3a0c37-a8ea-31c8-9fa6-ad2cf50a219e.roa
Signing time:             Sat 14 Jul 2018 04:19:59 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        192.147.174.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 20:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:97:04:51:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=d2936922-409a-43da-ab09-c86f2e57c8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:19:97:94:64:ef:26:e7:4e:2e:5b:62:92:
                    61:34:ba:6a:b0:99:c9:19:09:5a:29:09:dd:08:9e:
                    26:b7:41:60:73:fc:3d:ca:cd:e8:46:1f:8b:bc:02:
                    3a:d6:d8:43:e0:1a:49:b7:c6:51:db:ac:2d:1a:5a:
                    3a:27:bd:30:18:b0:cb:9e:30:c2:54:27:ad:80:52:
                    cb:32:b4:56:53:7b:08:ef:95:ce:ed:3e:2d:58:cb:
                    bc:d1:22:30:73:5d:85:b2:34:49:9d:c7:ba:3c:e4:
                    26:c3:42:ec:e2:37:30:2b:b4:21:d6:4f:82:9f:e0:
                    38:29:4f:d2:f7:c3:7f:d5:87:49:b4:eb:25:ba:14:
                    c8:5e:f5:c3:29:1a:e9:b2:25:0d:5b:f9:6c:4e:91:
                    19:a3:d8:17:3a:a3:e5:50:2c:33:db:a3:af:54:01:
                    29:ef:4c:e9:74:1d:81:0c:ce:6c:4d:ce:a0:88:f3:
                    29:74:c2:03:b3:85:39:fe:44:51:2d:19:01:3d:54:
                    b8:28:6c:44:80:81:6f:83:ef:1e:ad:35:1e:6d:0f:
                    8f:ea:a4:7c:d2:2e:ec:3a:2a:c9:13:04:d7:b8:d7:
                    58:69:c3:11:6b:f9:52:da:dc:48:34:ca:ed:bb:8b:
                    1f:c0:36:59:3d:23:92:cc:f1:5f:55:57:74:86:0d:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:A4:AF:2C:D1:EF:73:B8:51:EB:12:46:DF:C2:46:4E:B0:50:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ee3a0c37-a8ea-31c8-9fa6-ad2cf50a219e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.147.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:c0:35:6e:18:71:69:78:1a:d8:be:2d:3f:4c:48:e4:d6:be:
         cb:49:1e:9d:a6:b8:6f:74:87:f9:f7:de:3d:18:8f:e1:4d:01:
         97:5c:b4:20:a2:78:30:10:6c:dc:34:af:ad:e8:ef:a7:36:13:
         de:ca:6d:bc:eb:2f:87:2b:ff:aa:e6:d2:27:02:9d:c7:a6:95:
         e3:23:f7:83:8e:c9:a0:20:47:14:d9:a6:07:f6:6a:53:dc:46:
         48:83:88:8a:69:cb:25:b9:1d:74:70:43:0b:24:b7:ae:d2:64:
         e5:5a:16:9a:75:36:dd:09:52:de:6b:50:4d:ce:3e:9c:6f:79:
         8a:80:a1:8d:3a:9c:74:09:d6:4b:df:d0:5a:73:5b:ee:fe:7f:
         65:f4:be:ee:27:95:c6:7b:27:d5:b8:66:08:8a:cc:a1:b1:27:
         ed:82:43:62:a1:29:82:75:4c:29:08:87:ec:d4:d0:66:5b:87:
         53:7f:b5:4c:be:9f:11:f0:fb:89:dd:1a:d3:a6:fd:73:ff:af:
         ce:ff:01:29:25:96:91:a0:2a:a9:d5:92:9a:fc:4f:ea:28:94:
         cf:56:53:0c:39:f5:24:1b:08:3f:f5:05:e0:3c:00:8c:2e:b3:
         26:94:a3:cf:1c:c7:bd:75:db:91:35:0a:bf:96:a8:48:e5:7c:
         3f:c9:81:4c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZJcEUXEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGQy
OTM2OTIyLTQwOWEtNDNkYS1hYjA5LWM4NmYyZTU3YzhhNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL3lGZeUZO8m504uW2KSYTS6arCZyRkJWikJ3Qie
JrdBYHP8PcrN6EYfi7wCOtbYQ+AaSbfGUdusLRpaOie9MBiwy54wwlQnrYBSyzK0
VlN7CO+Vzu0+LVjLvNEiMHNdhbI0SZ3HujzkJsNC7OI3MCu0IdZPgp/gOClP0vfD
f9WHSbTrJboUyF71wyka6bIlDVv5bE6RGaPYFzqj5VAsM9ujr1QBKe9M6XQdgQzO
bE3OoIjzKXTCA7OFOf5EUS0ZAT1UuChsRICBb4PvHq01Hm0Pj+qkfNIu7DoqyRME
17jXWGnDEWv5UtrcSDTK7buLH8A2WT0jkszxX1VXdIYNwJkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSXwKSvLNHvc7hR6xJG38JGTrBQNjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2VlM2EwYzM3LWE4ZWEtMzFj
OC05ZmE2LWFkMmNmNTBhMjE5ZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcCTrjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAvsA1bhhxaXga2L4tP0xI5Na+y0kenaa4b3SH+ffePRiP4U0Bl1y0IKJ4MBBs
3DSvrejvpzYT3sptvOsvhyv/qubSJwKdx6aV4yP3g47JoCBHFNmmB/ZqU9xGSIOI
imnLJbkddHBDCyS3rtJk5VoWmnU23QlS3mtQTc4+nG95ioChjTqcdAnWS9/QWnNb
7v5/ZfS+7ieVxnsn1bhmCIrMobEn7YJDYqEpgnVMKQiH7NTQZluHU3+1TL6fEfD7
id0a06b9c/+vzv8BKSWWkaAqqdWSmvxP6iiUz1ZTDDn1JBsIP/UF4DwAjC6zJpSj
zxzHvXXbkTUKv5aoSOV8P8mBTA==
-----END CERTIFICATE-----