Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/eb7f77fe-572a-3199-a391-8e7c5afa117b.roa
File:                     eb7f77fe-572a-3199-a391-8e7c5afa117b.roa (raw, json)
Hash identifier:          NCCMQAc1EkUEVO1JhyIMrvYa7yr+phVPArTCCPX/q70=
Subject key identifier:   6B:96:1F:CA:05:74:E5:CC:26:5E:E6:7A:1A:22:5B:BD:95:55:62:4E
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285840BF44336700B7B1148D418200
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/eb7f77fe-572a-3199-a391-8e7c5afa117b.roa
Signing time:             Tue 09 Feb 2021 14:22:45 +0000
ROA not before:           Tue 09 Feb 2021 14:22:45 +0000
ROA not after:            Mon 05 May 2025 04:00:00 +0000
asID:                     200827
IP address blocks:        65.110.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bf:44:33:67:00:b7:b1:14:8d:41:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  9 14:22:45 2021 GMT
            Not After : May  5 04:00:00 2025 GMT
        Subject: CN=4e84f24b-c7de-4fb8-b0a3-7fd65d607fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:5f:50:19:6b:b1:84:d9:54:91:8b:bf:ab:
                    e5:60:0b:e9:cf:46:ad:9a:a0:a5:85:11:3f:f1:dd:
                    ef:a1:e6:55:b6:d4:e0:36:6d:f8:bb:21:ad:57:11:
                    8d:8a:d7:c1:b8:a3:bb:f6:db:54:2f:36:3d:ee:30:
                    7b:54:9c:79:d1:b3:f6:5c:27:9e:8b:62:a3:19:fa:
                    2b:ff:46:e1:b9:60:b3:67:59:8f:6e:cc:7c:3c:e7:
                    1b:ac:5b:95:ca:bd:7e:ac:c3:ac:66:4d:d2:3a:e0:
                    e6:77:f0:6c:34:28:3d:25:06:d8:a3:62:df:ba:37:
                    31:21:f3:07:0e:0b:7b:5e:44:4d:50:55:4c:59:af:
                    ad:41:f3:1d:5f:a9:9c:2f:55:75:05:ff:c7:b6:23:
                    2e:33:bb:39:15:3a:83:43:8c:7a:72:8e:12:a4:15:
                    87:54:e6:80:1a:20:c0:8e:c9:99:f6:fd:5a:e9:90:
                    69:50:1b:9a:2d:5f:2f:d9:b3:7a:8c:cb:52:41:3b:
                    dc:d9:b4:fb:f9:7c:ed:e9:26:e2:75:f9:01:15:f1:
                    a9:bd:cd:12:b9:a3:e6:22:de:c3:78:24:86:f6:c2:
                    3e:8b:80:35:00:a4:79:85:2f:5b:6a:c0:84:71:47:
                    ed:2e:ff:82:21:44:1c:4f:e4:29:6b:52:d6:00:d9:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:96:1F:CA:05:74:E5:CC:26:5E:E6:7A:1A:22:5B:BD:95:55:62:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/eb7f77fe-572a-3199-a391-8e7c5afa117b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3d:c2:b2:40:84:1e:c1:53:2e:f7:07:b6:19:62:c6:22:57:
         89:3a:c8:95:19:b7:3f:75:c4:1c:5d:b8:85:ea:57:13:b4:d7:
         8f:53:26:ca:00:a3:0f:40:95:45:b5:a6:4e:72:2d:22:82:86:
         36:51:f2:5f:2f:a9:46:a3:6d:f9:cc:c2:81:6f:3b:bb:02:df:
         0a:4a:50:d4:23:92:ed:89:c1:09:c1:15:10:60:65:a3:56:b7:
         bd:c7:28:eb:d1:e6:5d:50:2b:cd:1f:18:b8:ea:1d:fa:e6:87:
         32:33:9c:9b:27:7b:0e:16:a6:20:5f:74:ae:60:5b:04:4b:ef:
         26:e2:cf:0c:e5:c1:05:ae:c3:66:21:a9:c3:95:d1:8f:4f:35:
         56:17:61:19:82:44:59:65:3e:7e:a0:0d:38:98:79:6b:28:94:
         a8:01:35:72:37:c7:89:26:af:7d:e0:fb:ba:65:d5:93:99:02:
         d4:57:38:cf:2f:b0:d7:88:d1:cd:39:ac:f5:6e:22:06:3a:37:
         7c:a6:0b:03:df:39:db:41:b0:90:c1:3f:cd:6d:0b:df:06:6c:
         c8:ce:4a:5d:b7:71:5c:66:00:bd:6f:b9:75:65:a7:b5:25:6a:
         c4:f1:a9:7f:6a:ce:51:d8:9c:e3:e6:f9:ed:92:6e:a1:8d:3c:
         76:98:92:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC/RDNnALexFI1BggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTIxMDIwOTE0MjI0NVoXDTI1MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NGU4NGYyNGItYzdkZS00ZmI4LWIwYTMtN2ZkNjVkNjA3ZmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDZfUBlrsYTZVJGLv6vlYAvpz0atmqClhRE/
8d3voeZVttTgNm34uyGtVxGNitfBuKO79ttULzY97jB7VJx50bP2XCeei2KjGfor
/0bhuWCzZ1mPbsx8POcbrFuVyr1+rMOsZk3SOuDmd/BsNCg9JQbYo2LfujcxIfMH
Dgt7XkRNUFVMWa+tQfMdX6mcL1V1Bf/HtiMuM7s5FTqDQ4x6co4SpBWHVOaAGiDA
jsmZ9v1a6ZBpUBuaLV8v2bN6jMtSQTvc2bT7+Xzt6SbidfkBFfGpvc0SuaPmIt7D
eCSG9sI+i4A1AKR5hS9basCEcUftLv+CIUQcT+Qpa1LWANkIGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGuWH8oFdOXMJl7mehoiW72VVWJOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvZWI3Zjc3ZmUtNTcyYS0z
MTk5LWEzOTEtOGU3YzVhZmExMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABE9wrJAhB7BUy73B7YZYsYiV4k6yJUZtz91xBxduIXqVxO0149TJsoA
ow9AlUW1pk5yLSKChjZR8l8vqUajbfnMwoFvO7sC3wpKUNQjku2JwQnBFRBgZaNW
t73HKOvR5l1QK80fGLjqHfrmhzIznJsnew4WpiBfdK5gWwRL7ybizwzlwQWuw2Yh
qcOV0Y9PNVYXYRmCRFllPn6gDTiYeWsolKgBNXI3x4kmr33g+7pl1ZOZAtRXOM8v
sNeI0c05rPVuIgY6N3ymCwPfOdtBsJDBP81tC98GbMjOSl23cVxmAL1vuXVlp7Ul
asTxqX9qzlHYnOPm+e2SbqGNPHaYkpU=
-----END CERTIFICATE-----