Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/81e70cb2-c925-3e0c-a85a-5f288a44a269.roa
File:                     81e70cb2-c925-3e0c-a85a-5f288a44a269.roa (raw, json)
Hash identifier:          Eb/fDZLfDmqzxqQbbxZ1YSctkgc3OlJAeytpSKr1Yus=
Subject key identifier:   41:A4:88:F9:85:86:4B:A9:2D:73:7E:EF:0C:E8:7F:AD:91:53:05:46
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328583F4ACE89616C084DC8C4C76500
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/81e70cb2-c925-3e0c-a85a-5f288a44a269.roa
Signing time:             Wed 07 Jul 2021 21:05:36 +0000
ROA not before:           Wed 07 Jul 2021 21:05:36 +0000
ROA not after:            Sun 22 Dec 2024 05:00:00 +0000
asID:                     7018
IP address blocks:        45.59.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4a:ce:89:61:6c:08:4d:c8:c4:c7:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Jul  7 21:05:36 2021 GMT
            Not After : Dec 22 05:00:00 2024 GMT
        Subject: CN=a5cef2ee-b0fe-4dc6-96ff-b0b4085b5441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:1e:ae:ee:03:43:54:ee:01:37:ba:f8:5b:
                    e6:7c:c2:90:89:d3:84:cc:d5:7e:fc:db:1d:25:77:
                    2f:da:34:9a:aa:d6:15:c7:7b:9b:e0:7f:f6:c9:6c:
                    5b:06:60:35:5e:50:13:2a:5f:a1:6e:b9:6b:ec:c9:
                    bc:5c:5d:86:45:8b:9d:6e:89:a2:cb:67:7e:80:d4:
                    6d:65:20:db:21:8d:dd:0b:2d:64:b3:3b:e9:ba:3d:
                    8f:e3:65:f0:c5:0e:73:7a:12:9c:7e:70:59:f6:59:
                    27:9d:fd:83:d1:b6:52:9b:98:ca:82:5f:55:b0:91:
                    b7:b6:90:14:fb:e7:c6:7b:88:6a:83:4e:43:33:73:
                    e4:51:49:14:d7:b9:51:bb:31:db:65:e0:1c:63:cf:
                    2e:f3:15:27:86:73:5e:58:fa:60:e3:ce:c3:97:58:
                    8c:48:e0:32:bc:a0:e8:3c:e4:a2:85:53:2f:d2:cf:
                    7d:96:b8:ff:24:29:5f:7a:4d:8e:55:40:80:f5:ef:
                    3e:ac:d9:39:68:b4:d0:1b:22:74:6b:0e:5f:0a:ad:
                    5e:ea:15:a0:62:59:9f:2f:2e:91:68:50:1b:97:16:
                    4c:4a:af:f2:81:ae:7b:7e:e9:f7:f6:13:af:08:ba:
                    87:cf:db:80:e8:58:f8:63:e9:17:9d:95:2e:74:35:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A4:88:F9:85:86:4B:A9:2D:73:7E:EF:0C:E8:7F:AD:91:53:05:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/81e70cb2-c925-3e0c-a85a-5f288a44a269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:10:c9:25:e0:6b:9e:f5:7e:c1:0f:91:4c:5c:01:3e:4c:1d:
         f6:27:e0:b6:c0:1c:fb:4e:04:34:eb:33:e3:07:6e:59:ca:9a:
         6c:c3:b7:ad:d4:30:a8:f4:c5:51:f6:92:c8:8d:c0:06:27:c2:
         5b:72:a0:a6:6b:09:af:18:b8:4a:09:66:56:3e:6d:fc:a5:e0:
         06:3a:3b:7a:38:f7:5d:96:94:96:25:86:07:09:47:bf:9d:04:
         04:21:95:5a:dd:7c:1d:1d:ce:4b:07:5b:6d:07:1d:8d:68:e2:
         85:d8:93:d1:37:8f:35:cd:42:59:8a:10:97:e9:89:b8:cb:7c:
         ec:9b:a9:86:0a:f9:b5:b9:5a:7d:e4:ef:8a:e5:ff:43:96:2a:
         68:22:b1:5c:3d:ff:4c:74:77:ee:fb:71:7d:80:7e:c5:59:97:
         d0:0c:5e:aa:9d:38:5b:63:8b:a4:2e:c9:76:6c:7f:d8:fd:58:
         90:19:ef:0d:47:a3:e8:2d:f6:8e:a2:85:24:58:34:bf:5f:26:
         d7:cd:7c:4f:d1:b0:2c:fb:96:19:03:69:5e:fe:a7:4d:ff:04:
         0b:d7:39:97:57:f2:a8:86:f3:58:15:fa:c9:d3:d1:e9:11:fc:
         67:10:12:f2:40:f8:c4:c6:d1:95:40:90:dd:76:2d:8e:69:59:
         93:f5:ae:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9KzolhbAhNyMTHZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2
M2E0MB4XDTIxMDcwNzIxMDUzNloXDTI0MTIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
YTVjZWYyZWUtYjBmZS00ZGM2LTk2ZmYtYjBiNDA4NWI1NDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDIeru4DQ1TuATe6+FvmfMKQidOEzNV+/Nsd
JXcv2jSaqtYVx3ub4H/2yWxbBmA1XlATKl+hbrlr7Mm8XF2GRYudbomiy2d+gNRt
ZSDbIY3dCy1kszvpuj2P42XwxQ5zehKcfnBZ9lknnf2D0bZSm5jKgl9VsJG3tpAU
++fGe4hqg05DM3PkUUkU17lRuzHbZeAcY88u8xUnhnNeWPpg487Dl1iMSOAyvKDo
POSihVMv0s99lrj/JClfek2OVUCA9e8+rNk5aLTQGyJ0aw5fCq1e6hWgYlmfLy6R
aFAblxZMSq/yga57fun39hOvCLqHz9uA6Fj4Y+kXnZUudDWT1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGkiPmFhkupLXN+7wzof62RUwVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4
NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvODFlNzBjYjItYzkyNS0z
ZTBjLWE4NWEtNWYyODhhNDRhMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm
YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0
NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw
ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTuqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK4QySXga571fsEPkUxcAT5MHfYn4LbAHPtOBDTrM+MHblnKmmzDt63U
MKj0xVH2ksiNwAYnwltyoKZrCa8YuEoJZlY+bfyl4AY6O3o4912WlJYlhgcJR7+d
BAQhlVrdfB0dzksHW20HHY1o4oXYk9E3jzXNQlmKEJfpibjLfOybqYYK+bW5Wn3k
74rl/0OWKmgisVw9/0x0d+77cX2AfsVZl9AMXqqdOFtji6QuyXZsf9j9WJAZ7w1H
o+gt9o6ihSRYNL9fJtfNfE/RsCz7lhkDaV7+p03/BAvXOZdX8qiG81gV+snT0ekR
/GcQEvJA+MTG0ZVAkN12LY5pWZP1rs0=
-----END CERTIFICATE-----