Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9d3486f5-a27b-3d71-96ca-c77f613e1b9b.roa
File:                     9d3486f5-a27b-3d71-96ca-c77f613e1b9b.roa (raw, json)
Hash identifier:          EQ9iexX/vUkJoB2mlsQLXWXu3xIk4XlVnv+XqXUVS+c=
Subject key identifier:   E6:63:14:94:78:68:03:AE:5E:BA:C4:10:B1:79:D0:5C:E5:40:05:75
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF09662D
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9d3486f5-a27b-3d71-96ca-c77f613e1b9b.roa
Signing time:             Sat 13 Jun 2020 18:55:28 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Wed 13 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Oct 2022 21:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:09:66:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 13 04:00:00 2030 GMT
        Subject: CN=56150fd8-023a-46a9-bafa-6a1971dc7215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:2e:6b:f5:83:ec:7f:13:4e:1b:0a:bb:04:
                    53:7d:6b:5d:1b:4e:5b:d6:73:dd:ec:a2:e2:70:f2:
                    6f:78:1a:1a:06:f1:ea:79:b3:3d:10:66:96:93:cc:
                    be:87:23:6d:f9:1d:d5:da:a6:38:dd:67:09:87:d1:
                    9e:a4:22:4b:91:ee:6a:ac:cc:5a:e2:37:ba:43:13:
                    dc:98:88:f6:a0:18:4b:53:a6:b8:ec:b4:9c:c9:32:
                    24:59:fb:2c:2f:09:5f:59:67:4f:86:72:87:c9:42:
                    3a:67:a5:28:b1:ce:2b:c0:48:f6:0a:c4:5d:ed:3f:
                    e7:8f:ce:02:e0:03:a1:3a:14:45:cd:f1:38:6c:bb:
                    a8:33:47:3e:6c:10:e8:ac:c7:0f:55:f6:67:b3:16:
                    31:4d:ae:09:c9:2a:4b:ca:8e:45:21:a3:37:08:0e:
                    82:a1:74:28:4b:78:93:73:47:56:79:b0:58:dd:2a:
                    3e:82:d8:2e:04:0b:e5:0b:35:b7:65:29:ce:6f:fa:
                    86:aa:a0:f2:b7:26:a2:0e:c1:71:4d:70:2b:7e:f2:
                    ae:eb:5a:d0:71:26:de:a9:3e:f7:cf:7c:2c:9e:a6:
                    d1:a4:25:26:20:af:c7:7d:5c:cf:13:b9:38:8b:8a:
                    e0:20:80:65:1f:99:53:20:08:98:68:7e:d5:26:66:
                    0f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:63:14:94:78:68:03:AE:5E:BA:C4:10:B1:79:D0:5C:E5:40:05:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9d3486f5-a27b-3d71-96ca-c77f613e1b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:f2:ea:f4:62:61:71:3b:4e:19:b2:8b:48:81:44:6e:fb:
         e9:a9:aa:6e:65:ef:2a:ba:89:0a:d5:00:14:31:f1:1a:70:b9:
         4e:e0:d4:dd:ed:62:62:fe:b2:c0:b3:a6:fc:1d:b7:cf:15:d3:
         a6:98:f8:2f:03:cd:e7:6a:4c:c7:36:7a:08:e4:84:8b:a6:ea:
         4e:e2:7a:bd:09:a4:7f:0e:ee:e7:d9:0d:dd:07:d2:1d:96:e1:
         42:83:18:89:3a:e4:ee:47:7d:d6:f2:96:78:0d:89:20:fb:52:
         51:95:6e:f2:bc:a7:ed:e4:19:31:2a:dc:90:42:17:e3:18:44:
         d6:31:5d:9c:1d:0d:5f:27:21:ac:81:11:d3:30:fa:9f:76:85:
         d3:4d:c9:fe:ae:0a:5f:47:10:c9:c8:80:f3:17:de:af:38:bb:
         9b:4b:ab:1a:90:fd:55:0f:d4:a8:41:6e:71:d5:01:be:ff:2d:
         17:3e:8c:8f:91:68:d5:0d:35:a4:a7:36:ae:d6:53:99:61:68:
         51:1c:e6:ec:19:5e:4b:a2:bf:86:82:6b:41:85:8d:ec:f4:93:
         d5:8d:40:50:b3:dd:c2:b7:05:cf:6c:e6:fa:ca:8c:bd:cf:24:
         6a:f2:69:62:fe:7e:04:0d:2d:4b:cb:32:31:06:4a:c3:48:bc:
         1f:46:f8:51
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8JZi0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDAzMTMwNDAwMDBaMC8xLTArBgNVBAMTJDU2
MTUwZmQ4LTAyM2EtNDZhOS1iYWZhLTZhMTk3MWRjNzIxNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALcALmv1g+x/E04bCrsEU31rXRtOW9Zz3eyi4nDy
b3gaGgbx6nmzPRBmlpPMvocjbfkd1dqmON1nCYfRnqQiS5HuaqzMWuI3ukMT3JiI
9qAYS1OmuOy0nMkyJFn7LC8JX1lnT4Zyh8lCOmelKLHOK8BI9grEXe0/54/OAuAD
oToURc3xOGy7qDNHPmwQ6KzHD1X2Z7MWMU2uCckqS8qORSGjNwgOgqF0KEt4k3NH
VnmwWN0qPoLYLgQL5Qs1t2Upzm/6hqqg8rcmog7BcU1wK37yruta0HEm3qk+9898
LJ6m0aQlJiCvx31czxO5OIuK4CCAZR+ZUyAImGh+1SZmD90CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTmYxSUeGgDrl66xBCxedBc5UAFdTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzlkMzQ4NmY1LWEyN2ItM2Q3
MS05NmNhLWM3N2Y2MTNlMWI5Yi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvYDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAeOry6vRiYXE7Thmyi0iBRG776amqbmXvKrqJCtUAFDHxGnC5TuDU3e1iYv6y
wLOm/B23zxXTppj4LwPN52pMxzZ6COSEi6bqTuJ6vQmkfw7u59kN3QfSHZbhQoMY
iTrk7kd91vKWeA2JIPtSUZVu8ryn7eQZMSrckEIX4xhE1jFdnB0NXychrIER0zD6
n3aF003J/q4KX0cQyciA8xferzi7m0urGpD9VQ/UqEFucdUBvv8tFz6Mj5Fo1Q01
pKc2rtZTmWFoURzm7BleS6K/hoJrQYWN7PST1Y1AULPdwrcFz2zm+sqMvc8kavJp
Yv5+BA0tS8syMQZKw0i8H0b4UQ==
-----END CERTIFICATE-----