Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/036de4f4-d1b1-3d28-aa8a-65c90482877e.roa
File:                     036de4f4-d1b1-3d28-aa8a-65c90482877e.roa (raw, json)
Hash identifier:          rUACIVshzxUwnHYBxyFkDSPq9+2S/gGGDBOngT34CLQ=
Subject key identifier:   B8:02:78:E4:4C:82:57:F6:1E:EF:AF:4E:D4:63:12:DB:B2:C8:E4:C3
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F4328583FB6DD4044672C8C27ABD59000
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/036de4f4-d1b1-3d28-aa8a-65c90482877e.roa
Signing time:             Fri 03 Jun 2022 13:44:19 +0000
ROA not before:           Fri 03 Jun 2022 13:44:19 +0000
ROA not after:            Sat 28 Oct 2023 04:00:00 +0000
asID:                     211585
IP address blocks:        206.251.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b6:dd:40:44:67:2c:8c:27:ab:d5:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Jun  3 13:44:19 2022 GMT
            Not After : Oct 28 04:00:00 2023 GMT
        Subject: CN=af060760-b88a-44b8-a44e-66485b1d2790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:fe:4c:66:cd:37:b0:62:16:1c:21:4b:1a:
                    e5:29:e6:06:4d:0c:32:2f:99:68:7e:d7:7d:90:27:
                    7a:68:0d:12:9d:f1:c0:1d:85:55:8c:50:e4:a2:e5:
                    94:a0:e4:66:9e:31:09:9a:19:41:eb:b6:6f:37:60:
                    7b:79:f7:13:52:cd:af:15:ec:e9:61:8e:9f:70:ee:
                    23:5b:c6:62:43:73:c2:c8:a8:42:6a:f9:b0:f2:11:
                    a8:c8:f2:c7:46:50:29:8e:99:71:5d:24:8d:32:15:
                    6f:87:3e:21:41:61:fa:c3:47:5f:c8:ed:78:6c:68:
                    c4:ae:9c:4c:51:8b:65:32:af:98:44:fc:a3:37:9f:
                    17:9b:c8:25:ac:a3:31:e6:4d:4b:43:a7:8e:96:61:
                    33:97:0c:f1:7b:d9:21:9d:96:a1:3c:ce:94:90:23:
                    b6:45:0f:ce:96:0c:f2:c1:c1:8f:e1:29:f6:46:7a:
                    ac:d1:91:28:94:ad:6f:51:14:ad:8e:76:6d:a8:db:
                    88:7c:61:37:aa:39:24:d0:4d:ae:9a:97:a7:a5:dd:
                    e7:be:62:d5:bf:81:59:26:85:fb:1c:46:18:ae:4d:
                    f3:52:aa:d2:85:7d:92:55:ad:00:f6:82:7f:79:ff:
                    da:85:24:92:41:1e:57:bf:4e:dd:8e:86:54:b8:3c:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:78:E4:4C:82:57:F6:1E:EF:AF:4E:D4:63:12:DB:B2:C8:E4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/036de4f4-d1b1-3d28-aa8a-65c90482877e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9c:43:50:7e:95:58:4f:8b:61:d3:19:d2:00:2f:f3:cf:83:
         7f:cc:cb:1d:3f:96:b8:cf:be:99:30:ae:36:1c:f6:85:f0:be:
         58:c8:55:02:07:f1:a5:dc:bb:0f:00:2c:d0:dd:a8:c4:85:76:
         28:c8:a6:b8:66:5e:ec:26:f1:e7:be:21:c2:cd:8d:c3:27:5f:
         d9:11:c6:ef:cf:24:1b:ed:57:96:47:fa:5f:86:ce:b9:76:74:
         ce:d9:ce:cd:6a:42:20:19:61:93:b3:0d:86:31:f5:b7:fb:e6:
         e4:b6:59:40:93:50:62:60:0f:f3:d5:6c:1e:84:f6:e8:75:d0:
         48:b0:a8:11:c2:c6:81:42:04:cc:bb:3b:ba:1e:cd:06:ad:2d:
         d1:7f:4f:87:3e:16:12:92:78:0c:c3:06:db:ed:1b:5c:1f:2a:
         4b:2e:8c:56:7f:42:e5:8c:ed:13:84:f0:f9:fa:c7:26:73:e7:
         a6:1a:f7:d9:bf:00:4d:4e:7e:20:e5:e9:6b:8d:2a:38:40:14:
         29:f6:cf:f7:04:3c:da:51:b7:09:1f:d9:db:3d:21:c7:cf:12:
         d3:1e:db:57:46:bb:1b:dd:7d:b1:a9:d1:e7:0a:98:f5:e3:ba:
         58:b4:91:ac:3e:02:1e:13:bc:d0:70:2f:f9:63:3a:60:7a:67:
         d8:a4:4e:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+23UBEZyyMJ6vVkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM4YTFkZGUtYjdmYi00YmZjLTlmM2MtY2Q4NDAwM2Iw
Mjc5MB4XDTIyMDYwMzEzNDQxOVoXDTIzMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
YWYwNjA3NjAtYjg4YS00NGI4LWE0NGUtNjY0ODViMWQyNzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJH+TGbNN7BiFhwhSxrlKeYGTQwyL5loftd9
kCd6aA0SnfHAHYVVjFDkouWUoORmnjEJmhlB67ZvN2B7efcTUs2vFezpYY6fcO4j
W8ZiQ3PCyKhCavmw8hGoyPLHRlApjplxXSSNMhVvhz4hQWH6w0dfyO14bGjErpxM
UYtlMq+YRPyjN58Xm8glrKMx5k1LQ6eOlmEzlwzxe9khnZahPM6UkCO2RQ/Olgzy
wcGP4Sn2Rnqs0ZEolK1vURStjnZtqNuIfGE3qjkk0E2umpenpd3nvmLVv4FZJoX7
HEYYrk3zUqrShX2SVa0A9oJ/ef/ahSSSQR5Xv07djoZUuDxZqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgCeORMglf2Hu+vTtRjEtuyyOTDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhh
MWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0MDAzYjAyNzkvMDM2ZGU0ZjQtZDFiMS0z
ZDI4LWFhOGEtNjVjOTA0ODI4NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTM4YTFkZGUtYjdmYi00YmZjLTlm
M2MtY2Q4NDAwM2IwMjc5L2EzOGExZGRlLWI3ZmItNGJmYy05ZjNjLWNkODQwMDNi
MDI3OS5jcmwwHwYDVR0jBBgwFoAUDfE36maClMPXvqaAW70dht0U4YMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhhMWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0
MDAzYjAyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzvsUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOcQ1B+lVhPi2HTGdIAL/PPg3/Myx0/lrjPvpkwrjYc9oXwvljIVQIH
8aXcuw8ALNDdqMSFdijIprhmXuwm8ee+IcLNjcMnX9kRxu/PJBvtV5ZH+l+Gzrl2
dM7Zzs1qQiAZYZOzDYYx9bf75uS2WUCTUGJgD/PVbB6E9uh10EiwqBHCxoFCBMy7
O7oezQatLdF/T4c+FhKSeAzDBtvtG1wfKksujFZ/QuWM7ROE8Pn6xyZz56Ya99m/
AE1OfiDl6WuNKjhAFCn2z/cEPNpRtwkf2ds9IcfPEtMe21dGuxvdfbGp0ecKmPXj
uli0kaw+Ah4TvNBwL/ljOmB6Z9ikThM=
-----END CERTIFICATE-----