Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/3e1d4cfa-e7da-34b7-b39a-a6f9540ce899.roa
File:                     3e1d4cfa-e7da-34b7-b39a-a6f9540ce899.roa (raw, json)
Hash identifier:          VoTC3PiOxbgYli6kupXELMwY1e+A1BWxNV66ypL+jFA=
Subject key identifier:   1F:13:D4:5E:DA:15:31:59:EC:C7:EE:D1:2D:4B:09:DA:BF:14:CA:94
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F43285839E594A41B50F9615B4FEAB780
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/3e1d4cfa-e7da-34b7-b39a-a6f9540ce899.roa
Signing time:             Sat 01 May 2021 04:00:00 +0000
ROA not before:           Sat 01 May 2021 04:00:00 +0000
ROA not after:            Fri 12 Oct 2029 04:00:00 +0000
asID:                     36492
IP address blocks:        135.129.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:e5:94:a4:1b:50:f9:61:5b:4f:ea:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: May  1 04:00:00 2021 GMT
            Not After : Oct 12 04:00:00 2029 GMT
        Subject: CN=e39291b5-f12a-4a4f-9515-a159d3cfa63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:d6:ca:9a:a5:05:9e:1c:a1:3b:9a:60:15:
                    99:b8:b1:e8:8a:66:1e:b5:3c:de:6c:49:d6:29:02:
                    a3:45:d1:7a:8a:0c:87:57:01:7d:a2:5e:2b:e6:2f:
                    3a:81:b3:1b:97:67:86:3e:32:93:03:c4:c7:55:22:
                    8e:7e:ed:16:78:ed:28:a2:13:b0:67:c8:ad:18:79:
                    4d:a2:75:36:ba:ba:82:4e:ea:23:52:bd:0e:55:fc:
                    f6:d6:01:06:a2:c1:32:b1:4e:9d:38:f0:ca:e7:27:
                    9d:54:a1:34:39:69:8d:85:d6:7a:9d:6a:cf:20:d0:
                    c6:81:89:3e:5e:e5:e2:39:96:87:47:20:5b:90:4b:
                    8e:ac:0b:2d:13:18:dc:53:a1:fe:02:21:a2:df:75:
                    39:e4:4a:f1:13:9a:fe:b6:ae:f0:48:3b:eb:9b:43:
                    1c:31:1a:7d:e0:e9:ee:c0:da:b5:5e:97:99:3f:85:
                    44:7d:80:1d:62:29:6d:ce:8d:cb:3d:c9:ff:c1:1b:
                    e1:64:f7:c0:86:a8:c7:56:d7:38:7d:df:58:a9:85:
                    f4:8c:38:0d:93:f0:d3:e0:27:e9:a4:92:8a:44:09:
                    76:41:61:08:f4:6d:a8:4a:de:82:32:96:b4:c5:e5:
                    14:0e:50:a5:1b:b9:5d:87:a1:fc:07:3d:7e:04:18:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:13:D4:5E:DA:15:31:59:EC:C7:EE:D1:2D:4B:09:DA:BF:14:CA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/3e1d4cfa-e7da-34b7-b39a-a6f9540ce899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:97:20:ae:be:ea:72:d1:a2:aa:e0:66:85:62:17:77:05:
         58:3c:65:0b:d7:4a:76:99:52:f9:73:62:3f:49:b7:53:68:86:
         e2:5c:89:49:06:55:91:44:39:4b:06:2a:4a:7c:b5:32:b5:87:
         34:2c:6d:88:6c:5f:f2:78:c9:f0:cb:1c:f7:c0:e9:dc:34:5e:
         2f:c9:07:0b:58:f3:33:00:2b:9d:9e:51:a6:cb:a0:bd:ad:45:
         72:7a:b7:94:9b:5e:2c:ec:16:3a:87:8b:5a:0f:bf:b7:9e:76:
         47:b6:0c:0c:20:d0:ba:9b:1f:68:bf:0c:50:e5:2c:62:2f:5e:
         14:96:bc:d1:6d:64:de:7a:70:2b:78:4e:0a:b8:43:85:d3:1b:
         92:d6:25:fd:19:fa:5d:e8:1b:e1:e4:ec:94:20:00:76:3e:d9:
         fb:50:5b:86:23:62:59:1e:6e:24:e4:e3:26:a5:34:07:0a:8c:
         00:a8:7d:a0:1d:8e:c3:6c:8e:33:7a:2a:96:ef:da:e5:7a:df:
         81:15:e1:1b:1c:bf:b5:00:91:6b:09:e3:22:e0:5e:6c:3a:94:
         f6:73:60:34:92:87:ff:0a:2f:d5:ae:e5:60:b7:37:d7:fd:b2:
         a1:2a:9c:da:fc:ea:e3:11:39:ce:df:82:85:e8:b1:fc:26:2b:
         86:77:ac:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDnllKQbUPlhW0/qt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi
NTc3MB4XDTIxMDUwMTA0MDAwMFoXDTI5MTAxMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTM5MjkxYjUtZjEyYS00YTRmLTk1MTUtYTE1OWQzY2ZhNjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0PWypqlBZ4coTuaYBWZuLHoimYetTzebEnW
KQKjRdF6igyHVwF9ol4r5i86gbMbl2eGPjKTA8THVSKOfu0WeO0oohOwZ8itGHlN
onU2urqCTuojUr0OVfz21gEGosEysU6dOPDK5yedVKE0OWmNhdZ6nWrPINDGgYk+
XuXiOZaHRyBbkEuOrAstExjcU6H+AiGi33U55ErxE5r+tq7wSDvrm0McMRp94Onu
wNq1XpeZP4VEfYAdYiltzo3LPcn/wRvhZPfAhqjHVtc4fd9YqYX0jDgNk/DT4Cfp
pJKKRAl2QWEI9G2oSt6CMpa0xeUUDlClG7ldh6H8Bz1+BBijwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8T1F7aFTFZ7Mfu0S1LCdq/FMqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2
OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvM2UxZDRjZmEtZTdkYS0z
NGI3LWIzOWEtYTZmOTU0MGNlODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5
ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3
YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw
MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCh4FwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByWlyCuvupy0aKq4GaFYhd3BVg8ZQvXSnaZUvlzYj9Jt1NohuJciUkG
VZFEOUsGKkp8tTK1hzQsbYhsX/J4yfDLHPfA6dw0Xi/JBwtY8zMAK52eUabLoL2t
RXJ6t5SbXizsFjqHi1oPv7eedke2DAwg0LqbH2i/DFDlLGIvXhSWvNFtZN56cCt4
Tgq4Q4XTG5LWJf0Z+l3oG+Hk7JQgAHY+2ftQW4YjYlkebiTk4yalNAcKjACofaAd
jsNsjjN6Kpbv2uV634EV4Rscv7UAkWsJ4yLgXmw6lPZzYDSSh/8KL9Wu5WC3N9f9
sqEqnNr86uMROc7fgoXosfwmK4Z3rHQ=
-----END CERTIFICATE-----