Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0716b9c6-bad9-3fb7-9129-74bb032a668c.roa
File:                     0716b9c6-bad9-3fb7-9129-74bb032a668c.roa (raw, json)
Hash identifier:          5cF+iPvhpcojAFYiT/yHeYNl6nFx+V7nDfYpuIHLY0s=
Subject key identifier:   D0:E6:59:20:C4:BA:ED:9A:72:21:2B:DB:5B:03:82:80:CB:9E:D3:7B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858401CF258F2E80CCB987011B200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0716b9c6-bad9-3fb7-9129-74bb032a668c.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Fri 07 Mar 2025 05:00:00 +0000
asID:                     20473
IP address blocks:        23.26.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:f2:58:f2:e8:0c:cb:98:70:11:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Mar  7 05:00:00 2025 GMT
        Subject: CN=e3d8ba24-f6e1-4440-9036-a1e7c47e6c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:62:df:58:5d:9b:aa:53:46:a4:88:9b:a6:
                    3b:b2:d9:7e:6b:95:56:27:c9:86:af:8a:bd:4f:c9:
                    f4:2a:1a:94:0d:35:d6:9c:c8:0f:46:ec:b1:fa:93:
                    6e:11:a1:a5:75:dd:35:05:e8:55:82:81:54:8f:63:
                    ce:d7:a6:8c:83:e8:9a:a5:0c:c6:92:89:a7:89:a1:
                    26:4e:02:2c:8b:7e:9e:c4:da:bc:cc:ae:cb:7b:25:
                    f5:61:2c:4d:78:1e:62:0f:e2:6e:c6:6f:9f:71:e7:
                    76:29:4d:f2:5a:a9:e7:9a:86:f6:3d:f1:bd:82:f6:
                    54:7d:1a:37:16:3a:7b:5a:4f:ce:75:cc:ad:65:0f:
                    da:6a:f9:9f:48:10:14:1d:f7:d9:20:d7:c8:b0:8a:
                    f6:fe:f3:21:fa:e8:2d:c7:c2:db:86:c6:ae:43:d4:
                    45:64:d2:1b:5d:1b:97:88:f5:d6:a1:b4:5f:bc:80:
                    6d:64:20:d2:c0:0f:a6:0d:c2:7f:e8:6d:3f:15:72:
                    c1:29:92:11:fe:70:0a:6f:38:cb:bd:ac:aa:34:fb:
                    b2:c5:03:86:50:db:f6:59:4d:ea:41:19:78:1a:40:
                    2d:e4:f4:17:f4:c4:78:be:e0:7c:c1:ed:bd:df:28:
                    41:d5:3e:fe:cf:58:0d:aa:da:87:9f:06:04:71:bb:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:59:20:C4:BA:ED:9A:72:21:2B:DB:5B:03:82:80:CB:9E:D3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0716b9c6-bad9-3fb7-9129-74bb032a668c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:52:b0:7e:77:25:d7:42:98:a1:1c:58:d3:74:39:8d:08:62:
         a7:d4:de:5b:e5:86:a8:ec:b8:de:a8:ab:ac:b3:08:71:bc:73:
         5f:ae:5e:e1:4e:d7:6f:f9:d8:7a:09:00:0e:9a:8f:8a:b4:16:
         4b:95:ba:b8:61:44:5c:05:9d:a0:02:49:a4:09:dc:0c:34:c7:
         85:43:90:31:2b:71:bb:aa:90:07:15:5f:3a:d5:9e:4c:44:93:
         2f:87:cd:0d:a4:f3:42:68:0a:aa:b7:45:8b:60:55:17:17:3c:
         e9:1b:3d:6a:ad:9b:a9:4d:0b:fc:9c:3f:0d:4b:13:f1:97:96:
         a9:3b:94:83:51:8c:94:f9:20:b5:e9:c0:fd:1e:0c:be:5f:72:
         cb:d2:74:15:62:85:98:97:45:ec:a8:2b:6a:3e:fb:8f:19:5c:
         28:b4:19:6c:f0:25:c7:9d:fa:1f:8b:83:b5:e9:3e:21:1b:8c:
         89:6c:37:34:57:ad:69:62:42:1a:cf:86:13:42:de:49:1b:19:
         f4:27:1c:2b:91:ad:9c:3a:39:b2:3d:52:d6:ba:77:de:a3:62:
         59:9c:53:dd:af:23:f1:aa:ec:a6:52:aa:01:d5:4f:c7:96:44:
         31:40:9a:73:67:56:f7:ff:9e:80:19:9b:30:c7:36:f9:3d:59:
         c7:b0:e0:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAc8ljy6AzLmHARsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZTNkOGJhMjQtZjZlMS00NDQwLTkwMzYtYTFlN2M0N2U2YzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Fi31hdm6pTRqSIm6Y7stl+a5VWJ8mGr4q9
T8n0KhqUDTXWnMgPRuyx+pNuEaGldd01BehVgoFUj2PO16aMg+iapQzGkomniaEm
TgIsi36exNq8zK7LeyX1YSxNeB5iD+Juxm+fced2KU3yWqnnmob2PfG9gvZUfRo3
Fjp7Wk/OdcytZQ/aavmfSBAUHffZINfIsIr2/vMh+ugtx8LbhsauQ9RFZNIbXRuX
iPXWobRfvIBtZCDSwA+mDcJ/6G0/FXLBKZIR/nAKbzjLvayqNPuyxQOGUNv2WU3q
QRl4GkAt5PQX9MR4vuB8we293yhB1T7+z1gNqtqHnwYEcbvGfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDmWSDEuu2aciEr21sDgoDLntN7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDcxNmI5YzYtYmFkOS0z
ZmI3LTkxMjktNzRiYjAzMmE2NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRSsH53JddCmKEcWNN0OY0IYqfU3lvlhqjsuN6oq6yzCHG8c1+uXuFO
12/52HoJAA6aj4q0FkuVurhhRFwFnaACSaQJ3Aw0x4VDkDErcbuqkAcVXzrVnkxE
ky+HzQ2k80JoCqq3RYtgVRcXPOkbPWqtm6lNC/ycPw1LE/GXlqk7lINRjJT5ILXp
wP0eDL5fcsvSdBVihZiXReyoK2o++48ZXCi0GWzwJced+h+Lg7XpPiEbjIlsNzRX
rWliQhrPhhNC3kkbGfQnHCuRrZw6ObI9Uta6d96jYlmcU92vI/Gq7KZSqgHVT8eW
RDFAmnNnVvf/noAZmzDHNvk9Wcew4I8=
-----END CERTIFICATE-----