Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ed30be1b-28bb-3645-aa26-2fb758b67b28.roa
File:                     ed30be1b-28bb-3645-aa26-2fb758b67b28.roa (raw, json)
Hash identifier:          EKpiZPdBWKwfl/JT6lXxmKaxKn/KyESvonAynL3B6ug=
Subject key identifier:   E8:A1:19:B3:AE:C6:30:BB:D8:D7:CA:A6:BD:1C:C7:7D:D5:0A:4E:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583D2BBB302798D16457E33F71D0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ed30be1b-28bb-3645-aa26-2fb758b67b28.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Mon 10 Jun 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        166.0.152.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2b:bb:30:27:98:d1:64:57:e3:3f:71:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Jun 10 04:00:00 2024 GMT
        Subject: CN=51e10b8e-c272-4e84-8596-efec98e8a528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:3d:da:70:3e:2a:8e:c0:76:a7:2e:cd:c4:
                    82:ea:1b:87:89:b6:ad:eb:91:4e:af:95:2e:42:10:
                    58:ca:3a:67:3f:a1:9e:97:05:dd:cb:08:6f:56:48:
                    b8:42:cb:2d:5f:5f:6d:de:ac:cb:02:73:c1:68:5d:
                    05:a2:ce:bb:63:8d:cf:aa:fc:d6:4b:07:b0:47:00:
                    dc:57:ee:9c:61:36:04:7b:71:49:7b:6f:8f:61:94:
                    f9:24:72:44:22:e4:f6:a8:ff:d7:a3:71:ab:04:68:
                    36:21:49:32:7d:e7:99:c2:25:74:f5:86:8c:84:33:
                    81:8a:f9:3b:2b:38:e5:53:56:9f:2c:63:cd:04:60:
                    74:05:37:9d:14:4f:2b:81:b1:e6:f4:18:f8:03:79:
                    3d:ab:ab:ba:c9:28:b8:31:37:76:78:7e:63:6a:eb:
                    37:2d:30:e1:c0:57:6b:f6:73:5a:b1:a6:bd:0c:bf:
                    53:62:73:65:3a:33:b6:95:42:b7:7d:0c:d6:cd:3d:
                    c7:f1:03:7d:08:66:4f:14:a9:8e:ea:f3:e5:99:61:
                    e2:14:cb:9b:7a:21:4d:23:82:78:4a:c9:29:76:9a:
                    10:0c:63:25:93:d5:51:38:52:42:a7:88:71:c9:45:
                    73:5a:00:29:57:d8:8e:1d:50:a9:d6:4d:d0:56:e5:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:19:B3:AE:C6:30:BB:D8:D7:CA:A6:BD:1C:C7:7D:D5:0A:4E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ed30be1b-28bb-3645-aa26-2fb758b67b28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:60:cd:df:84:d8:fc:ce:b0:ef:35:55:54:2c:bb:0e:52:cc:
         7e:36:29:c0:1d:13:54:88:d4:6c:be:6a:ef:b3:13:01:f7:06:
         73:27:52:b5:f8:99:33:a0:fc:7c:0d:53:6c:19:f2:07:30:46:
         4f:e9:74:dd:e0:d9:93:28:63:57:9c:66:d1:0b:3c:7e:72:c8:
         52:fd:be:e6:0d:af:e5:cb:83:da:f7:95:28:2d:0b:eb:b6:21:
         3c:ea:30:e3:3d:cd:e4:32:3f:22:d7:bc:c7:e6:38:14:32:bf:
         0a:78:31:99:51:76:45:49:0c:a2:86:ea:0e:db:ba:c7:3c:f0:
         76:7c:9a:56:57:d3:26:6a:3d:f2:80:ee:31:44:3c:41:05:ff:
         50:4d:21:76:b9:2b:c0:f5:17:9f:8f:f5:3d:6f:25:94:56:80:
         e5:41:28:cf:58:ff:51:7f:c6:95:66:f4:ae:c0:55:d9:c3:b4:
         72:6a:49:af:26:71:90:e0:e5:14:3a:16:53:13:2a:f2:e3:9a:
         32:64:25:1e:e9:4c:d6:be:98:f0:84:56:05:f8:1a:d8:c3:4b:
         70:03:83:c4:df:a4:b6:ba:bd:a8:22:84:16:11:f8:2a:a4:dd:
         3c:8c:a4:7f:ef:f1:dc:5e:22:a7:5d:be:71:1a:9b:21:49:99:
         19:59:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----