Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d28a2f93-118c-313d-afee-83914236696e.roa
File:                     d28a2f93-118c-313d-afee-83914236696e.roa (raw, json)
Hash identifier:          fV2u5x3DcmsnzAzMLcAi7qbEo33j1tJQGTkkbZGbwDM=
Subject key identifier:   97:00:DA:FE:81:26:6F:AF:BF:07:26:6D:03:13:7B:3F:77:7B:C6:C7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DCF8353A4
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d28a2f93-118c-313d-afee-83914236696e.roa
Signing time:             Tue 15 Oct 2019 13:02:33 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     20940
IP address blocks:        192.204.11.0/24 maxlen: 24
                          192.204.82.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:cf:83:53:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=60b51dd2-f9b7-4f4c-a978-dcec3f98b295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:36:d5:01:38:85:35:32:85:76:0a:dc:ba:
                    82:63:ca:c8:ee:c9:06:9a:4b:0f:71:a5:74:1e:09:
                    bc:99:56:f6:c2:ea:0a:7d:80:b7:35:dc:5e:80:65:
                    ac:6c:d4:b1:ef:28:b6:42:b5:20:32:15:d5:10:08:
                    f5:b8:63:e4:c6:e1:ac:20:32:a5:1f:b0:bf:39:8e:
                    1a:83:a7:d4:38:55:78:b5:64:88:08:0b:f4:45:43:
                    a8:9f:b9:bc:65:56:af:81:a8:17:10:d9:1b:6a:de:
                    84:23:e7:17:71:39:55:45:a3:67:dd:f8:7e:b4:e5:
                    aa:c3:32:f0:54:a7:89:ce:2b:68:a6:05:65:43:9d:
                    55:47:15:1f:1c:6d:ad:9d:7d:ca:0f:27:70:8b:07:
                    d2:c7:c1:07:b3:1e:8a:09:bc:66:61:fc:4c:e0:15:
                    38:68:d6:e5:17:24:19:19:4e:c0:6e:39:41:75:b3:
                    19:eb:ca:57:03:14:24:e4:7f:8c:76:6e:a1:5e:4f:
                    7b:6c:82:4e:79:45:e4:68:93:45:46:d8:fb:e4:e3:
                    eb:92:c0:37:82:1d:e4:12:e9:a8:44:c3:5b:1c:64:
                    28:14:3c:48:20:f2:03:9b:cd:92:7c:ac:03:f4:c3:
                    a4:85:db:11:8b:fd:ff:da:41:88:f6:46:7a:2a:a3:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:00:DA:FE:81:26:6F:AF:BF:07:26:6D:03:13:7B:3F:77:7B:C6:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d28a2f93-118c-313d-afee-83914236696e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.204.11.0/24
                  192.204.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:11:31:33:3c:ea:64:83:20:cd:91:36:a9:41:bb:29:90:ca:
         28:db:5f:f2:79:98:7f:bc:62:ae:b1:a1:5e:51:a9:24:94:dc:
         10:c6:10:ec:74:48:4e:00:09:df:6d:53:c4:82:38:67:6c:f0:
         4a:5c:8d:f9:71:8b:fc:55:50:a4:52:19:61:24:37:41:5c:d0:
         f3:84:82:13:5c:25:b7:39:dc:a3:aa:58:3e:ee:2f:13:b4:c2:
         37:37:a9:b9:62:1b:26:34:7b:37:01:1c:cf:db:ba:5d:f7:cb:
         75:d2:bc:0e:c4:f6:19:96:03:d6:1d:2b:c1:f8:d7:74:aa:d7:
         71:b0:7f:96:02:97:dc:a0:dd:14:a1:9a:97:2b:32:4a:12:21:
         b3:9e:ff:4f:0d:d9:aa:b6:8a:cc:cd:51:94:19:fc:8b:62:65:
         75:62:53:03:d5:fd:8a:e6:a3:c4:45:6b:09:96:b6:7d:7c:3f:
         05:73:39:28:96:6d:61:2c:d3:11:81:6a:df:31:96:95:cc:31:
         a1:8f:89:92:e2:1e:ba:7d:99:e2:55:6a:27:18:73:d4:a8:b1:
         f4:09:b7:d2:67:d5:a5:81:64:b0:52:94:22:db:b2:36:b8:9a:
         64:b6:8d:78:a8:ac:bd:8f:93:46:f1:4c:c4:e2:1d:96:de:57:
         e4:d0:94:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbc+DU6QwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDYw
YjUxZGQyLWY5YjctNGY0Yy1hOTc4LWRjZWMzZjk4YjI5NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALqnNtUBOIU1MoV2Cty6gmPKyO7JBppLD3GldB4J
vJlW9sLqCn2AtzXcXoBlrGzUse8otkK1IDIV1RAI9bhj5MbhrCAypR+wvzmOGoOn
1DhVeLVkiAgL9EVDqJ+5vGVWr4GoFxDZG2rehCPnF3E5VUWjZ934frTlqsMy8FSn
ic4raKYFZUOdVUcVHxxtrZ19yg8ncIsH0sfBB7Meigm8ZmH8TOAVOGjW5RckGRlO
wG45QXWzGevKVwMUJOR/jHZuoV5Pe2yCTnlF5GiTRUbY++Tj65LAN4Id5BLpqETD
WxxkKBQ8SCDyA5vNknysA/TDpIXbEYv9/9pBiPZGeiqjQq0CAwEAAaOCA1swggNX
MB0GA1UdDgQWBBSXANr+gSZvr78HJm0DE3s/d3vGxzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2QyOGEyZjkzLTExOGMtMzEz
ZC1hZmVlLTgzOTE0MjM2Njk2ZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMDMCwMEAcDM
UjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3
DQEBCwOCAQEAARExMzzqZIMgzZE2qUG7KZDKKNtf8nmYf7xirrGhXlGpJJTcEMYQ
7HRITgAJ321TxII4Z2zwSlyN+XGL/FVQpFIZYSQ3QVzQ84SCE1wltznco6pYPu4v
E7TCNzepuWIbJjR7NwEcz9u6XffLddK8DsT2GZYD1h0rwfjXdKrXcbB/lgKX3KDd
FKGalysyShIhs57/Tw3ZqraKzM1RlBn8i2JldWJTA9X9iuajxEVrCZa2fXw/BXM5
KJZtYSzTEYFq3zGWlcwxoY+JkuIeun2Z4lVqJxhz1Kix9Am30mfVpYFksFKUItuy
NriaZLaNeKisvY+TRvFMxOIdlt5X5NCUwA==
-----END CERTIFICATE-----