Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49dad12d-e974-3882-a8bd-6387cc681fc8.roa
File:                     49dad12d-e974-3882-a8bd-6387cc681fc8.roa (raw, json)
Hash identifier:          e5okRcLQJCepYQSN+q1ESCvAeHCggOIX4pORLUr8yRU=
Subject key identifier:   D5:77:6D:BB:98:B3:13:F9:0C:03:7E:F7:A0:BF:A0:DC:D0:EA:AF:D8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762288AD9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49dad12d-e974-3882-a8bd-6387cc681fc8.roa
Signing time:             Fri 30 Nov 2018 01:08:03 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.17.112.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Tue 10 Dec 2024 03:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:8a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=000641cd-7b1d-4959-b8f9-8ed2cfa8eaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:ca:35:a1:cb:bb:a4:3e:9c:4c:f5:be:9a:
                    9a:46:e2:46:70:d4:0f:e4:58:64:91:81:da:90:19:
                    9b:99:83:6b:d6:df:f4:21:22:3f:49:15:e0:42:89:
                    77:9b:65:23:23:d9:96:7a:96:2d:0d:66:24:e2:1a:
                    cc:a9:e1:3b:5e:0a:aa:1c:dc:6f:d2:1e:6a:76:1a:
                    04:d5:8b:58:d8:4d:d7:09:34:ab:15:c3:ce:61:29:
                    5c:cb:19:c2:ae:6d:f1:e5:44:5c:80:de:2d:e7:e9:
                    fb:7a:d3:f2:56:3c:88:d7:d1:46:dd:07:66:34:40:
                    48:93:3e:7d:44:64:0f:b8:c0:93:83:36:62:10:f8:
                    2e:f4:ee:18:d5:74:8a:9a:af:ff:90:a5:c4:cf:38:
                    d5:0e:07:61:c4:50:b9:02:19:8b:dc:42:63:33:36:
                    a8:65:ca:f2:e5:87:7c:86:0d:71:00:1f:95:04:b9:
                    bd:28:a3:79:e1:21:97:fb:6a:89:5f:68:44:83:0f:
                    49:ef:98:b2:c4:8f:81:48:2c:ec:14:b0:d4:2d:39:
                    09:47:7e:25:f0:9c:2f:b0:09:bd:7e:db:b8:6d:40:
                    b0:76:31:b9:51:29:54:39:9b:cb:4b:67:49:75:88:
                    6b:f9:0d:09:2d:79:05:77:96:cd:70:18:e3:ee:f5:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:6D:BB:98:B3:13:F9:0C:03:7E:F7:A0:BF:A0:DC:D0:EA:AF:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49dad12d-e974-3882-a8bd-6387cc681fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:8d:ad:d4:37:1b:13:a7:a9:ba:3c:38:d1:81:01:ee:79:
         89:0d:d5:c4:1d:d6:59:02:10:ca:91:ee:12:31:a0:70:57:3e:
         94:11:4c:09:ec:58:75:55:2c:7e:99:d5:96:73:cb:5d:03:a3:
         1d:e5:aa:74:df:74:73:ce:59:b8:75:ff:59:15:8f:25:5b:a9:
         92:26:03:a1:78:8a:c1:55:c8:dc:b3:1f:61:0c:14:82:b2:92:
         67:f1:3c:c8:f8:5e:4b:be:be:f2:f7:9f:63:2a:43:4d:97:25:
         84:ca:d0:f7:f0:3d:37:87:32:60:d8:fc:f0:bb:33:d3:ad:77:
         f7:2b:f8:92:fa:a6:10:15:66:55:8e:ec:23:a0:94:b0:ca:b1:
         87:43:05:20:fd:5c:0d:70:b0:95:bd:f5:43:7a:4d:6a:d6:b2:
         03:bc:af:9a:df:16:a5:ad:c2:cb:40:e5:5f:17:67:bb:61:51:
         ea:46:3f:b9:f6:da:6f:24:59:02:36:df:32:45:7c:3d:13:5c:
         29:23:62:5f:79:eb:4d:64:08:13:42:40:49:c8:28:9c:60:6d:
         98:50:e9:c0:fa:fe:0c:58:88:7f:06:6d:dd:12:06:8a:04:f0:
         0b:c0:8f:bc:1e:c2:c2:34:3a:2d:b3:aa:f1:9d:3f:0e:e3:b4:
         cf:5a:52:d6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IoitkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDAw
MDY0MWNkLTdiMWQtNDk1OS1iOGY5LThlZDJjZmE4ZWFhZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ0uyjWhy7ukPpxM9b6amkbiRnDUD+RYZJGB2pAZ
m5mDa9bf9CEiP0kV4EKJd5tlIyPZlnqWLQ1mJOIazKnhO14Kqhzcb9IeanYaBNWL
WNhN1wk0qxXDzmEpXMsZwq5t8eVEXIDeLefp+3rT8lY8iNfRRt0HZjRASJM+fURk
D7jAk4M2YhD4LvTuGNV0ipqv/5ClxM841Q4HYcRQuQIZi9xCYzM2qGXK8uWHfIYN
cQAflQS5vSijeeEhl/tqiV9oRIMPSe+YssSPgUgs7BSw1C05CUd+JfCcL7AJvX7b
uG1AsHYxuVEpVDmby0tnSXWIa/kNCS15BXeWzXAY4+71+QsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTVd227mLMT+QwDfvegv6Dc0Oqv2DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzQ5ZGFkMTJkLWU5NzQtMzg4
Mi1hOGJkLTYzODdjYzY4MWZjOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgRcDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAJpqNrdQ3GxOnqbo8ONGBAe55iQ3VxB3WWQIQypHuEjGgcFc+lBFMCexYdVUs
fpnVlnPLXQOjHeWqdN90c85ZuHX/WRWPJVupkiYDoXiKwVXI3LMfYQwUgrKSZ/E8
yPheS76+8vefYypDTZclhMrQ9/A9N4cyYNj88Lsz06139yv4kvqmEBVmVY7sI6CU
sMqxh0MFIP1cDXCwlb31Q3pNatayA7yvmt8Wpa3Cy0DlXxdnu2FR6kY/ufbabyRZ
AjbfMkV8PRNcKSNiX3nrTWQIE0JAScgonGBtmFDpwPr+DFiIfwZt3RIGigTwC8CP
vB7CwjQ6LbOq8Z0/DuO0z1pS1g==
-----END CERTIFICATE-----