Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/470ce82d-23b0-34af-b19f-f9243ce07a67.roa
File:                     470ce82d-23b0-34af-b19f-f9243ce07a67.roa (raw, json)
Hash identifier:          MQS+2y+jnleIYe1GkGCYj1jYGvCpNVCDX0R9/q5RDMA=
Subject key identifier:   70:44:22:40:6B:16:D5:21:0F:9C:C8:C6:86:04:60:18:82:22:08:14
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583FF14DAD83DC6DB2606DDE4200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/470ce82d-23b0-34af-b19f-f9243ce07a67.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 19 Feb 2025 05:00:00 +0000
asID:                     136787
IP address blocks:        45.38.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 17:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f1:4d:ad:83:dc:6d:b2:60:6d:de:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Feb 19 05:00:00 2025 GMT
        Subject: CN=72220a92-9861-4ddd-9e69-e60fdbbc5642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:4a:41:74:da:56:6a:61:5e:c6:38:ef:2e:
                    27:36:b0:bf:06:1e:94:86:71:8b:ef:e4:26:86:69:
                    de:21:5c:f2:c1:4e:17:ec:85:3c:fe:df:e3:9d:12:
                    9d:df:be:53:c1:40:7f:17:eb:5a:27:1e:0b:c2:01:
                    2d:93:2c:14:e8:da:1d:6b:86:f1:47:ef:da:95:b2:
                    e2:7e:99:33:bf:17:d6:b6:3e:7e:1c:53:6e:94:5f:
                    ef:a5:6b:53:61:68:1c:10:1b:7c:0d:f4:0b:44:71:
                    9f:bd:fd:d5:fb:2b:91:0a:52:a4:ca:67:0c:f1:34:
                    04:79:64:0a:a6:e4:e9:07:da:df:f4:05:89:a9:c7:
                    85:84:36:b9:2c:e3:d1:67:06:4e:06:4e:ab:07:f7:
                    d4:10:3b:3f:f7:f8:f1:01:99:9e:71:47:7a:7a:0d:
                    cc:56:5e:cf:85:e8:31:f5:80:55:67:cf:9b:8d:0a:
                    db:26:f1:9a:b4:28:c9:c1:ed:b4:9a:e4:06:f5:80:
                    b9:73:ea:9c:4f:41:fc:ca:6a:23:26:a0:4d:5f:01:
                    16:5b:90:0d:74:aa:e5:d7:d3:b3:6e:28:a4:ab:c6:
                    0a:1f:f6:22:47:25:02:78:8a:ae:76:ce:3e:ae:d6:
                    7b:29:59:c6:55:f7:bb:06:a3:e5:af:67:f2:ff:9b:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:44:22:40:6B:16:D5:21:0F:9C:C8:C6:86:04:60:18:82:22:08:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/470ce82d-23b0-34af-b19f-f9243ce07a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2a:0f:d1:08:24:81:85:07:ea:ac:45:3c:c2:bd:c9:57:52:
         60:34:ae:3f:f8:03:17:dd:b5:c5:ff:53:33:79:f5:b1:fb:95:
         d7:9c:85:a7:9a:63:6b:b5:c2:e2:fe:6f:c9:6f:42:e3:b0:b3:
         2b:21:6c:6e:51:6a:98:7a:1f:e4:5e:18:50:82:4a:b6:cd:50:
         66:08:d2:af:c5:a0:a5:66:9f:e3:d4:c9:31:a7:51:03:06:a5:
         f6:af:01:d0:9c:fa:ec:8b:4e:40:2f:55:c1:bf:75:05:36:00:
         ca:b9:79:41:75:73:bc:d9:26:3c:69:fa:e7:24:18:eb:c4:3e:
         71:b2:61:4e:6a:7d:af:7d:64:90:d5:3a:3b:26:03:7c:e4:27:
         68:fc:f8:c1:50:48:d4:c8:84:fb:88:0d:3c:4f:77:71:4f:6b:
         fc:03:7c:a5:94:bf:8c:66:b7:c2:4f:e9:76:d5:b3:e4:c6:3d:
         7d:29:30:93:e8:d8:4b:d4:39:d1:92:76:58:32:a6:fc:94:b3:
         b2:d2:51:a7:04:16:75:0d:48:09:14:8f:ae:bf:7b:c0:34:cf:
         6f:40:d2:9f:55:19:49:3f:93:ce:f4:0a:cb:97:3d:4e:1b:46:
         48:8b:0c:03:0d:90:2a:3d:6a:a3:0c:d5:9b:1c:95:d3:43:03:
         66:fe:a2:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/xTa2D3G2yYG3eQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
NzIyMjBhOTItOTg2MS00ZGRkLTllNjktZTYwZmRiYmM1NjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSdKQXTaVmphXsY47y4nNrC/Bh6UhnGL7+Qm
hmneIVzywU4X7IU8/t/jnRKd375TwUB/F+taJx4LwgEtkywU6Noda4bxR+/albLi
fpkzvxfWtj5+HFNulF/vpWtTYWgcEBt8DfQLRHGfvf3V+yuRClKkymcM8TQEeWQK
puTpB9rf9AWJqceFhDa5LOPRZwZOBk6rB/fUEDs/9/jxAZmecUd6eg3MVl7Phegx
9YBVZ8+bjQrbJvGatCjJwe20muQG9YC5c+qcT0H8ymojJqBNXwEWW5ANdKrl19Oz
biikq8YKH/YiRyUCeIquds4+rtZ7KVnGVfe7BqPlr2fy/5uFCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBEIkBrFtUhD5zIxoYEYBiCIggUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDcwY2U4MmQtMjNiMC0z
NGFmLWIxOWYtZjkyNDNjZTA3YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEqD9EIJIGFB+qsRTzCvclXUmA0rj/4AxfdtcX/UzN59bH7ldechaea
Y2u1wuL+b8lvQuOwsyshbG5Raph6H+ReGFCCSrbNUGYI0q/FoKVmn+PUyTGnUQMG
pfavAdCc+uyLTkAvVcG/dQU2AMq5eUF1c7zZJjxp+uckGOvEPnGyYU5qfa99ZJDV
OjsmA3zkJ2j8+MFQSNTIhPuIDTxPd3FPa/wDfKWUv4xmt8JP6XbVs+TGPX0pMJPo
2EvUOdGSdlgypvyUs7LSUacEFnUNSAkUj66/e8A0z29A0p9VGUk/k870CsuXPU4b
RkiLDAMNkCo9aqMM1ZscldNDA2b+ot4=
-----END CERTIFICATE-----