Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/879899e5-2795-37ef-aaf7-18173ce99475.roa
File:                     879899e5-2795-37ef-aaf7-18173ce99475.roa (raw, json)
Hash identifier:          qUPnlphE7NWtddAVry2P2c8MC+Keg5ZcPWhZRKzXst0=
Subject key identifier:   82:29:F8:9E:08:E1:85:0D:EA:E3:98:96:24:D4:78:EE:B7:C7:9A:4E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584115E6BA4FD7A5AB95E44A8DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/879899e5-2795-37ef-aaf7-18173ce99475.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 04 Jun 2025 04:00:00 +0000
asID:                     138968
IP address blocks:        107.164.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:15:e6:ba:4f:d7:a5:ab:95:e4:4a:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  4 04:00:00 2025 GMT
        Subject: CN=89a15ac5-33ea-4e82-8e98-83adb02d18ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:a0:3d:bf:73:98:31:5d:16:ae:12:82:1c:
                    90:60:86:95:08:15:de:34:f1:76:c5:3e:da:1b:ff:
                    1d:8b:42:97:41:74:98:0d:12:b4:d4:93:4a:9f:29:
                    ae:05:c4:2f:ea:0b:9a:b5:a5:03:cf:ab:ef:e8:19:
                    87:59:9b:53:1d:95:21:e7:60:f8:19:a5:64:19:54:
                    8c:0c:e1:7a:9e:01:81:ee:5a:8e:89:81:4d:42:3d:
                    8b:45:49:e9:98:64:66:d8:52:b5:a1:a6:58:37:01:
                    5d:2c:40:e6:d8:50:62:34:7f:0e:9c:86:ce:a8:2b:
                    bf:bf:5e:9e:a9:1f:20:c5:44:ec:5e:12:a8:7d:81:
                    06:95:02:d1:ef:19:e5:c5:04:46:03:36:3c:7d:5e:
                    bd:51:c7:96:b4:2c:1b:d9:85:d2:57:70:6a:c8:4f:
                    a4:18:54:22:2c:16:8f:c9:f6:78:eb:7a:1b:c6:eb:
                    36:81:8e:c0:dc:1b:e4:1b:f4:ca:61:48:ae:73:a6:
                    df:ab:60:12:41:ca:6f:3f:52:b5:97:ab:96:6b:4d:
                    19:01:83:ae:5b:f8:ac:56:24:b2:11:ba:0b:2d:5e:
                    03:1a:e4:d0:ef:51:81:49:48:b2:33:5d:b3:d9:d3:
                    cf:ed:f3:66:67:56:1d:6c:34:d5:2b:58:b1:fd:36:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:29:F8:9E:08:E1:85:0D:EA:E3:98:96:24:D4:78:EE:B7:C7:9A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/879899e5-2795-37ef-aaf7-18173ce99475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6c:69:d7:f9:aa:61:42:24:17:c3:45:71:c3:16:e9:d2:56:
         83:b6:84:c4:fb:23:6f:d4:34:d5:4e:88:ff:b5:84:65:45:af:
         86:8b:c4:7d:01:22:e1:a6:21:59:02:bd:a5:c6:11:ca:ef:40:
         4a:c0:50:97:95:c1:d2:c2:64:c4:7a:21:bd:ae:4f:66:54:85:
         08:9c:d6:e9:c4:e4:1a:07:72:fb:c1:fd:77:d8:d9:b0:d9:5d:
         fd:c5:84:4f:a3:93:3d:46:4e:92:41:0b:94:da:54:9d:2e:ed:
         af:8a:0c:b8:16:0f:26:01:9f:e0:ef:3e:81:fe:46:2a:4a:33:
         4a:fb:bb:9c:d7:26:72:88:e8:a4:38:38:d3:cd:fd:4d:d5:ff:
         52:de:6c:37:30:62:79:51:ec:0a:e4:46:39:0c:ec:71:ea:42:
         49:f1:0e:fd:16:ad:0c:3b:e3:3c:8c:a7:59:a2:fe:5b:64:2e:
         93:4a:28:ec:96:b9:e3:a8:1f:58:13:c7:eb:e8:ec:9d:ac:ca:
         05:bf:a9:6d:c6:c4:27:57:ae:7e:63:98:c0:af:78:20:7d:b3:
         b2:f1:33:1f:39:91:b7:16:55:2c:ae:bd:ab:8c:ee:b6:51:5f:
         b6:84:5c:af:2f:f4:e5:06:bb:80:de:6f:dd:e6:32:46:bc:25:
         9d:82:5a:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEV5rpP16WrleRKjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDYwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ODlhMTVhYzUtMzNlYS00ZTgyLThlOTgtODNhZGIwMmQxOGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloKgPb9zmDFdFq4SghyQYIaVCBXeNPF2xT7a
G/8di0KXQXSYDRK01JNKnymuBcQv6guataUDz6vv6BmHWZtTHZUh52D4GaVkGVSM
DOF6ngGB7lqOiYFNQj2LRUnpmGRm2FK1oaZYNwFdLEDm2FBiNH8OnIbOqCu/v16e
qR8gxUTsXhKofYEGlQLR7xnlxQRGAzY8fV69UceWtCwb2YXSV3BqyE+kGFQiLBaP
yfZ463obxus2gY7A3BvkG/TKYUiuc6bfq2ASQcpvP1K1l6uWa00ZAYOuW/isViSy
EboLLV4DGuTQ71GBSUiyM12z2dPP7fNmZ1YdbDTVK1ix/Ta/8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIp+J4I4YUN6uOYliTUeO63x5pOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODc5ODk5ZTUtMjc5NS0z
N2VmLWFhZjctMTgxNzNjZTk5NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6S7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9sadf5qmFCJBfDRXHDFunSVoO2hMT7I2/UNNVOiP+1hGVFr4aLxH0B
IuGmIVkCvaXGEcrvQErAUJeVwdLCZMR6Ib2uT2ZUhQic1unE5BoHcvvB/XfY2bDZ
Xf3FhE+jkz1GTpJBC5TaVJ0u7a+KDLgWDyYBn+DvPoH+RipKM0r7u5zXJnKI6KQ4
ONPN/U3V/1LebDcwYnlR7ArkRjkM7HHqQknxDv0WrQw74zyMp1mi/ltkLpNKKOyW
ueOoH1gTx+vo7J2sygW/qW3GxCdXrn5jmMCveCB9s7LxMx85kbcWVSyuvauM7rZR
X7aEXK8v9OUGu4Deb93mMka8JZ2CWuo=
-----END CERTIFICATE-----