Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/742516a8-b4b2-306e-a2e6-e24f134b514f.roa
File:                     742516a8-b4b2-306e-a2e6-e24f134b514f.roa (raw, json)
Hash identifier:          +7lE9AtReVEKMev5U6UwPu0eZxiV07uTeQPFC0J/KvA=
Subject key identifier:   DE:8B:26:60:3E:03:03:4A:87:FE:1B:FB:E8:EA:5D:1F:DE:C1:67:0C
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328583904BE3385253952385B5D2D00
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/742516a8-b4b2-306e-a2e6-e24f134b514f.roa
Signing time:             Wed 10 Feb 2021 05:00:00 +0000
ROA not before:           Wed 10 Feb 2021 05:00:00 +0000
ROA not after:            Thu 20 Feb 2025 05:00:00 +0000
asID:                     62513
IP address blocks:        104.167.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:04:be:33:85:25:39:52:38:5b:5d:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Feb 10 05:00:00 2021 GMT
            Not After : Feb 20 05:00:00 2025 GMT
        Subject: CN=e9e2ea9e-5519-4325-a416-bc29554ee950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:04:43:8a:c3:01:e5:af:1d:56:98:9d:cb:
                    97:1f:18:f3:5a:27:ea:03:32:e4:33:68:5e:37:68:
                    ab:00:eb:90:46:0f:9a:78:4b:24:21:44:bf:60:06:
                    3a:f0:73:99:00:b1:7b:9f:5b:8b:b6:a2:b0:7c:48:
                    aa:23:0d:1c:00:28:c7:4d:8e:2b:d9:e1:b3:2f:df:
                    12:53:09:5e:00:14:b6:77:3e:3c:c7:63:75:b2:69:
                    7f:e8:49:fc:3c:eb:d2:93:68:5f:2d:51:14:cf:18:
                    79:ec:6e:f0:66:5b:7f:71:4c:e7:a4:38:ba:2c:f8:
                    6d:ba:ac:8e:18:55:e3:4f:03:91:0f:a4:fa:c5:40:
                    f2:c2:05:de:d6:0b:33:52:60:dc:73:7d:57:2a:40:
                    a3:ca:b5:9b:8a:91:75:59:a3:eb:37:da:20:ff:7b:
                    73:f2:15:39:2f:c9:3d:e8:37:e4:a8:89:71:f2:5f:
                    3a:78:5e:bc:c7:e9:9a:52:10:fd:f5:b9:d1:34:7b:
                    eb:27:fd:bf:28:ed:6d:3c:4e:05:44:87:01:42:0c:
                    e5:c5:30:21:84:a5:44:7b:bc:74:b2:41:de:05:73:
                    25:86:a7:32:36:8b:b2:c1:69:e9:57:b1:5a:e0:56:
                    95:ff:a2:8a:ec:8e:14:1f:b7:28:5d:46:37:68:bc:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8B:26:60:3E:03:03:4A:87:FE:1B:FB:E8:EA:5D:1F:DE:C1:67:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/742516a8-b4b2-306e-a2e6-e24f134b514f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:6e:60:ff:2f:02:74:03:d7:bc:14:54:11:c9:9b:5b:f8:
         21:78:b6:ff:77:11:17:35:b2:68:79:7b:0b:54:2b:a7:78:1e:
         1f:53:68:a9:d4:ab:58:ad:8f:69:ca:01:25:5c:78:92:d4:73:
         24:58:1d:64:ca:e5:1f:d4:99:69:1c:c7:57:35:8d:6e:65:51:
         96:47:e4:d4:cb:3d:b5:f3:83:06:d6:a0:c1:4e:f1:3e:ff:6a:
         17:d7:ec:7e:26:9e:15:83:ba:fc:64:97:29:af:42:50:d7:79:
         75:e1:3f:ca:26:7b:93:13:dd:43:78:95:b4:e4:a0:e2:95:99:
         f4:ef:20:a8:cf:3f:90:52:02:e1:0a:00:61:25:1e:ff:a4:57:
         fd:6a:de:a7:94:b1:ba:85:22:2e:9a:38:ac:25:d9:54:fb:60:
         cf:1f:83:c9:ae:56:cd:58:fa:53:75:9a:a4:25:16:a2:95:74:
         c6:e4:01:ce:41:02:78:5c:2c:f3:41:67:39:34:f0:b1:a0:f1:
         6f:ae:27:fe:2a:80:3b:01:a8:93:ce:85:79:9f:2a:bb:33:35:
         84:32:9d:2d:20:4b:aa:ca:3a:50:98:fc:72:83:d1:b9:0f:e5:
         48:36:cd:3e:d8:64:6a:62:13:8f:0e:8b:d0:1d:5d:67:ac:07:
         d4:a6:bd:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDkEvjOFJTlSOFtdLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTIxMDIxMDA1MDAwMFoXDTI1MDIyMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTllMmVhOWUtNTUxOS00MzI1LWE0MTYtYmMyOTU1NGVlOTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiswEQ4rDAeWvHVaYncuXHxjzWifqAzLkM2he
N2irAOuQRg+aeEskIUS/YAY68HOZALF7n1uLtqKwfEiqIw0cACjHTY4r2eGzL98S
UwleABS2dz48x2N1sml/6En8POvSk2hfLVEUzxh57G7wZlt/cUznpDi6LPhtuqyO
GFXjTwORD6T6xUDywgXe1gszUmDcc31XKkCjyrWbipF1WaPrN9og/3tz8hU5L8k9
6DfkqIlx8l86eF68x+maUhD99bnRNHvrJ/2/KO1tPE4FRIcBQgzlxTAhhKVEe7x0
skHeBXMlhqcyNouywWnpV7Fa4FaV/6KK7I4UH7coXUY3aLzC4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6LJmA+AwNKh/4b++jqXR/ewWcMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNzQyNTE2YTgtYjRiMi0z
MDZlLWEyZTYtZTI0ZjEzNGI1MTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA83bmD/LwJ0A9e8FFQRyZtb+CF4tv93ERc1smh5ewtUK6d4Hh9TaKnU
q1itj2nKASVceJLUcyRYHWTK5R/UmWkcx1c1jW5lUZZH5NTLPbXzgwbWoMFO8T7/
ahfX7H4mnhWDuvxklymvQlDXeXXhP8ome5MT3UN4lbTkoOKVmfTvIKjPP5BSAuEK
AGElHv+kV/1q3qeUsbqFIi6aOKwl2VT7YM8fg8muVs1Y+lN1mqQlFqKVdMbkAc5B
AnhcLPNBZzk08LGg8W+uJ/4qgDsBqJPOhXmfKrszNYQynS0gS6rKOlCY/HKD0bkP
5Ug2zT7YZGpiE48Oi9AdXWesB9SmvbQ=
-----END CERTIFICATE-----