Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0e42dbe-8fd8-30b5-ae7b-5cee099046e8.roa
File:                     b0e42dbe-8fd8-30b5-ae7b-5cee099046e8.roa (raw, json)
Hash identifier:          WkwiCKCBvDbRajoN9kLsMTcbeXN397k96kAbX3d3cGI=
Subject key identifier:   25:94:5A:98:40:27:03:7E:CC:09:44:2F:FC:15:A8:BF:95:E4:5B:2E
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285838B3644276BD60A561DD079800
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0e42dbe-8fd8-30b5-ae7b-5cee099046e8.roa
Signing time:             Fri 25 Sep 2020 04:00:00 +0000
ROA not before:           Fri 25 Sep 2020 04:00:00 +0000
ROA not after:            Sat 27 Apr 2030 04:00:00 +0000
asID:                     61317
IP address blocks:        216.24.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 18 Oct 2022 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:b3:64:42:76:bd:60:a5:61:dd:07:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 25 04:00:00 2020 GMT
            Not After : Apr 27 04:00:00 2030 GMT
        Subject: CN=a02130c7-4e02-4b57-8416-139eefa98211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:03:bf:95:4a:7e:4c:43:b1:f9:4f:d6:78:
                    f6:1e:da:63:65:7e:54:31:15:42:9f:09:5c:c5:07:
                    d7:e6:e5:03:89:f1:ba:28:9c:07:73:c1:c3:75:f9:
                    ab:c6:c7:71:2b:44:74:a0:22:25:a2:2b:07:7c:68:
                    1b:92:30:69:71:d1:44:df:0c:fc:f2:18:67:a2:68:
                    1b:14:4e:03:b2:51:1b:f7:eb:13:3f:18:43:5a:3f:
                    d8:3a:3c:bf:ab:94:ed:96:43:63:c2:dd:2f:d6:6e:
                    4c:83:3e:2e:97:93:f9:c5:81:48:f4:dd:22:a1:82:
                    27:7a:0f:52:bf:07:87:09:8f:63:ae:d2:34:bd:08:
                    3e:6a:62:35:ed:98:4a:1b:7b:f6:8c:3e:25:09:f0:
                    67:1a:9d:f1:35:1b:b6:98:49:0b:d3:67:cc:db:78:
                    18:b7:63:d2:67:4e:23:e6:3a:d4:05:3e:1f:dd:20:
                    e2:a9:99:1b:a2:98:78:3e:bf:3d:d6:5c:3f:e4:40:
                    05:3f:97:c1:42:a0:0d:e5:6f:62:77:ed:b6:2e:f2:
                    2d:d3:81:b7:ee:71:49:f0:e6:7c:fb:11:de:f0:46:
                    ec:c5:c8:fe:21:f3:f1:51:41:15:1d:15:20:01:aa:
                    e9:53:d1:7d:44:37:66:34:3a:7e:d9:28:9c:e6:df:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:5A:98:40:27:03:7E:CC:09:44:2F:FC:15:A8:BF:95:E4:5B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0e42dbe-8fd8-30b5-ae7b-5cee099046e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:69:fd:11:92:fd:5c:2b:51:b9:ae:99:94:ce:9a:a2:a0:55:
         14:61:9a:f7:b2:2d:45:3c:3d:f9:63:72:58:dc:40:58:1c:2d:
         6d:57:1b:96:3e:79:e9:96:ce:9b:15:f1:00:61:d4:7d:0f:af:
         58:63:78:78:49:1a:db:9b:25:40:3f:0c:d0:16:5d:63:63:a1:
         bb:10:0f:f2:ba:29:98:34:dc:b3:24:06:f5:bb:b5:0a:48:9f:
         39:2e:a5:29:d2:ae:bb:ae:21:62:4e:ce:41:17:d9:1c:f1:ca:
         b1:e2:df:bb:d0:d0:48:5c:2c:ed:1f:5d:97:f1:dc:74:f5:90:
         2a:4c:77:16:fc:96:50:37:c0:67:c8:ac:38:15:5c:2b:63:02:
         f8:1d:b8:5e:56:8e:f3:ec:ac:f9:e9:35:f6:0e:5a:d3:6f:d3:
         44:82:03:7f:ec:b9:84:ea:ab:49:73:73:3b:da:2d:af:d9:d7:
         4f:a8:dc:76:75:89:fb:a7:ae:68:44:dc:02:51:08:bb:93:3d:
         d0:e6:09:1e:2e:b1:9a:d6:0d:70:ee:96:48:3a:17:ae:d8:a4:
         00:f5:18:95:dd:ef:5b:5d:37:66:04:ab:42:4f:fd:74:23:08:
         5e:a0:28:1e:84:b7:94:a2:fb:e5:12:b0:1f:2f:40:36:96:cb:
         41:47:23:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDizZEJ2vWClYd0HmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIwMDkyNTA0MDAwMFoXDTMwMDQyNzA0MDAwMFowLzEtMCsGA1UEAxMk
YTAyMTMwYzctNGUwMi00YjU3LTg0MTYtMTM5ZWVmYTk4MjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1kDv5VKfkxDsflP1nj2HtpjZX5UMRVCnwlc
xQfX5uUDifG6KJwHc8HDdfmrxsdxK0R0oCIloisHfGgbkjBpcdFE3wz88hhnomgb
FE4DslEb9+sTPxhDWj/YOjy/q5TtlkNjwt0v1m5Mgz4ul5P5xYFI9N0ioYIneg9S
vweHCY9jrtI0vQg+amI17ZhKG3v2jD4lCfBnGp3xNRu2mEkL02fM23gYt2PSZ04j
5jrUBT4f3SDiqZkboph4Pr891lw/5EAFP5fBQqAN5W9id+22LvIt04G37nFJ8OZ8
+xHe8Ebsxcj+IfPxUUEVHRUgAarpU9F9RDdmNDp+2Sic5t9jAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWUWphAJwN+zAlEL/wVqL+V5FsuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYjBlNDJkYmUtOGZkOC0z
MGI1LWFlN2ItNWNlZTA5OTA0NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BjQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANp/RGS/VwrUbmumZTOmqKgVRRhmveyLUU8PfljcljcQFgcLW1XG5Y+
eemWzpsV8QBh1H0Pr1hjeHhJGtubJUA/DNAWXWNjobsQD/K6KZg03LMkBvW7tQpI
nzkupSnSrruuIWJOzkEX2RzxyrHi37vQ0EhcLO0fXZfx3HT1kCpMdxb8llA3wGfI
rDgVXCtjAvgduF5WjvPsrPnpNfYOWtNv00SCA3/suYTqq0lzczvaLa/Z10+o3HZ1
ifunrmhE3AJRCLuTPdDmCR4usZrWDXDulkg6F67YpAD1GJXd71tdN2YEq0JP/XQj
CF6gKB6Et5Si++USsB8vQDaWy0FHI68=
-----END CERTIFICATE-----