Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fcbaf178-08f5-382e-8ec8-a72a0a3087a6.roa
File:                     fcbaf178-08f5-382e-8ec8-a72a0a3087a6.roa (raw, json)
Hash identifier:          0ogd4O9k9LBNgz96jL5HGQJ9JOO59fd8OUeKqe4iAOs=
Subject key identifier:   B6:E6:16:FC:5B:B3:B6:25:85:59:C4:96:1D:C0:58:EC:97:AA:C6:72
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F432858413D2A79E5C11AE2D99FF64D00
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fcbaf178-08f5-382e-8ec8-a72a0a3087a6.roa
Signing time:             Fri 13 Nov 2020 06:09:07 +0000
ROA not before:           Fri 13 Nov 2020 06:09:07 +0000
ROA not after:            Wed 18 Jun 2025 04:00:00 +0000
asID:                     1079
IP address blocks:        204.9.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3d:2a:79:e5:c1:1a:e2:d9:9f:f6:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Nov 13 06:09:07 2020 GMT
            Not After : Jun 18 04:00:00 2025 GMT
        Subject: CN=3535f422-e2df-4b99-aafc-d451b55a66bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:8f:32:36:9e:9b:5e:92:7f:7d:f5:ba:ec:
                    f1:82:5f:12:fb:11:5e:59:0d:30:7e:73:7a:38:be:
                    1b:c4:57:2f:3c:7a:bf:54:28:d4:0c:15:7c:eb:48:
                    32:2a:44:e8:63:49:c4:81:26:b6:9d:ff:49:49:23:
                    fc:e5:3a:53:69:b6:22:16:64:2e:33:ea:9d:cf:12:
                    f6:2d:97:2a:b5:7d:cf:aa:af:2d:53:1d:7d:ef:fb:
                    57:8d:a5:4e:6a:32:8e:59:02:a5:6f:4a:a4:a7:38:
                    a4:17:70:70:69:7b:99:3d:da:6e:c4:cf:ac:07:15:
                    66:3f:a4:ef:75:62:2f:24:ad:d3:15:e6:64:13:24:
                    5d:5d:77:42:d7:d8:56:ce:ec:f9:5f:b8:b7:fd:ec:
                    98:20:d3:d0:70:ef:0a:0b:6c:d3:f6:38:d0:4f:c4:
                    2b:36:53:42:04:fb:cb:5e:8f:a2:5a:a4:81:a3:f9:
                    5c:8d:65:df:8c:25:98:3c:88:a6:01:7f:7a:c3:14:
                    5c:18:76:aa:9e:6a:e9:48:e3:46:c2:67:9c:63:a0:
                    a5:f1:94:1a:61:10:b7:f6:b0:3b:26:c0:7d:d7:35:
                    50:c9:50:47:6f:c4:fe:cd:14:e2:bd:a8:e4:c9:38:
                    91:bd:ac:89:e3:8c:e1:1d:1c:00:dc:69:25:27:b7:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E6:16:FC:5B:B3:B6:25:85:59:C4:96:1D:C0:58:EC:97:AA:C6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fcbaf178-08f5-382e-8ec8-a72a0a3087a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:84:e7:88:01:09:17:dd:a8:da:69:b2:d4:6b:1a:22:65:6d:
         c0:34:c1:f7:5f:13:97:01:a7:53:a2:36:37:ce:ca:2d:26:d2:
         41:63:66:c2:fe:f2:e1:5c:84:13:dd:c4:eb:53:b4:cb:4c:05:
         70:d3:78:69:b9:d7:72:50:8c:b7:c2:d3:92:8b:4c:8f:f7:c1:
         1f:fa:ee:7a:1a:ed:88:97:2e:c7:53:dd:7e:da:74:75:d6:46:
         ca:0e:86:93:0e:cb:99:c3:4a:7c:02:45:d2:77:ee:58:0b:c3:
         9f:5b:cd:a0:18:c6:73:8b:00:2e:bb:9d:3f:73:18:62:80:01:
         51:55:9e:a5:04:71:3e:6b:0c:53:ef:df:75:70:b1:73:8b:38:
         b0:a3:6c:95:ce:59:e5:29:52:a1:44:31:d9:9c:c3:58:ca:03:
         93:c4:f8:b2:9a:1b:4d:fe:8e:9c:55:af:cc:64:d0:c8:b8:b4:
         10:e3:52:04:23:10:00:d2:84:25:bb:7c:24:9f:e2:52:b0:12:
         65:e6:00:1c:81:f6:4d:7a:a9:d1:d9:2d:a2:07:2c:51:73:a4:
         62:73:b1:4a:d6:96:d5:7b:cd:a3:ac:6a:eb:e9:ad:fc:2a:0c:
         01:10:1a:86:ca:15:e5:f1:1f:47:f2:76:6f:22:df:bb:a5:a4:
         3c:e9:8f:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEE9KnnlwRri2Z/2TQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTIwMTExMzA2MDkwN1oXDTI1MDYxODA0MDAwMFowLzEtMCsGA1UEAxMk
MzUzNWY0MjItZTJkZi00Yjk5LWFhZmMtZDQ1MWI1NWE2NmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06ePMjaem16Sf331uuzxgl8S+xFeWQ0wfnN6
OL4bxFcvPHq/VCjUDBV860gyKkToY0nEgSa2nf9JSSP85TpTabYiFmQuM+qdzxL2
LZcqtX3Pqq8tUx197/tXjaVOajKOWQKlb0qkpzikF3BwaXuZPdpuxM+sBxVmP6Tv
dWIvJK3TFeZkEyRdXXdC19hWzuz5X7i3/eyYINPQcO8KC2zT9jjQT8QrNlNCBPvL
Xo+iWqSBo/lcjWXfjCWYPIimAX96wxRcGHaqnmrpSONGwmecY6Cl8ZQaYRC39rA7
JsB91zVQyVBHb8T+zRTivajkyTiRvayJ44zhHRwA3GklJ7cKYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbmFvxbs7YlhVnElh3AWOyXqsZyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvZmNiYWYxNzgtMDhmNS0z
ODJlLThlYzgtYTcyYTBhMzA4N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAk7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKqE54gBCRfdqNppstRrGiJlbcA0wfdfE5cBp1OiNjfOyi0m0kFjZsL+
8uFchBPdxOtTtMtMBXDTeGm513JQjLfC05KLTI/3wR/67noa7YiXLsdT3X7adHXW
RsoOhpMOy5nDSnwCRdJ37lgLw59bzaAYxnOLAC67nT9zGGKAAVFVnqUEcT5rDFPv
33VwsXOLOLCjbJXOWeUpUqFEMdmcw1jKA5PE+LKaG03+jpxVr8xk0Mi4tBDjUgQj
EADShCW7fCSf4lKwEmXmAByB9k16qdHZLaIHLFFzpGJzsUrWltV7zaOsauvprfwq
DAEQGobKFeXxH0fydm8i37ulpDzpj4w=
-----END CERTIFICATE-----