Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0994e395-5ba9-3290-905c-e773794010f6.roa
File:                     0994e395-5ba9-3290-905c-e773794010f6.roa (raw, json)
Hash identifier:          DJ/37THNWIpl5mlZJ4Bscgj6puIREKdKAQjswiajt7E=
Subject key identifier:   8D:42:C8:65:CD:BE:81:68:FC:21:22:D2:F7:AC:86:55:C6:D3:21:04
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583F7C38374D22EE35F7B919A180
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0994e395-5ba9-3290-905c-e773794010f6.roa
Signing time:             Thu 07 Jan 2021 14:36:59 +0000
ROA not before:           Thu 07 Jan 2021 14:36:59 +0000
ROA not after:            Wed 08 Jan 2025 05:00:00 +0000
asID:                     204843
IP address blocks:        104.156.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7c:38:37:4d:22:ee:35:f7:b9:19:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 14:36:59 2021 GMT
            Not After : Jan  8 05:00:00 2025 GMT
        Subject: CN=4428a471-fbb0-4b96-a8e1-21ebb28e460b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:28:a3:06:43:f5:84:1c:e9:eb:f7:85:2c:
                    d3:85:d4:9f:5c:ea:4b:ae:6c:63:18:b6:1c:96:02:
                    64:2a:d8:23:13:7a:38:cb:9b:e2:f7:88:18:22:72:
                    01:b6:7c:d8:01:1a:06:dc:27:72:30:8d:b7:ef:2f:
                    38:80:05:f7:9d:f4:46:e8:7b:c4:39:a3:57:41:bb:
                    4d:51:e3:23:9b:be:e4:5b:b4:76:01:78:a1:88:ac:
                    4f:4a:eb:a4:92:f1:09:39:f4:14:3f:00:ba:b5:db:
                    5d:cd:5a:5a:2e:58:ba:67:dc:91:76:c9:04:1c:8d:
                    61:61:fc:6e:8b:98:e8:eb:8c:dc:0e:b0:06:2f:a0:
                    a4:d8:df:d0:74:f8:ab:74:b9:46:d6:5b:b1:1b:0d:
                    29:5e:5d:fb:2a:d0:f3:36:79:ef:30:8f:f8:1d:1d:
                    fc:12:cc:1c:ba:d4:40:55:56:51:40:b0:04:b1:cf:
                    45:8d:b9:ad:0c:dd:19:f6:05:1c:79:4c:1d:f2:d3:
                    bf:9e:4d:d9:8a:0b:fc:df:ea:56:06:fb:f0:fa:15:
                    35:cc:e1:a8:d2:07:4f:33:8d:c2:1a:a1:47:52:51:
                    2b:1f:d0:40:16:e6:94:4a:59:0b:49:ec:27:65:4a:
                    6c:f2:0a:35:2a:f9:e8:6d:4f:b2:d7:e6:e6:ad:ec:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:C8:65:CD:BE:81:68:FC:21:22:D2:F7:AC:86:55:C6:D3:21:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0994e395-5ba9-3290-905c-e773794010f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:61:cb:c0:63:7c:c1:a5:f9:67:da:76:b2:67:35:d1:f5:
         e0:2c:a4:52:64:69:52:f6:d6:61:0c:44:a3:ad:ed:9f:1f:2f:
         39:67:aa:92:3c:14:e8:06:00:16:5a:b0:e4:4d:d1:93:3f:20:
         1a:45:64:a1:63:2e:d1:47:88:c9:4e:e7:75:da:25:8e:40:0c:
         41:72:0f:fa:27:a0:d8:fd:fd:4c:2f:0e:a6:a3:c8:a3:81:bc:
         95:44:8a:49:4e:27:20:64:c5:ae:e1:e0:e8:43:8f:c4:a1:81:
         26:a0:93:f0:e8:b7:e4:55:78:92:68:03:a4:cd:41:be:20:f7:
         f3:d9:a1:65:4c:6d:28:d1:25:d4:5f:37:59:16:15:68:98:44:
         30:80:40:07:50:df:6c:53:6a:7d:3c:f6:b6:b8:cc:ab:dd:b1:
         70:10:2b:46:20:8c:82:4f:ea:d6:04:b8:32:8c:08:11:74:af:
         c8:fa:76:9a:8f:dc:35:e0:3f:40:d1:f1:88:51:0e:9a:74:bc:
         e9:fb:13:36:81:9a:1e:ab:09:81:a1:44:54:3a:c5:2b:3c:4d:
         d3:d0:9e:26:bb:f5:39:d8:d8:30:15:23:6b:99:bc:65:d7:ac:
         12:3f:3b:b5:91:65:69:bb:6d:fa:81:d3:e0:9f:b5:b1:9a:cd:
         6a:dc:0b:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD98ODdNIu4197kZoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTIxMDEwNzE0MzY1OVoXDTI1MDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
NDQyOGE0NzEtZmJiMC00Yjk2LWE4ZTEtMjFlYmIyOGU0NjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw0oowZD9YQc6ev3hSzThdSfXOpLrmxjGLYc
lgJkKtgjE3o4y5vi94gYInIBtnzYARoG3CdyMI237y84gAX3nfRG6HvEOaNXQbtN
UeMjm77kW7R2AXihiKxPSuukkvEJOfQUPwC6tdtdzVpaLli6Z9yRdskEHI1hYfxu
i5jo64zcDrAGL6Ck2N/QdPirdLlG1luxGw0pXl37KtDzNnnvMI/4HR38EswcutRA
VVZRQLAEsc9FjbmtDN0Z9gUceUwd8tO/nk3Zigv83+pWBvvw+hU1zOGo0gdPM43C
GqFHUlErH9BAFuaUSlkLSewnZUps8go1KvnobU+y1+bmreyWQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1CyGXNvoFo/CEi0veshlXG0yEEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvMDk5NGUzOTUtNWJhOS0z
MjkwLTkwNWMtZTc3Mzc5NDAxMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHw6YcvAY3zBpfln2nayZzXR9eAspFJkaVL21mEMRKOt7Z8fLzlnqpI8
FOgGABZasORN0ZM/IBpFZKFjLtFHiMlO53XaJY5ADEFyD/onoNj9/UwvDqajyKOB
vJVEiklOJyBkxa7h4OhDj8ShgSagk/Dot+RVeJJoA6TNQb4g9/PZoWVMbSjRJdRf
N1kWFWiYRDCAQAdQ32xTan089ra4zKvdsXAQK0YgjIJP6tYEuDKMCBF0r8j6dpqP
3DXgP0DR8YhRDpp0vOn7EzaBmh6rCYGhRFQ6xSs8TdPQnia79TnY2DAVI2uZvGXX
rBI/O7WRZWm7bfqB0+CftbGazWrcC/s=
-----END CERTIFICATE-----