Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7ce4007d-56ba-389a-ad20-9f93d112acbc.roa
File:                     7ce4007d-56ba-389a-ad20-9f93d112acbc.roa (raw, json)
Hash identifier:          f3i9ohK6Pu6m30Hw5CCBkMEIREWDyXP7oiLKYyOY4zo=
Subject key identifier:   9E:55:DE:D7:2A:B7:97:C2:86:A7:EB:29:10:14:57:22:D8:9F:33:B8
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328583DE7B9AD77D5E77BFE336C4B80
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7ce4007d-56ba-389a-ad20-9f93d112acbc.roa
Signing time:             Wed 20 Jan 2021 19:53:35 +0000
ROA not before:           Wed 20 Jan 2021 19:53:35 +0000
ROA not after:            Fri 16 Aug 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        64.112.72.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e7:b9:ad:77:d5:e7:7b:fe:33:6c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Jan 20 19:53:35 2021 GMT
            Not After : Aug 16 04:00:00 2024 GMT
        Subject: CN=ca5321e2-cbea-4d36-aa6f-e8527e68a422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:53:58:58:8c:23:50:e0:97:17:10:a8:33:
                    0f:7d:7a:3b:76:82:df:81:a8:bf:24:61:fe:e3:f6:
                    43:fd:38:ae:6c:ae:52:df:61:ff:cd:38:36:79:32:
                    a3:48:0e:f6:51:cf:9f:a7:0f:bb:4f:fc:4e:2f:4b:
                    55:a4:9f:53:ab:2f:96:13:b9:36:a2:c7:53:68:1e:
                    9c:8c:ad:c8:b4:29:29:4f:27:35:07:ed:7b:7e:08:
                    a3:86:69:44:ba:c8:d0:a2:aa:7b:51:8a:8d:f0:16:
                    49:f0:80:81:52:1e:a9:79:a1:0b:7d:37:a0:7b:56:
                    a1:66:f9:73:66:a8:36:e0:50:23:31:1a:4a:f9:0a:
                    ca:a6:65:5b:92:59:04:5c:77:87:a7:70:19:fe:68:
                    fa:80:f5:bc:b7:e7:7d:29:4d:c1:24:3f:0a:57:66:
                    f8:0f:5b:4e:d0:78:68:d6:56:07:d1:64:3e:d8:02:
                    c3:19:fc:86:8f:eb:1d:29:d7:62:c1:26:f1:71:e5:
                    38:8e:79:b3:9a:10:14:b0:81:58:38:ef:df:02:64:
                    c9:29:43:5e:5c:60:c2:4b:37:a1:6e:ba:21:a2:94:
                    de:64:56:d2:6d:12:e8:dd:d2:12:64:23:4f:96:4f:
                    f6:7d:b0:cb:f9:28:25:f7:cf:6f:37:c1:4d:60:ca:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:55:DE:D7:2A:B7:97:C2:86:A7:EB:29:10:14:57:22:D8:9F:33:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7ce4007d-56ba-389a-ad20-9f93d112acbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:bd:f4:f4:e8:6d:da:93:f3:f2:9a:d7:e7:b2:d6:7d:91:
         ef:9b:92:a9:6a:9d:48:98:fb:0a:ba:8d:5a:bb:24:3d:17:2f:
         ed:6d:db:24:c4:d7:f9:30:f9:4f:63:22:bd:a7:e3:8c:de:72:
         19:d0:e6:98:33:69:6e:70:c4:4e:d3:22:02:47:89:1f:66:34:
         f0:34:24:87:c5:70:d4:d9:de:01:a5:ca:ed:65:c3:a7:96:37:
         cb:a9:f9:ff:c4:47:0a:2d:31:4a:ce:73:5b:73:04:b1:82:07:
         d8:67:be:fb:91:39:bd:ac:1a:40:a3:3a:d7:dd:60:cb:fa:38:
         62:7f:81:37:4a:a7:e6:ae:78:4b:0f:0f:a4:6b:0c:b1:70:75:
         a5:eb:b1:d8:8e:ec:0d:74:5a:c9:e5:ea:19:ad:f2:09:33:98:
         b3:5c:0e:8d:21:71:88:c3:ff:e7:c7:b6:5a:76:2c:fa:5e:f8:
         09:67:a3:2d:e0:5a:ec:98:53:8e:3e:cb:a5:89:44:c2:5e:83:
         38:5f:b5:ac:93:60:02:86:c2:98:9f:94:63:99:8d:65:b3:46:
         d6:07:99:9e:f9:87:a8:33:d3:36:7b:cf:b7:3a:31:c2:60:3e:
         4d:2c:c2:fb:06:36:8b:e8:ca:c4:71:64:c1:67:87:61:bf:9d:
         6f:ad:cc:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3nua131ed7/jNsS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTIxMDEyMDE5NTMzNVoXDTI0MDgxNjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2E1MzIxZTItY2JlYS00ZDM2LWFhNmYtZTg1MjdlNjhhNDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJhTWFiMI1DglxcQqDMPfXo7doLfgai/JGH+
4/ZD/TiubK5S32H/zTg2eTKjSA72Uc+fpw+7T/xOL0tVpJ9Tqy+WE7k2osdTaB6c
jK3ItCkpTyc1B+17fgijhmlEusjQoqp7UYqN8BZJ8ICBUh6peaELfTege1ahZvlz
Zqg24FAjMRpK+QrKpmVbklkEXHeHp3AZ/mj6gPW8t+d9KU3BJD8KV2b4D1tO0Hho
1lYH0WQ+2ALDGfyGj+sdKddiwSbxceU4jnmzmhAUsIFYOO/fAmTJKUNeXGDCSzeh
brohopTeZFbSbRLo3dISZCNPlk/2fbDL+Sgl989vN8FNYMqUJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5V3tcqt5fChqfrKRAUVyLYnzO4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvN2NlNDAwN2QtNTZiYS0z
ODlhLWFkMjAtOWY5M2QxMTJhY2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHBIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF68vfT06G3ak/PymtfnstZ9ke+bkqlqnUiY+wq6jVq7JD0XL+1t2yTE
1/kw+U9jIr2n44zechnQ5pgzaW5wxE7TIgJHiR9mNPA0JIfFcNTZ3gGlyu1lw6eW
N8up+f/ERwotMUrOc1tzBLGCB9hnvvuROb2sGkCjOtfdYMv6OGJ/gTdKp+aueEsP
D6RrDLFwdaXrsdiO7A10Wsnl6hmt8gkzmLNcDo0hcYjD/+fHtlp2LPpe+Alnoy3g
WuyYU44+y6WJRMJegzhftayTYAKGwpiflGOZjWWzRtYHmZ75h6gz0zZ7z7c6McJg
Pk0swvsGNovoysRxZMFnh2G/nW+tzOs=
-----END CERTIFICATE-----