Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ee48adab-4264-310a-956b-de4157368376.roa
File:                     ee48adab-4264-310a-956b-de4157368376.roa (raw, json)
Hash identifier:          H1lh7CMBasK7W2RXE4dOZK5deqsrpCgDBv3rPMu7KdQ=
Subject key identifier:   4A:2F:BC:91:D4:22:23:40:4D:A8:96:24:8A:6C:15:CB:92:B9:26:DF
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E18F8434C9F499B461ADBF580
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ee48adab-4264-310a-956b-de4157368376.roa
Signing time:             Wed 14 Apr 2021 18:57:06 +0000
ROA not before:           Wed 14 Apr 2021 18:57:06 +0000
ROA not after:            Tue 03 Sep 2030 04:00:00 +0000
asID:                     11404
IP address blocks:        24.56.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:18:f8:43:4c:9f:49:9b:46:1a:db:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 14 18:57:06 2021 GMT
            Not After : Sep  3 04:00:00 2030 GMT
        Subject: CN=ea0d7763-907d-4609-925a-1e4191c281b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:55:de:96:98:78:78:ac:d3:3d:a1:f5:85:
                    8b:43:53:a0:10:5a:0b:38:a7:9a:61:02:75:7f:15:
                    ac:1b:d5:40:6d:78:5c:6c:35:d9:3b:01:4d:63:7a:
                    e0:48:19:a3:4d:fb:02:27:8b:c1:76:21:c6:61:aa:
                    f0:a7:df:49:23:27:ea:19:27:07:c2:3f:c7:b7:4e:
                    23:b6:6b:71:9f:e9:b2:f1:95:8d:73:24:bb:b9:7c:
                    f4:51:d6:38:0c:12:a7:79:42:df:19:db:e4:68:bb:
                    e4:27:63:34:5b:8d:d7:88:1d:c8:4c:2f:6e:8c:c2:
                    58:dd:13:a7:a9:f7:99:9e:27:1b:6f:d2:f9:40:47:
                    58:17:b6:bd:c6:b6:98:08:ec:68:4f:3a:89:9b:3e:
                    ba:c8:db:8b:3d:d5:d8:8a:5e:b5:ee:e5:4e:6d:bb:
                    16:79:b9:a5:b4:1c:e1:d6:34:98:89:2b:57:11:9e:
                    46:b3:fc:3d:b7:b8:b8:0c:29:7d:d6:ee:d1:b1:eb:
                    d0:cf:c6:ef:ae:e6:9c:37:ba:dc:2f:95:d4:4c:91:
                    ce:c7:24:ec:2d:45:29:ca:c2:18:fa:e5:00:d9:5c:
                    f7:22:66:dc:c0:4c:a1:d4:75:ee:8d:9c:cf:25:1c:
                    14:85:f5:35:1a:b3:61:78:66:74:48:42:d1:f7:9f:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2F:BC:91:D4:22:23:40:4D:A8:96:24:8A:6C:15:CB:92:B9:26:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ee48adab-4264-310a-956b-de4157368376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:ce:7b:96:be:7d:ad:8a:74:a3:af:61:80:69:82:5a:76:
         44:52:8a:c0:aa:9f:c5:44:04:ac:45:36:ba:7d:0f:21:c9:3b:
         c6:ff:75:c8:50:43:72:58:52:39:ad:72:be:e8:87:53:9d:1b:
         95:76:82:23:74:4c:bf:42:df:0c:f7:48:c2:67:1e:fe:f0:b3:
         f7:ff:ea:3d:75:be:73:1b:86:aa:24:39:67:60:54:f7:6a:27:
         bf:4d:90:13:8d:f7:c9:55:e0:1e:75:8a:f7:e6:89:66:ca:39:
         49:cf:3d:4f:f6:24:47:ad:7b:bd:41:43:ef:4a:ec:21:42:2a:
         5e:5c:a5:96:58:14:a0:4c:ec:8f:b6:f8:da:00:9f:53:42:86:
         66:1f:23:c5:5e:e6:3d:07:3a:67:7e:f9:64:83:a5:4b:3d:0b:
         ee:84:49:33:27:ca:b3:ac:88:92:33:21:9c:f7:85:c0:a5:2b:
         bd:04:ad:9a:b7:4b:fa:da:56:73:bc:dc:98:6c:d8:e0:eb:5b:
         b3:84:b8:4c:e6:74:df:d2:01:b6:f4:54:7f:c8:f3:bb:c7:9d:
         68:a5:6e:ff:08:43:da:33:c2:d3:a2:c4:82:a6:eb:78:85:8c:
         fb:92:90:82:12:e0:3e:3b:d9:18:2d:a5:82:44:00:74:79:51:
         ae:36:82:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4Y+ENMn0mbRhrb9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTIxMDQxNDE4NTcwNloXDTMwMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZWEwZDc3NjMtOTA3ZC00NjA5LTkyNWEtMWU0MTkxYzI4MWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse9V3paYeHis0z2h9YWLQ1OgEFoLOKeaYQJ1
fxWsG9VAbXhcbDXZOwFNY3rgSBmjTfsCJ4vBdiHGYarwp99JIyfqGScHwj/Ht04j
tmtxn+my8ZWNcyS7uXz0UdY4DBKneULfGdvkaLvkJ2M0W43XiB3ITC9ujMJY3ROn
qfeZnicbb9L5QEdYF7a9xraYCOxoTzqJmz66yNuLPdXYil617uVObbsWebmltBzh
1jSYiStXEZ5Gs/w9t7i4DCl91u7RsevQz8bvruacN7rcL5XUTJHOxyTsLUUpysIY
+uUA2Vz3ImbcwEyh1HXujZzPJRwUhfU1GrNheGZ0SELR95937wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEovvJHUIiNATaiWJIpsFcuSuSbfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWU0OGFkYWItNDI2NC0z
MTBhLTk1NmItZGU0MTU3MzY4Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGDjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXQznuWvn2tinSjr2GAaYJadkRSisCqn8VEBKxFNrp9DyHJO8b/dchQ
Q3JYUjmtcr7oh1OdG5V2giN0TL9C3wz3SMJnHv7ws/f/6j11vnMbhqokOWdgVPdq
J79NkBON98lV4B51ivfmiWbKOUnPPU/2JEete71BQ+9K7CFCKl5cpZZYFKBM7I+2
+NoAn1NChmYfI8Ve5j0HOmd++WSDpUs9C+6ESTMnyrOsiJIzIZz3hcClK70ErZq3
S/raVnO83Jhs2ODrW7OEuEzmdN/SAbb0VH/I87vHnWilbv8IQ9ozwtOixIKm63iF
jPuSkIIS4D472RgtpYJEAHR5Ua42gqU=
-----END CERTIFICATE-----