Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/ba62a5b9-429f-374f-abdd-05e1691b0a24.roa
File:                     ba62a5b9-429f-374f-abdd-05e1691b0a24.roa (raw, json)
Hash identifier:          sAwiIUcaO4t2k2EUs7meq7ANXrPSmlN1HCWG/ny0f18=
Subject key identifier:   EE:41:2C:2C:5C:A1:74:34:35:23:00:DE:B8:6D:AB:A6:C7:AF:4E:C7
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F43285840C72979C7A3AE11EC9C34B800
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/ba62a5b9-429f-374f-abdd-05e1691b0a24.roa
Signing time:             Fri 06 Aug 2021 15:24:51 +0000
ROA not before:           Fri 06 Aug 2021 15:24:51 +0000
ROA not after:            Wed 07 May 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        142.214.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c7:29:79:c7:a3:ae:11:ec:9c:34:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Aug  6 15:24:51 2021 GMT
            Not After : May  7 04:00:00 2025 GMT
        Subject: CN=5fb760ca-abca-4694-a114-8a32486cf053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:5f:c9:0d:a9:0e:84:25:a6:0f:5e:ab:d2:
                    08:c8:79:bd:12:f2:ec:0f:60:1f:67:1a:fa:df:40:
                    0d:76:54:8a:29:dc:9d:e2:18:9d:ef:9f:bb:8a:c1:
                    dc:11:b9:11:8a:18:6a:f9:dc:c4:9b:0b:0f:64:4f:
                    68:f4:72:a0:78:29:ec:43:60:43:c2:83:24:28:00:
                    2f:c7:e0:6b:ea:0f:c6:af:1c:84:b3:f0:38:be:91:
                    5a:41:54:31:a4:c8:5b:31:90:2a:f8:57:28:db:8b:
                    d1:7a:c4:87:88:a7:04:e4:6a:f9:02:ed:96:54:5f:
                    51:08:47:63:f6:87:77:a2:df:fb:27:bb:42:9b:08:
                    d7:b5:e0:df:b5:10:ef:88:df:69:20:e2:31:ea:4e:
                    5c:16:67:e3:c5:f8:9d:d1:80:da:59:b6:0d:49:1d:
                    5c:f4:9f:25:cb:7b:6c:a1:ac:6d:8a:61:cc:94:97:
                    26:80:8e:c2:42:1f:47:33:4d:56:37:a1:1a:ce:5d:
                    82:91:fc:10:c9:c2:46:18:57:ba:ba:20:9b:e8:04:
                    59:12:f6:55:6e:d3:3f:09:a1:d7:f9:5f:c0:d1:1b:
                    80:a3:30:09:ce:c8:3f:4c:d5:40:76:6c:f9:7f:5d:
                    95:5a:7c:1c:5e:a7:6d:a9:40:3c:e9:40:af:37:f9:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:41:2C:2C:5C:A1:74:34:35:23:00:DE:B8:6D:AB:A6:C7:AF:4E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/ba62a5b9-429f-374f-abdd-05e1691b0a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:52:98:21:24:69:b3:88:a0:97:d4:c0:b8:6a:a9:da:1a:7f:
         d5:4e:af:b3:4b:2c:da:55:9a:48:1b:59:d4:85:1c:6e:ec:15:
         e4:c4:ee:08:ec:5e:7c:15:6b:3e:f2:96:17:31:c5:7a:d4:83:
         cc:e6:1f:5d:21:1b:fe:ac:c2:df:44:65:92:f0:95:92:99:6a:
         06:6a:7a:8f:53:59:e9:d4:18:c6:5d:30:ee:86:5a:1a:87:08:
         90:59:70:48:31:65:e3:82:59:59:da:ca:8d:c3:15:37:8c:55:
         26:65:9d:ab:02:b7:bc:a3:00:aa:cc:05:76:16:57:4a:52:51:
         67:99:ec:b4:b6:e4:64:b3:dc:2d:2c:1b:0b:68:fb:75:2d:04:
         bf:44:d1:c6:4e:e4:60:2b:13:d3:cf:34:4a:c5:7d:86:29:b4:
         08:09:de:98:59:30:5e:98:43:31:ea:97:a2:44:3d:1d:a5:dd:
         8a:3c:af:93:3b:63:29:a2:f2:a9:ed:66:a8:ee:a5:84:82:8e:
         fe:fc:7e:ae:ef:f7:93:d2:79:e8:68:42:8a:af:f7:19:53:e5:
         a8:26:7a:29:b7:ea:04:84:0f:41:f5:0f:8c:ff:cd:d4:56:90:
         d6:06:60:c9:c6:84:13:31:db:3b:cc:89:74:62:df:44:d7:24:
         04:27:fa:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDHKXnHo64R7Jw0uAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3
ODYxMB4XDTIxMDgwNjE1MjQ1MVoXDTI1MDUwNzA0MDAwMFowLzEtMCsGA1UEAxMk
NWZiNzYwY2EtYWJjYS00Njk0LWExMTQtOGEzMjQ4NmNmMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GhfyQ2pDoQlpg9eq9IIyHm9EvLsD2AfZxr6
30ANdlSKKdyd4hid75+7isHcEbkRihhq+dzEmwsPZE9o9HKgeCnsQ2BDwoMkKAAv
x+Br6g/GrxyEs/A4vpFaQVQxpMhbMZAq+Fco24vResSHiKcE5Gr5Au2WVF9RCEdj
9od3ot/7J7tCmwjXteDftRDviN9pIOIx6k5cFmfjxfid0YDaWbYNSR1c9J8ly3ts
oaxtimHMlJcmgI7CQh9HM01WN6Eazl2CkfwQycJGGFe6uiCb6ARZEvZVbtM/CaHX
+V/A0RuAozAJzsg/TNVAdmz5f12VWnwcXqdtqUA86UCvN/mVlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5BLCxcoXQ0NSMA3rhtq6bHr07HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk
YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvYmE2MmE1YjktNDI5Zi0z
NzRmLWFiZGQtMDVlMTY5MWIwYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi
MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3
Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4
ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBSmCEkabOIoJfUwLhqqdoaf9VOr7NLLNpVmkgbWdSFHG7sFeTE7gjs
XnwVaz7ylhcxxXrUg8zmH10hG/6swt9EZZLwlZKZagZqeo9TWenUGMZdMO6GWhqH
CJBZcEgxZeOCWVnayo3DFTeMVSZlnasCt7yjAKrMBXYWV0pSUWeZ7LS25GSz3C0s
Gwto+3UtBL9E0cZO5GArE9PPNErFfYYptAgJ3phZMF6YQzHql6JEPR2l3Yo8r5M7
Yymi8qntZqjupYSCjv78fq7v95PSeehoQoqv9xlT5agmeim36gSED0H1D4z/zdRW
kNYGYMnGhBMx2zvMiXRi30TXJAQn+l4=
-----END CERTIFICATE-----