Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/424e77b3-8fa8-3dc5-ae92-994942c1c8c6.roa
File:                     424e77b3-8fa8-3dc5-ae92-994942c1c8c6.roa (raw, json)
Hash identifier:          PnINwNg3HHAhAFuDwOV9stovg94pX9mPi6x8/bjA6hI=
Subject key identifier:   81:49:ED:33:50:56:94:A6:94:CC:47:6E:CF:69:67:EA:38:68:A9:1A
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328576D51CC73C042CFC16AB200B933
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/424e77b3-8fa8-3dc5-ae92-994942c1c8c6.roa
Signing time:             Mon 13 May 2019 16:22:33 +0000
ROA not before:           Mon 13 May 2019 04:00:00 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     22635
IP address blocks:        146.115.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 10:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:b2:00:b9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: May 13 04:00:00 2019 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=da77bfd7-a68e-404f-a7e5-01abf85eca7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:ca:52:ec:97:f4:33:f3:32:13:5c:3d:7f:
                    7a:5c:06:c3:39:12:b0:5a:ed:49:c2:3a:7a:c5:26:
                    b4:cc:a6:a1:41:5e:ad:ef:64:f5:50:e6:bf:89:96:
                    c6:b3:2a:30:96:00:ae:12:dc:b7:31:f7:cc:29:c0:
                    d5:20:17:1d:67:f6:69:7b:c5:e0:d3:d9:36:aa:b1:
                    36:ba:e1:70:42:d1:1d:ad:0e:80:ae:2f:6f:d0:9f:
                    7d:d4:e2:7f:da:37:76:fd:76:e2:8d:12:fc:97:07:
                    49:ec:3e:10:a0:5c:44:a9:4e:fa:52:a0:1a:ba:49:
                    23:cc:0a:59:5b:a0:8f:d8:9d:a4:eb:a7:52:77:5b:
                    8f:3e:e9:a3:2d:85:56:fe:b5:61:87:61:06:a7:0c:
                    83:cf:4e:26:d5:45:fb:5e:83:3f:69:f6:32:76:d3:
                    fa:5f:ad:a3:3d:1c:3d:51:f9:13:13:dc:66:5c:f3:
                    03:dd:97:c1:5d:cb:47:2e:fd:f2:21:6d:83:9a:f5:
                    6e:bd:24:e3:79:f2:d7:60:8e:29:64:c7:9a:0f:12:
                    58:eb:15:4e:0d:30:d7:a3:2f:83:5d:4a:70:1b:55:
                    8e:f4:a5:65:11:a7:29:e7:16:e8:1f:24:ab:46:30:
                    b9:17:69:6f:ef:c4:db:72:ae:f1:9b:67:ef:8d:42:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:49:ED:33:50:56:94:A6:94:CC:47:6E:CF:69:67:EA:38:68:A9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/424e77b3-8fa8-3dc5-ae92-994942c1c8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.115.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:a4:8d:51:f5:29:e5:36:cc:2b:d8:50:c4:07:53:e0:d0:
         01:0a:6f:b5:a2:0b:4a:94:74:7f:2d:46:e7:08:0f:44:ba:88:
         90:5e:95:e2:7f:d8:bf:1a:89:a4:94:05:f0:e3:a2:ec:8c:fb:
         07:da:99:d5:82:54:f7:2c:1a:a2:28:f1:4c:09:05:bf:4d:63:
         40:58:34:63:59:b5:20:81:e5:3e:9d:8a:26:a5:71:71:07:ef:
         d0:3f:c5:c5:35:c9:c8:ca:58:1b:b9:47:0c:b1:68:3b:1d:93:
         0e:e0:74:3a:59:6b:db:07:59:55:dc:1a:7d:0c:ea:c8:83:46:
         fc:b3:d7:18:01:4f:b9:fe:9d:bb:3c:09:21:e4:ba:72:21:19:
         dc:a5:62:c2:a4:d5:ed:45:bc:15:5c:60:52:27:48:8e:66:bc:
         f6:61:66:3c:8a:f8:c0:12:8e:cb:ac:90:32:34:b1:2c:be:52:
         78:57:a5:58:44:ac:67:13:0c:d1:c2:d6:36:58:e4:c8:40:2b:
         d2:0f:fc:f8:ef:f7:8b:a9:a2:0d:90:15:a9:ec:f8:f9:61:1d:
         bf:5b:1a:50:e7:38:e3:4c:e1:e6:4b:50:e3:fe:c0:38:39:e9:
         cd:71:09:79:e5:ca:0c:60:4a:b5:d2:39:6f:8f:cb:9a:83:dd:
         b9:aa:97:84
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BarIAuTMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRkNjg3
MzAeFw0xOTA1MTMwNDAwMDBaFw0yOTAxMDEwNTAwMDBaMC8xLTArBgNVBAMTJGRh
NzdiZmQ3LWE2OGUtNDA0Zi1hN2U1LTAxYWJmODVlY2E3ZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALRqylLsl/Qz8zITXD1/elwGwzkSsFrtScI6esUm
tMymoUFere9k9VDmv4mWxrMqMJYArhLctzH3zCnA1SAXHWf2aXvF4NPZNqqxNrrh
cELRHa0OgK4vb9CffdTif9o3dv124o0S/JcHSew+EKBcRKlO+lKgGrpJI8wKWVug
j9idpOunUndbjz7poy2FVv61YYdhBqcMg89OJtVF+16DP2n2MnbT+l+toz0cPVH5
ExPcZlzzA92XwV3LRy798iFtg5r1br0k43ny12COKWTHmg8SWOsVTg0w16Mvg11K
cBtVjvSlZRGnKecW6B8kq0YwuRdpb+/E23Ku8Ztn741ChW0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSBSe0zUFaUppTMR27PaWfqOGipGjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcy
NWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2ODczLzQyNGU3N2IzLThmYTgtM2Rj
NS1hZTkyLTk5NDk0MmMxYzhjNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5
LTM3YjAxNGRkNjg3My8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4
NzMuY3JsMB8GA1UdIwQYMBaAFC0ZDLRQWaBiPJeGaFG5IOObMt34MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0
ZGQ2ODczLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJJzDDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAem2kjVH1KeU2zCvYUMQHU+DQAQpvtaILSpR0fy1G5wgPRLqIkF6V4n/YvxqJ
pJQF8OOi7Iz7B9qZ1YJU9ywaoijxTAkFv01jQFg0Y1m1IIHlPp2KJqVxcQfv0D/F
xTXJyMpYG7lHDLFoOx2TDuB0Ollr2wdZVdwafQzqyING/LPXGAFPuf6duzwJIeS6
ciEZ3KViwqTV7UW8FVxgUidIjma89mFmPIr4wBKOy6yQMjSxLL5SeFelWESsZxMM
0cLWNljkyEAr0g/8+O/3i6miDZAVqez4+WEdv1saUOc440zh5ktQ4/7AODnpzXEJ
eeXKDGBKtdI5b4/LmoPduaqXhA==
-----END CERTIFICATE-----