Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/14aaee4f-495e-38c7-8dad-74d51e89c685.roa
File:                     14aaee4f-495e-38c7-8dad-74d51e89c685.roa (raw, json)
Hash identifier:          Wj4pnQ3d4L+66juJnkjvzHPwMxJuaSPU8QI0jhnUgdg=
Subject key identifier:   4B:C0:29:53:92:B0:DF:23:D4:6C:45:6E:98:F5:63:4C:5F:70:73:A9
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328583DBF30B6DD2082E1F6001CE040
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/14aaee4f-495e-38c7-8dad-74d51e89c685.roa
Signing time:             Wed 17 Jul 2019 11:51:57 +0000
ROA not before:           Wed 17 Jul 2019 11:51:57 +0000
ROA not after:            Fri 02 Aug 2024 04:00:00 +0000
asID:                     30633
IP address blocks:        63.141.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bf:30:b6:dd:20:82:e1:f6:00:1c:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 17 11:51:57 2019 GMT
            Not After : Aug  2 04:00:00 2024 GMT
        Subject: CN=d22402dd-28a6-427c-b96d-722e897f00c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:a9:30:4c:ce:54:69:c1:a3:cf:0c:2f:51:
                    6f:7a:ac:53:76:16:63:76:31:50:06:a1:8a:5d:7f:
                    23:06:7e:15:dd:ce:39:2c:df:4b:36:7e:74:02:55:
                    b5:42:fa:06:06:f9:ca:42:4f:2c:a7:4f:22:25:ce:
                    3a:cf:21:aa:a5:38:31:2d:b1:dd:8c:de:27:c6:ed:
                    db:21:18:0c:e3:10:e1:03:9e:01:13:93:f2:f0:08:
                    48:4b:0f:44:28:d2:cc:eb:69:18:36:54:6f:5e:34:
                    0c:fa:93:ab:ed:73:2a:12:6d:5f:de:28:22:ed:6e:
                    c7:a4:b2:02:06:85:c4:fc:b1:3c:65:82:c1:90:5a:
                    5d:38:66:8a:af:fc:ec:07:db:a7:4c:1c:c0:75:5e:
                    de:60:74:18:48:06:bf:ce:ac:d8:f7:08:d5:4c:61:
                    3b:98:60:7c:77:e4:fc:18:a0:f9:f9:55:11:e8:42:
                    58:24:cd:7b:20:39:75:8c:18:7a:72:ff:69:93:1d:
                    25:0f:15:97:d2:63:d9:a2:38:30:48:53:2a:93:cd:
                    aa:11:2c:5d:b0:9c:11:ff:65:1f:f1:96:27:88:8a:
                    17:82:cd:a3:12:53:a9:bf:36:9e:62:a1:90:07:3b:
                    90:2c:d0:07:c2:cc:f2:a4:26:9a:49:a0:d3:29:6b:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:29:53:92:B0:DF:23:D4:6C:45:6E:98:F5:63:4C:5F:70:73:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/14aaee4f-495e-38c7-8dad-74d51e89c685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:e8:5c:41:09:cc:a9:d6:3f:a3:96:f0:03:68:d6:78:f7:
         26:ce:c8:b6:09:9b:4e:03:f3:cb:37:fc:f4:42:c8:fd:26:e7:
         cb:b6:ae:b8:97:8d:fd:6c:4c:e0:c6:b0:cd:41:11:98:66:6f:
         de:96:56:65:c5:14:90:c4:71:56:b8:df:de:34:e5:c9:ec:93:
         c8:55:a0:e8:bd:41:16:04:de:53:ad:60:69:eb:ea:ec:ae:29:
         f9:cd:6b:e4:eb:ab:75:93:53:01:a7:e0:ad:69:f3:99:aa:22:
         70:a3:89:24:58:f8:38:18:10:a6:4a:b4:b5:9c:4a:2b:e8:9e:
         60:36:45:61:52:e3:3e:d3:18:98:69:b5:4b:fe:7f:0b:f4:ce:
         a3:73:1f:12:0c:5e:db:d8:04:61:2c:13:9a:2c:d2:af:d5:47:
         dd:f6:e6:a8:86:27:f8:8a:2a:9f:f9:73:73:a5:b3:8b:d2:60:
         dd:d6:9f:d8:c0:e6:6d:c9:79:35:0b:d5:e2:4c:27:b5:f0:52:
         db:16:fb:cb:bc:79:78:61:e9:50:5b:e2:22:e5:ab:b1:75:c9:
         9a:f8:55:e8:fe:2c:8c:93:cb:ab:85:0e:01:26:f0:0e:ea:cc:
         e1:32:fd:c6:3b:e2:fd:87:b0:70:05:69:ba:1b:86:4b:b6:89:
         41:e3:60:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2/MLbdIILh9gAc4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTE5MDcxNzExNTE1N1oXDTI0MDgwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDIyNDAyZGQtMjhhNi00MjdjLWI5NmQtNzIyZTg5N2YwMGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDSpMEzOVGnBo88ML1FveqxTdhZjdjFQBqGK
XX8jBn4V3c45LN9LNn50AlW1QvoGBvnKQk8sp08iJc46zyGqpTgxLbHdjN4nxu3b
IRgM4xDhA54BE5Py8AhISw9EKNLM62kYNlRvXjQM+pOr7XMqEm1f3igi7W7HpLIC
BoXE/LE8ZYLBkFpdOGaKr/zsB9unTBzAdV7eYHQYSAa/zqzY9wjVTGE7mGB8d+T8
GKD5+VUR6EJYJM17IDl1jBh6cv9pkx0lDxWX0mPZojgwSFMqk82qESxdsJwR/2Uf
8ZYniIoXgs2jElOpvzaeYqGQBzuQLNAHwszypCaaSaDTKWt+IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvAKVOSsN8j1GxFbpj1Y0xfcHOpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMTRhYWVlNGYtNDk1ZS0z
OGM3LThkYWQtNzRkNTFlODljNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP40+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNq6FxBCcyp1j+jlvADaNZ49ybOyLYJm04D88s3/PRCyP0m58u2rriX
jf1sTODGsM1BEZhmb96WVmXFFJDEcVa439405cnsk8hVoOi9QRYE3lOtYGnr6uyu
KfnNa+Trq3WTUwGn4K1p85mqInCjiSRY+DgYEKZKtLWcSivonmA2RWFS4z7TGJhp
tUv+fwv0zqNzHxIMXtvYBGEsE5os0q/VR9325qiGJ/iKKp/5c3Ols4vSYN3Wn9jA
5m3JeTUL1eJMJ7XwUtsW+8u8eXhh6VBb4iLlq7F1yZr4Vej+LIyTy6uFDgEm8A7q
zOEy/cY74v2HsHAFabobhku2iUHjYLE=
-----END CERTIFICATE-----