Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b412fa81-f950-3587-b786-0c11bd8586eb.roa
File:                     b412fa81-f950-3587-b786-0c11bd8586eb.roa (raw, json)
Hash identifier:          A7Utmre3Ioac2yuWYEEwjw+f1g7+JUtwO03jajCEwQc=
Subject key identifier:   FE:57:D9:F3:87:D5:2A:C3:FE:A3:13:9C:5C:5F:30:38:AD:44:BF:D8
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328583E62827A9399DC851C6EDBE280
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b412fa81-f950-3587-b786-0c11bd8586eb.roa
Signing time:             Mon 10 Feb 2020 18:18:36 +0000
ROA not before:           Mon 10 Feb 2020 18:18:36 +0000
ROA not after:            Sun 29 Sep 2024 04:00:00 +0000
asID:                     207459
IP address blocks:        68.67.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:62:82:7a:93:99:dc:85:1c:6e:db:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 10 18:18:36 2020 GMT
            Not After : Sep 29 04:00:00 2024 GMT
        Subject: CN=48822816-486e-4a03-8cef-110daa03aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:95:75:e3:27:e4:78:ff:4e:7c:bd:ca:b1:
                    81:b8:08:94:dd:bb:e9:d5:0e:81:a5:0e:7e:c7:d9:
                    ec:d3:82:51:e5:98:04:f9:c6:e2:07:03:6f:0a:9a:
                    df:e0:be:0d:cf:87:c3:91:e0:04:9c:cb:6d:45:ed:
                    7f:3a:7e:81:68:80:49:4e:4d:16:bb:59:e1:f8:76:
                    87:0e:fe:a5:03:2b:c5:5d:49:57:ea:4e:9a:70:69:
                    e4:18:99:a1:22:c5:28:25:8d:63:35:46:db:13:43:
                    7f:a2:07:10:c6:e5:a2:75:3c:01:80:bc:eb:e8:5e:
                    07:88:1f:8e:c3:27:f9:cb:c1:2a:c2:3d:4d:be:97:
                    a3:11:ae:e8:55:ea:45:56:59:9e:2b:27:73:a9:b4:
                    36:57:a9:d3:ee:c7:3e:68:c7:98:77:4b:c0:25:13:
                    fb:a5:ba:aa:57:47:10:8c:c9:1f:78:10:6f:47:ef:
                    33:b1:a4:9e:bd:ce:de:31:bf:a3:4a:9a:89:91:e0:
                    ce:35:24:50:16:a2:b3:24:ff:c2:61:0c:8c:7c:fb:
                    5a:c2:b2:0c:57:b8:20:78:8c:46:64:27:d5:23:76:
                    e1:ff:07:94:1d:55:e0:80:25:21:9a:8e:65:c1:bb:
                    76:65:56:9d:ae:36:4f:3a:6c:47:d3:99:b7:45:27:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:57:D9:F3:87:D5:2A:C3:FE:A3:13:9C:5C:5F:30:38:AD:44:BF:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b412fa81-f950-3587-b786-0c11bd8586eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:e9:71:79:e9:05:81:d0:e6:8b:83:c2:73:8f:0b:e6:5b:
         c2:42:10:3e:26:58:40:dc:e4:6a:36:e8:98:d7:36:78:0b:08:
         ba:d2:71:c1:86:88:5d:35:3e:6c:48:0c:64:d2:34:88:14:df:
         81:25:64:3b:fa:c9:36:8a:3c:fb:db:c6:f2:50:d7:22:1e:a6:
         01:5d:8d:50:b9:ac:8a:90:d7:b1:1d:3e:b8:52:04:70:da:66:
         9c:1a:e2:18:ec:9f:26:74:13:f7:6f:a8:23:f6:3b:28:1b:6b:
         3d:90:d8:ff:29:9a:90:78:0a:02:d6:df:40:cd:3c:7b:6a:13:
         f6:4c:10:68:a3:1a:ed:31:6c:9b:fd:6e:20:ed:fe:23:00:d9:
         5e:8b:b3:7e:85:06:91:ea:0c:b9:9a:52:a7:d8:cd:32:3b:5b:
         e4:97:74:95:0e:ec:47:86:29:4b:78:03:12:f2:1a:7c:37:fa:
         9d:71:26:46:00:30:aa:2f:43:83:38:cf:22:ef:8a:b3:e7:17:
         fe:d9:7c:94:2f:ec:2b:33:db:89:f1:ee:83:2e:57:45:89:43:
         8a:d5:96:88:70:fb:b1:99:b2:e9:59:57:56:ac:e2:4c:71:54:
         68:13:39:a7:be:94:f6:2c:04:f4:04:0f:90:16:e6:b9:e0:05:
         68:ce:b1:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5ignqTmdyFHG7b4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTIwMDIxMDE4MTgzNloXDTI0MDkyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NDg4MjI4MTYtNDg2ZS00YTAzLThjZWYtMTEwZGFhMDNhYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB+VdeMn5Hj/Tny9yrGBuAiU3bvp1Q6BpQ5+
x9ns04JR5ZgE+cbiBwNvCprf4L4Nz4fDkeAEnMttRe1/On6BaIBJTk0Wu1nh+HaH
Dv6lAyvFXUlX6k6acGnkGJmhIsUoJY1jNUbbE0N/ogcQxuWidTwBgLzr6F4HiB+O
wyf5y8Eqwj1NvpejEa7oVepFVlmeKydzqbQ2V6nT7sc+aMeYd0vAJRP7pbqqV0cQ
jMkfeBBvR+8zsaSevc7eMb+jSpqJkeDONSRQFqKzJP/CYQyMfPtawrIMV7ggeIxG
ZCfVI3bh/weUHVXggCUhmo5lwbt2ZVadrjZPOmxH05m3RSdnNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5X2fOH1SrD/qMTnFxfMDitRL/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYjQxMmZhODEtZjk1MC0z
NTg3LWI3ODYtMGMxMWJkODU4NmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJjd6XF56QWB0OaLg8JzjwvmW8JCED4mWEDc5Go26JjXNngLCLrSccGG
iF01PmxIDGTSNIgU34ElZDv6yTaKPPvbxvJQ1yIepgFdjVC5rIqQ17EdPrhSBHDa
Zpwa4hjsnyZ0E/dvqCP2Oygbaz2Q2P8pmpB4CgLW30DNPHtqE/ZMEGijGu0xbJv9
biDt/iMA2V6Ls36FBpHqDLmaUqfYzTI7W+SXdJUO7EeGKUt4AxLyGnw3+p1xJkYA
MKovQ4M4zyLvirPnF/7ZfJQv7Csz24nx7oMuV0WJQ4rVlohw+7GZsulZV1as4kxx
VGgTOae+lPYsBPQED5AW5rngBWjOsTw=
-----END CERTIFICATE-----