Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/ec056040-da2a-3831-8bf8-365ec616e52d.roa
File:                     ec056040-da2a-3831-8bf8-365ec616e52d.roa (raw, json)
Hash identifier:          gGyU8bUj0UaiHxdw/vD8Xk/Y9JmHTllEJw9ryPwZ/zo=
Subject key identifier:   2D:3A:FE:46:F0:BC:27:0C:BE:F0:00:F6:3A:0D:B2:2D:85:9C:77:2B
Certificate issuer:       /CN=cbe51a2e-768b-4b93-baac-8cae43186078
Certificate serial:       010D0C9F4328576D51CC73C042CFC16CD7DF1689
Authority key identifier: C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/ec056040-da2a-3831-8bf8-365ec616e52d.roa
Signing time:             Wed 28 Aug 2019 10:56:57 +0000
ROA not before:           Tue 27 Aug 2019 04:00:00 +0000
ROA not after:            Mon 27 Aug 2029 04:00:00 +0000
asID:                     394923
IP address blocks:        185.90.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 Jun 2022 14:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:d7:df:16:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe51a2e-768b-4b93-baac-8cae43186078
        Validity
            Not Before: Aug 27 04:00:00 2019 GMT
            Not After : Aug 27 04:00:00 2029 GMT
        Subject: CN=fefc290f-b9e9-4510-a054-6efadff3ddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:c3:5d:7f:29:93:f6:41:44:4b:28:5d:0e:
                    47:8d:3e:8a:14:82:0f:9b:9d:28:26:cc:bb:80:be:
                    cf:ba:db:2f:77:47:d7:c4:ed:6f:ca:93:4c:bb:cb:
                    4d:28:84:15:84:6e:9f:f3:d5:e3:12:ca:c3:a8:8a:
                    24:b7:f0:34:94:12:7c:12:0f:44:9f:4f:f2:dc:18:
                    dd:42:b4:6a:10:0c:37:d3:77:30:7e:d8:57:15:06:
                    9d:00:98:a0:98:6a:92:e4:ac:4b:f8:53:eb:1c:3c:
                    fa:f8:d4:29:3d:2b:f9:3f:6d:96:f7:af:c4:97:9f:
                    57:2d:c4:9f:f8:8d:9f:d7:d8:35:f7:9d:14:82:bc:
                    e9:40:a8:77:4c:c5:c2:be:5b:ee:2f:e7:20:19:2e:
                    88:6c:b0:e6:a1:42:62:a0:66:3b:18:fc:6b:1a:0c:
                    c1:70:9f:00:f1:e8:05:95:ef:af:d2:12:91:1f:7d:
                    eb:cb:cf:41:0c:1a:20:65:6c:db:39:d0:e0:01:98:
                    fe:45:bf:d6:6f:d1:b1:18:a1:11:2d:d9:2c:f7:b3:
                    72:cd:9f:a8:2b:5b:20:e1:9d:4c:70:3c:9a:11:47:
                    b9:7b:c0:46:dd:7d:b7:37:bc:7a:72:1c:8a:02:84:
                    08:94:3f:26:20:3d:99:e5:54:b6:dd:ea:d0:d7:52:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3A:FE:46:F0:BC:27:0C:BE:F0:00:F6:3A:0D:B2:2D:85:9C:77:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/ec056040-da2a-3831-8bf8-365ec616e52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:37:32:51:59:b4:c7:c8:f5:a5:c5:1a:ce:a1:70:42:67:
         de:d3:fb:f2:5a:7f:e4:e6:6f:37:25:7e:59:86:1d:2c:71:21:
         bc:8b:0b:a4:54:18:70:f3:73:d5:9f:6d:c7:f5:69:9e:fb:2d:
         5a:18:c3:2c:39:e8:bc:99:65:b8:82:fe:1e:76:07:cc:07:3c:
         43:99:51:21:cd:a9:00:f1:e5:de:d7:aa:68:b8:0d:b6:ae:b6:
         98:1e:5f:c7:ea:05:24:f2:e5:5b:8d:ab:95:6a:43:c8:c1:5e:
         aa:be:29:c9:4d:ae:1f:f8:d1:72:db:5e:e2:c8:6b:e2:51:ab:
         4d:97:de:c5:9a:2b:73:20:83:e5:a7:4b:9b:f9:1d:b9:07:a1:
         64:35:4c:ca:83:f4:2a:76:79:03:fb:8a:40:87:46:22:c2:fa:
         b8:7f:6b:26:7c:cf:85:2f:b9:47:d1:a7:84:79:41:86:b4:7a:
         19:d2:0e:ae:77:9d:60:00:e8:45:8f:15:8a:d0:f7:07:c1:86:
         59:23:00:9e:66:78:55:6d:9b:fc:e9:53:49:5b:f3:6f:a0:fb:
         92:db:52:2e:eb:14:4e:fd:f9:8f:5b:e7:30:31:b9:ab:88:d5:
         8b:0a:e2:cc:56:e8:fe:8a:78:e8:b0:70:b2:c4:8b:3b:7e:c6:
         e5:57:d0:1d
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbNffFokwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGNiZTUxYTJlLTc2OGItNGI5My1iYWFjLThjYWU0MzE4NjA3
ODAeFw0xOTA4MjcwNDAwMDBaFw0yOTA4MjcwNDAwMDBaMC8xLTArBgNVBAMTJGZl
ZmMyOTBmLWI5ZTktNDUxMC1hMDU0LTZlZmFkZmYzZGRkYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKTMw11/KZP2QURLKF0OR40+ihSCD5udKCbMu4C+
z7rbL3dH18Ttb8qTTLvLTSiEFYRun/PV4xLKw6iKJLfwNJQSfBIPRJ9P8twY3UK0
ahAMN9N3MH7YVxUGnQCYoJhqkuSsS/hT6xw8+vjUKT0r+T9tlvevxJefVy3En/iN
n9fYNfedFIK86UCod0zFwr5b7i/nIBkuiGyw5qFCYqBmOxj8axoMwXCfAPHoBZXv
r9ISkR9968vPQQwaIGVs2znQ4AGY/kW/1m/RsRihES3ZLPezcs2fqCtbIOGdTHA8
mhFHuXvARt19tze8enIcigKECJQ/JiA9meVUtt3q0NdSf1kCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQtOv5G8LwnDL7wAPY6DbIthZx3KzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JlNTFh
MmUtNzY4Yi00YjkzLWJhYWMtOGNhZTQzMTg2MDc4L2VjMDU2MDQwLWRhMmEtMzgz
MS04YmY4LTM2NWVjNjE2ZTUyZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NiZTUxYTJlLTc2OGItNGI5My1iYWFj
LThjYWU0MzE4NjA3OC9jYmU1MWEyZS03NjhiLTRiOTMtYmFhYy04Y2FlNDMxODYw
NzguY3JsMB8GA1UdIwQYMBaAFMmVzT+ffoQE//H8F6UM3D/iL1bjMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvY2JlNTFhMmUtNzY4Yi00YjkzLWJhYWMtOGNhZTQz
MTg2MDc4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALla9DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAWM03MlFZtMfI9aXFGs6hcEJn3tP78lp/5OZvNyV+WYYdLHEhvIsLpFQYcPNz
1Z9tx/VpnvstWhjDLDnovJlluIL+HnYHzAc8Q5lRIc2pAPHl3teqaLgNtq62mB5f
x+oFJPLlW42rlWpDyMFeqr4pyU2uH/jRctte4shr4lGrTZfexZorcyCD5adLm/kd
uQehZDVMyoP0KnZ5A/uKQIdGIsL6uH9rJnzPhS+5R9GnhHlBhrR6GdIOrnedYADo
RY8VitD3B8GGWSMAnmZ4VW2b/OlTSVvzb6D7kttSLusUTv35j1vnMDG5q4jViwri
zFbo/op46LBwssSLO37G5VfQHQ==
-----END CERTIFICATE-----