Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3765dec-15c1-3513-8f9b-80e270121a0e.roa
File:                     a3765dec-15c1-3513-8f9b-80e270121a0e.roa (raw, json)
Hash identifier:          pKapE/4WIybIpVbqqqQkLH4l4PHyb3TPyk8iqqpjYCE=
Subject key identifier:   FD:97:5E:E3:E3:86:BB:84:6C:90:96:EF:C4:A2:88:93:8B:C7:87:AD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228A0F8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3765dec-15c1-3513-8f9b-80e270121a0e.roa
Signing time:             Fri 30 Nov 2018 01:08:09 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.17.96.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Tue 10 Dec 2024 03:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:a0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=cdb73a12-a747-4fd9-a71a-d829f6d2f653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:fb:f2:d5:cb:96:59:16:97:25:c5:3b:3e:
                    ed:01:3d:db:5e:e9:e3:8c:0d:91:36:d9:ea:20:48:
                    4e:cc:0b:1b:fa:3a:b4:ea:d1:3e:70:d6:67:2c:63:
                    60:a5:8b:0a:b6:85:fb:7e:85:b0:94:7f:05:fb:53:
                    4b:15:c2:9b:be:2b:9c:08:8b:df:b4:17:49:b3:0e:
                    53:18:20:5c:83:c6:1c:54:37:56:79:d2:d4:32:72:
                    21:ac:85:1d:c4:27:8a:8f:f7:4a:b5:fe:f5:4c:bc:
                    bb:d5:12:21:c3:19:56:dd:bc:12:f7:a5:88:76:82:
                    ba:31:77:90:a6:8c:91:2a:c8:5b:dc:7c:2c:30:c8:
                    d0:33:35:8a:78:47:72:b8:d8:11:d8:4e:79:e0:6d:
                    fe:bd:b4:51:2b:5b:e7:76:a9:95:bd:0b:2c:0c:a0:
                    fc:f2:3f:15:32:c7:28:ca:55:ef:cd:ed:a2:38:bf:
                    c6:27:96:3c:48:ae:37:7e:b7:19:62:c5:57:66:8c:
                    74:51:ce:c2:05:08:d1:b4:18:5e:a0:58:9a:c5:c1:
                    15:e6:60:a9:78:dc:2d:bd:52:49:1c:07:c5:62:8b:
                    8b:4a:98:f8:1d:56:83:fd:d5:3f:9d:c3:a8:5a:c0:
                    e6:8e:b2:7e:f6:8c:20:76:6a:e2:e7:f2:a6:6b:24:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:97:5E:E3:E3:86:BB:84:6C:90:96:EF:C4:A2:88:93:8B:C7:87:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3765dec-15c1-3513-8f9b-80e270121a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ea:bb:00:55:bf:c4:ba:98:5e:16:09:97:d8:36:5c:3d:a3:
         a7:b3:8a:37:ab:e4:58:5c:49:df:6a:6a:56:18:f1:20:e4:76:
         6b:e7:f9:1f:c2:1a:f2:62:32:5c:0d:98:77:65:0d:2f:1e:05:
         88:e8:ca:5e:4d:65:90:dc:37:d6:c8:cc:0e:75:d5:07:f0:86:
         af:4c:57:81:f3:37:0a:8a:b4:21:71:e2:14:e5:55:b2:b3:4a:
         09:12:af:13:55:75:9e:4d:5d:05:bf:9c:fb:b4:b6:fa:23:65:
         1a:e9:bd:ac:1c:1f:f4:1f:33:d2:83:e9:66:14:29:e9:9d:e4:
         72:b8:7e:8b:cb:73:d9:02:6f:62:f2:ee:55:3b:c6:15:f9:69:
         51:40:18:56:d3:17:db:48:31:4e:d7:c3:d3:45:a8:ed:b7:49:
         b7:87:04:d7:71:66:fc:cf:c1:e2:b2:bc:66:ad:96:cb:34:d9:
         9e:62:5a:18:2b:f7:89:74:32:ff:ae:1a:f5:04:b8:78:f1:3d:
         40:c5:ff:7e:0b:2a:c7:49:a0:fe:ce:18:b8:ae:4c:04:28:da:
         8e:de:e5:40:08:26:7d:a8:bf:0f:59:3a:2d:d3:75:5b:f0:07:
         06:42:77:23:ea:b0:02:0b:e8:74:53:f1:aa:d6:c6:e1:f8:28:
         a3:3e:d7:11
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IooPgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGNk
YjczYTEyLWE3NDctNGZkOS1hNzFhLWQ4MjlmNmQyZjY1MzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANEC+/LVy5ZZFpclxTs+7QE9217p44wNkTbZ6iBI
TswLG/o6tOrRPnDWZyxjYKWLCraF+36FsJR/BftTSxXCm74rnAiL37QXSbMOUxgg
XIPGHFQ3VnnS1DJyIayFHcQnio/3SrX+9Uy8u9USIcMZVt28EveliHaCujF3kKaM
kSrIW9x8LDDI0DM1inhHcrjYEdhOeeBt/r20UStb53aplb0LLAyg/PI/FTLHKMpV
783toji/xieWPEiuN363GWLFV2aMdFHOwgUI0bQYXqBYmsXBFeZgqXjcLb1SSRwH
xWKLi0qY+B1Wg/3VP53DqFrA5o6yfvaMIHZq4ufypmskllMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT9l17j44a7hGyQlu/EooiTi8eHrTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2EzNzY1ZGVjLTE1YzEtMzUx
My04ZjliLTgwZTI3MDEyMWEwZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgRYDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAs+q7AFW/xLqYXhYJl9g2XD2jp7OKN6vkWFxJ32pqVhjxIOR2a+f5H8Ia8mIy
XA2Yd2UNLx4FiOjKXk1lkNw31sjMDnXVB/CGr0xXgfM3Coq0IXHiFOVVsrNKCRKv
E1V1nk1dBb+c+7S2+iNlGum9rBwf9B8z0oPpZhQp6Z3kcrh+i8tz2QJvYvLuVTvG
FflpUUAYVtMX20gxTtfD00Wo7bdJt4cE13Fm/M/B4rK8Zq2WyzTZnmJaGCv3iXQy
/64a9QS4ePE9QMX/fgsqx0mg/s4YuK5MBCjajt7lQAgmfai/D1k6LdN1W/AHBkJ3
I+qwAgvodFPxqtbG4fgooz7XEQ==
-----END CERTIFICATE-----