Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09090b15-c3ff-3ccc-9a1b-2fbbdc8e4557.roa
File:                     09090b15-c3ff-3ccc-9a1b-2fbbdc8e4557.roa (raw, json)
Hash identifier:          tr6UkxUP/HTqzq1abWfHzrphmnxtJN7AtvUtJPlBY3k=
Subject key identifier:   97:96:1C:02:6B:F8:3C:4B:A4:B1:D7:93:03:D3:FD:EE:41:95:0C:D5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583AE9958626C57F3B27483F1D40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09090b15-c3ff-3ccc-9a1b-2fbbdc8e4557.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Thu 16 Nov 2023 05:00:00 +0000
asID:                     19437
IP address blocks:        166.1.80.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:e9:95:86:26:c5:7f:3b:27:48:3f:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Nov 16 05:00:00 2023 GMT
        Subject: CN=baa6c526-08fd-412a-9c95-404792b478b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:22:50:6a:a8:a5:d4:be:40:86:30:12:0d:
                    d3:21:e6:1e:0f:55:b4:e1:21:eb:84:61:e9:91:7a:
                    f6:9a:f4:28:6c:df:5d:69:75:40:20:86:ce:22:98:
                    0e:04:a6:0d:cd:43:5d:09:81:b3:39:a4:7c:a2:86:
                    b0:f8:05:4e:c9:b5:53:09:b4:26:bf:55:64:aa:b9:
                    c4:44:79:11:59:ca:bb:b2:84:b0:49:57:2b:d7:62:
                    43:d5:a2:12:2b:14:67:3e:ed:f1:9c:7f:85:28:35:
                    74:74:8b:cd:73:92:a4:d9:4c:aa:6d:ec:b0:ae:9e:
                    4f:44:01:77:4b:27:e3:ae:07:33:da:44:60:1c:da:
                    d5:15:80:00:3e:6c:b6:7d:c2:71:7b:c6:8d:04:b1:
                    ab:ac:e2:1f:87:1b:27:52:92:eb:fb:63:68:f8:22:
                    e9:e1:fe:ba:6b:1b:00:13:e3:a5:38:3e:be:79:93:
                    26:d5:5a:1b:03:a0:37:db:4a:7f:85:f4:5e:77:3b:
                    84:04:05:d4:db:0f:a4:a9:2e:78:96:56:85:27:4c:
                    7c:e0:b1:86:d2:7c:e2:17:2b:e7:43:4e:ca:47:84:
                    22:2a:3b:93:47:a7:cb:b3:b8:90:1a:c1:42:67:c8:
                    db:8b:26:68:57:4f:04:b6:77:19:15:a4:26:68:f3:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:1C:02:6B:F8:3C:4B:A4:B1:D7:93:03:D3:FD:EE:41:95:0C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09090b15-c3ff-3ccc-9a1b-2fbbdc8e4557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7b:50:69:90:8a:60:8b:b2:b0:ef:27:8c:3f:78:96:f7:15:
         49:01:1d:46:35:5e:83:cb:13:0c:2d:c2:e7:97:c4:0d:8f:5a:
         35:4f:f8:0c:de:80:34:c0:44:80:68:e1:ad:dd:6d:c5:fd:d1:
         6c:aa:75:e0:3f:e6:79:24:85:8a:ec:90:c4:4d:37:30:a7:23:
         99:c2:cb:12:6f:11:1c:3a:55:65:34:02:46:e2:dd:b5:8d:ea:
         36:c2:ef:33:61:79:24:2a:70:fd:cc:27:32:d8:28:a6:47:dc:
         50:ce:ad:3a:28:09:60:c2:01:f5:0e:0d:d5:6b:67:0b:be:86:
         af:9a:d8:27:6f:30:d4:8c:1f:82:22:9c:a7:6b:19:bf:56:b3:
         9a:60:28:e2:d2:de:37:4e:b2:9f:5c:27:63:7e:05:f3:be:2f:
         68:0d:74:83:8b:ea:db:3d:d8:86:90:f2:6d:cb:cc:c9:48:41:
         aa:0a:09:9f:ea:4c:be:e6:f2:df:fd:83:1e:2c:e6:cd:0d:f2:
         86:b2:d1:4e:99:2d:1b:48:2c:a7:55:7f:95:5a:b6:ae:2b:77:
         5e:a6:7c:55:2e:92:16:a9:e0:a0:bf:d2:5d:40:fb:dd:90:0e:
         1e:83:30:7e:e9:57:75:44:1f:09:99:65:cf:73:a4:2f:5d:ec:
         72:d8:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----