Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a2ac353-f1c9-332d-8bac-f0c0602500a7.roa
File:                     0a2ac353-f1c9-332d-8bac-f0c0602500a7.roa (raw, json)
Hash identifier:          MOlRltDP2Gz+/6JkP/rtg6n5TX5kCR99+a61tLAIBXU=
Subject key identifier:   89:51:6F:FD:BB:04:3A:25:19:24:43:81:5B:03:08:94:33:6A:E5:39
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858415C0FB3D174FFB31A10E46B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a2ac353-f1c9-332d-8bac-f0c0602500a7.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 29 Jun 2025 04:00:00 +0000
asID:                     207279
IP address blocks:        166.0.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:5c:0f:b3:d1:74:ff:b3:1a:10:e4:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 29 04:00:00 2025 GMT
        Subject: CN=cb0e6d6b-fea2-446b-9cde-7749b7484a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6b:8c:75:26:df:0b:0b:12:cc:62:d0:0c:76:
                    d5:38:45:11:c5:84:11:10:26:d4:54:5a:4a:f6:82:
                    f2:4e:c0:e3:70:b2:77:ff:46:2a:73:81:43:ea:6e:
                    9d:6f:a8:88:d8:60:cf:5e:5f:4b:3b:e9:6f:21:75:
                    cb:b8:5e:d0:15:77:df:85:03:58:96:09:9c:d2:f4:
                    08:de:4a:a2:dd:64:07:51:cc:72:76:d5:0b:43:7e:
                    95:a0:35:76:ef:db:5e:d1:ff:6b:b8:bb:ce:6a:c5:
                    f5:5b:d5:c5:87:d3:5b:5c:7b:b4:8e:49:cb:19:d3:
                    f5:3b:cf:3f:3c:c6:b3:c5:46:c7:23:e1:8a:5a:09:
                    3f:ad:e4:8b:3c:3a:98:dd:2e:33:51:85:4e:d9:ff:
                    bd:35:6f:d8:d0:6b:10:7a:7a:8d:a3:67:54:9b:27:
                    54:f2:e0:5c:87:02:b6:e2:75:5d:71:ff:29:fd:80:
                    07:a0:19:01:0d:07:8a:67:43:68:80:7a:93:57:af:
                    94:de:bd:30:c7:6a:55:1a:8e:32:e6:7d:90:9a:15:
                    6b:e2:34:9d:df:ac:3e:8d:c9:9a:6b:36:ed:65:47:
                    44:37:4e:98:67:f4:52:7d:35:5d:b7:2f:ca:fd:b7:
                    e7:d9:50:4c:09:4b:86:62:2f:e4:6c:bb:80:a5:0f:
                    88:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:51:6F:FD:BB:04:3A:25:19:24:43:81:5B:03:08:94:33:6A:E5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a2ac353-f1c9-332d-8bac-f0c0602500a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:84:4c:70:e5:74:3a:6b:02:bd:aa:d5:d0:7b:d1:4f:7e:
         58:5f:49:7f:c4:5c:03:ef:5a:3e:71:1a:3d:3f:4d:31:9a:e3:
         14:fa:c3:2d:71:03:10:ab:ce:58:96:cc:6f:49:38:d4:14:51:
         8c:41:82:75:cc:c7:b5:a6:71:2c:ce:8c:94:4c:0d:4a:9e:ba:
         87:19:7a:f9:d6:4b:95:7a:96:45:9c:20:5f:ae:9c:a0:f6:0e:
         1a:9f:cb:4a:01:96:ef:06:b3:ae:fa:d5:54:c1:04:31:78:72:
         8e:a2:f5:e1:45:86:8e:5c:72:df:8b:15:d0:9d:20:cd:11:63:
         e2:8b:2f:e3:31:55:64:6f:9b:e3:bc:4e:e8:43:b8:69:97:05:
         04:0f:1b:66:ec:a8:a3:29:ba:6e:71:ba:7a:fc:53:14:70:a1:
         3f:16:f4:f8:a2:30:59:87:e1:09:0c:69:8a:d3:62:4e:4c:b6:
         ed:77:18:de:6c:48:1e:70:4b:1b:80:ee:e8:6f:3b:24:9c:0d:
         31:fb:39:ee:39:87:ba:ff:0c:27:6c:d7:1f:55:6e:9a:30:15:
         b5:c7:67:9a:02:12:4e:16:33:32:94:d9:2d:c4:84:3d:73:f7:
         f6:36:d1:c8:ea:ad:39:47:0b:8d:dd:4a:3b:ff:68:70:5a:54:
         9a:58:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----