Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14fe4428-2785-344a-87ed-2dd07833238f.roa
File:                     14fe4428-2785-344a-87ed-2dd07833238f.roa (raw, json)
Hash identifier:          +FZmK9P2LL2B/BwfmUIOJ47wvxkUUS+SLZoKuQRFuFg=
Subject key identifier:   C4:F6:38:CE:13:C3:EC:D8:59:50:C1:B5:AF:4F:B5:DF:15:E0:79:E8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858403F03D664CC898ADC754538C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14fe4428-2785-344a-87ed-2dd07833238f.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 19 Mar 2025 04:00:00 +0000
asID:                     14576
IP address blocks:        166.0.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3f:03:d6:64:cc:89:8a:dc:75:45:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Mar 19 04:00:00 2025 GMT
        Subject: CN=ffec6abc-cac3-4c62-a5f0-1496b7e143df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:fc:4b:f6:a0:bf:43:9c:02:50:55:94:ce:
                    93:0d:a4:d6:39:e7:66:e6:9d:b6:2f:90:32:8b:a7:
                    0a:17:91:7f:c5:5d:38:75:47:4a:c8:72:d3:9d:07:
                    5d:74:6a:25:e3:8e:cd:b7:54:5f:26:25:79:4d:5a:
                    75:93:c4:6b:da:d2:cd:93:34:af:89:56:93:bb:85:
                    97:15:be:44:a2:ce:4a:fa:e4:78:fe:17:bd:ef:b9:
                    2a:2c:c4:11:78:76:af:13:e2:24:51:02:95:ad:59:
                    0a:bf:13:79:7e:7c:40:c8:7f:dc:f9:c3:b8:6f:20:
                    a6:c0:37:44:27:e4:84:62:71:7c:09:06:da:e0:10:
                    5c:6e:11:76:51:8a:ec:70:f9:12:d8:30:13:f6:62:
                    43:93:31:cb:20:fc:87:dd:e0:63:3b:cd:00:0a:39:
                    08:f3:06:ce:ce:43:bd:9f:88:11:9b:f1:e4:19:9c:
                    75:44:1d:d2:4d:6a:56:85:9c:85:76:81:00:85:fc:
                    69:65:c9:d6:d1:75:b2:a2:fa:f0:a9:87:7f:c2:a7:
                    35:2f:2c:ca:0e:29:e3:67:e0:4e:e2:48:ab:88:77:
                    b0:2e:3c:bb:82:72:54:59:1e:cf:96:21:9b:96:d9:
                    f0:7e:85:be:9f:23:5b:43:ae:be:ac:88:d1:d4:63:
                    b0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F6:38:CE:13:C3:EC:D8:59:50:C1:B5:AF:4F:B5:DF:15:E0:79:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14fe4428-2785-344a-87ed-2dd07833238f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:2a:15:a5:9e:73:18:fe:48:e8:c9:79:99:74:43:3c:ad:
         ba:12:d1:ed:95:c6:5e:e1:55:49:1d:7f:61:37:13:1e:78:97:
         78:b3:2f:4d:c3:85:e0:6b:81:10:41:8a:09:ad:3d:38:12:85:
         60:10:e6:7f:5d:97:67:6b:b7:02:f1:1e:70:b7:6e:70:f5:75:
         4b:db:b0:f2:34:a9:7f:6e:f3:fb:c8:a0:9d:02:63:d1:f3:5e:
         83:9c:f6:e7:11:3b:3e:80:ac:57:66:ab:d4:39:a1:98:a9:72:
         68:37:48:0a:59:13:dc:ea:34:1b:a6:ee:89:21:a1:ae:5a:23:
         62:8a:7c:df:d3:c8:3f:64:a2:f9:8c:36:49:2d:6a:b0:0f:62:
         da:b6:76:6a:fd:8b:17:4b:7f:3f:28:fc:2e:13:05:a9:a3:67:
         7c:1a:91:2f:76:07:8f:38:db:a5:0f:b1:b8:65:7d:cc:96:33:
         48:4d:f4:cc:da:d5:7a:bd:eb:6b:89:7d:ab:84:a5:48:ae:0e:
         5a:79:8d:cc:5f:b6:b3:05:0d:da:36:c4:64:8b:b5:fc:e6:35:
         ea:f9:d7:82:bf:15:41:56:a8:dd:fd:f2:a7:25:23:3d:69:73:
         1c:f5:75:ef:cb:19:16:2f:e8:b1:71:3a:dc:34:82:a4:2a:14:
         ff:8d:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----