Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d9f9592-fc68-3979-a5a5-0a8232721808.roa
File:                     2d9f9592-fc68-3979-a5a5-0a8232721808.roa (raw, json)
Hash identifier:          Ee7mkxGm3yGy6L4nODrb9rWVPtjrFXFp0kOoME80xwk=
Subject key identifier:   A4:13:CD:22:95:01:C6:62:91:F9:43:64:A7:55:8F:A5:41:F3:14:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285839EBAE73F2D4E43287917A0D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d9f9592-fc68-3979-a5a5-0a8232721808.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Thu 17 Aug 2023 04:00:00 +0000
asID:                     14123
IP address blocks:        166.1.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:eb:ae:73:f2:d4:e4:32:87:91:7a:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Aug 17 04:00:00 2023 GMT
        Subject: CN=eca90400-3d1e-486d-ac07-28ca40f2443b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:27:52:b9:eb:a4:51:c1:16:f7:d2:e7:2d:
                    68:d0:6f:df:8b:22:bf:c0:ea:b5:bf:eb:b2:79:58:
                    1a:9f:12:25:67:86:d7:67:d3:48:05:64:f9:80:cc:
                    95:b0:df:5d:07:c2:21:a2:ef:ca:a1:7a:01:fd:a4:
                    e4:1c:77:61:3e:a9:17:81:1c:8e:59:14:7c:76:d9:
                    a7:64:1c:a7:b7:ff:ce:7a:dd:44:6f:2a:15:08:59:
                    8b:86:db:fa:b6:10:64:29:58:2a:43:0e:28:5c:3b:
                    96:da:a5:a5:14:9e:84:5d:48:05:3a:33:9a:5d:42:
                    c9:f6:2e:8d:21:cb:96:ec:bc:48:b4:6e:95:82:91:
                    e1:4b:6a:51:f5:73:34:84:f5:42:15:32:00:d9:c3:
                    c1:42:da:c1:9f:c4:b5:96:67:4c:cc:3e:b8:73:8d:
                    b6:28:52:ec:34:58:8d:f6:9a:0f:0c:93:95:67:ad:
                    8a:45:8c:c5:a5:3c:ce:45:61:e5:dd:48:e5:bc:e7:
                    f2:f7:65:56:c7:46:2f:7a:9c:e3:1e:62:9d:4d:12:
                    80:4c:d7:30:f9:0a:9f:8b:42:c5:ec:d4:ee:ce:18:
                    08:89:1e:aa:ae:25:ff:2f:e2:99:53:83:eb:f9:75:
                    fc:ac:88:f8:66:71:1c:3e:cb:ee:03:bb:33:82:28:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:13:CD:22:95:01:C6:62:91:F9:43:64:A7:55:8F:A5:41:F3:14:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d9f9592-fc68-3979-a5a5-0a8232721808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:16:42:04:ed:8f:24:77:ef:4f:20:17:66:48:5a:ba:27:
         c9:aa:ca:00:f8:06:6d:6b:ec:6d:60:58:6f:b4:d7:5c:f3:1f:
         16:37:28:fd:e4:f3:d4:a1:13:80:b2:87:7a:56:56:69:e5:c7:
         a4:b9:83:35:c7:17:46:cb:6d:27:a9:cc:f0:11:26:0f:a0:b7:
         78:36:51:9c:a3:ab:34:9a:75:12:91:18:d8:d6:5a:5b:b2:3e:
         b8:62:2e:96:e3:52:8a:6c:d4:6a:22:bc:a2:04:b5:1a:5b:c2:
         c7:c5:8a:27:eb:9d:98:4a:6b:cc:11:49:d0:7c:c9:3f:87:4c:
         7b:94:13:3c:11:75:f1:8c:49:36:9a:2e:eb:2a:8a:fc:4c:b5:
         16:ed:59:2e:85:da:82:0f:b4:5e:8f:36:be:8f:52:30:a5:8b:
         22:72:fc:0f:09:48:f3:ea:be:55:65:d3:36:79:a1:4d:ba:aa:
         65:28:ac:83:33:f0:70:c6:0b:59:99:c9:64:26:a7:15:c0:a9:
         55:fa:92:bf:cb:3c:24:53:94:cb:14:89:65:13:78:72:6a:53:
         86:1c:a3:30:06:c8:06:8e:66:7d:fa:95:1a:e8:c8:4c:b3:d0:
         09:dd:c4:9f:a9:d8:af:84:3c:71:4f:be:22:5e:40:a2:34:2c:
         aa:35:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----