Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/358ae598-a157-3cd4-b74d-2b3d50ab759b.roa
File:                     358ae598-a157-3cd4-b74d-2b3d50ab759b.roa (raw, json)
Hash identifier:          PXVQIwSd7bLwonmA6DbsnQNhqJRx/Vaybkni/unKeVg=
Subject key identifier:   DF:BC:CD:64:2A:3B:A1:70:64:10:E2:65:D8:41:B0:38:7C:AA:59:AE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583D0CE40E20E9A17F84AEE7B280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/358ae598-a157-3cd4-b74d-2b3d50ab759b.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Thu 30 May 2024 04:00:00 +0000
asID:                     27630
IP address blocks:        166.0.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:e4:0e:20:e9:a1:7f:84:ae:e7:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : May 30 04:00:00 2024 GMT
        Subject: CN=f685f9be-9c5a-4082-a784-31fda24ed7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:25:db:de:59:24:d5:d6:5c:bc:5e:34:5d:
                    f0:e5:60:8d:0f:cf:b8:48:8e:8c:05:4b:03:6a:0a:
                    a4:37:4b:4c:4b:78:46:58:8b:15:79:e4:6d:03:63:
                    f9:af:50:6e:83:35:88:93:80:4d:ba:0c:cc:61:a7:
                    37:c2:f6:f7:26:4f:a2:c0:46:14:dc:39:e9:af:f3:
                    3b:b6:38:ff:e4:2a:3f:39:57:22:1f:5b:a2:7b:bd:
                    7f:b3:04:b9:6b:c5:a9:02:1f:54:47:32:d4:bf:91:
                    28:96:85:b3:1b:35:ad:9a:66:0f:01:a7:f8:bf:da:
                    82:f3:08:f8:ab:c0:91:b8:c3:f5:68:b3:51:01:43:
                    73:cc:f6:2d:bc:e4:51:3c:9f:b8:ff:a1:d6:48:f4:
                    00:95:b7:2f:eb:4a:5c:52:bf:2b:fa:e0:df:24:c4:
                    7b:4a:4a:eb:02:6c:e4:70:62:ff:59:b1:b1:cd:38:
                    99:72:30:93:68:31:72:46:d0:37:f4:fd:43:f9:21:
                    96:2e:c9:55:cb:b2:61:98:d7:74:e7:d2:b9:56:d3:
                    ca:d9:ae:20:05:0b:5e:db:7d:f1:0e:15:30:5a:be:
                    e6:69:28:67:a8:b4:a3:31:1f:22:53:e4:70:ab:ba:
                    9f:bc:b9:6c:44:29:af:ff:4d:a7:e2:43:67:5f:6f:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BC:CD:64:2A:3B:A1:70:64:10:E2:65:D8:41:B0:38:7C:AA:59:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/358ae598-a157-3cd4-b74d-2b3d50ab759b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:81:2a:5d:1d:15:24:e8:cf:90:42:84:65:e1:63:fc:c1:
         a2:4d:86:34:0e:67:1e:1d:45:75:68:ef:b8:ec:e7:72:87:fc:
         d9:5f:8d:af:3f:25:ea:87:ae:a9:32:1c:04:5f:7f:eb:81:49:
         d3:ec:44:be:6e:b6:d7:e3:75:a8:1a:a8:a7:b0:1a:f9:7b:a2:
         3b:a2:86:82:9c:1c:09:1d:f3:dc:db:d0:f6:a7:c6:8c:5e:ad:
         be:38:cc:cf:02:ac:62:fc:3d:21:9d:3e:f4:13:fa:94:ad:1e:
         14:09:cb:46:d7:e2:e6:36:a0:6d:98:d2:38:ce:4a:96:61:fa:
         46:2d:d3:67:55:ea:c8:5f:89:63:8e:fb:aa:ff:b0:fc:51:00:
         1d:82:2b:f5:72:47:3d:f9:11:d8:46:94:06:d3:48:de:18:ee:
         cb:c5:a9:10:1a:fe:6d:0b:50:bd:c4:fa:bf:a3:56:f0:70:e5:
         d6:c9:2b:36:a5:a2:2c:00:70:68:ee:81:be:84:2c:a8:ee:a2:
         ab:c7:20:ed:0e:71:86:bf:ec:38:01:2b:61:ed:8d:40:9d:3b:
         26:56:33:fb:2c:01:d6:2f:c7:9e:e2:bf:6b:37:0e:cb:cb:5d:
         96:e1:18:35:29:33:a6:2c:17:4f:93:6f:0c:7b:15:0a:57:a7:
         b8:45:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----