Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44dde3cd-1526-389d-92ab-25dd50cb4ca2.roa
File:                     44dde3cd-1526-389d-92ab-25dd50cb4ca2.roa (raw, json)
Hash identifier:          rv3W/dP6khrr8lQR/b5hX40OyBe8KK3v/yZZgPo+B9g=
Subject key identifier:   6A:E5:CB:5D:F4:A0:F4:6B:5D:EC:9A:21:46:AD:DB:25:98:C1:49:24
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F92C6FD9D513A34C1040E5700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44dde3cd-1526-389d-92ab-25dd50cb4ca2.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 16 Jan 2025 05:00:00 +0000
asID:                     63023
IP address blocks:        108.165.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:92:c6:fd:9d:51:3a:34:c1:04:0e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jan 16 05:00:00 2025 GMT
        Subject: CN=fced8e38-520c-41d7-9b40-52ebe88a68ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:dd:db:da:a9:7c:89:65:ac:70:46:f8:10:
                    ce:4d:69:02:08:31:04:bb:b8:f3:64:a2:cf:58:78:
                    c2:af:2c:bd:30:92:48:6f:97:7b:dd:cf:74:05:50:
                    0b:47:bf:67:e2:77:80:58:04:49:18:be:cf:5f:00:
                    eb:b4:e6:d5:a3:e9:1e:9f:7e:a1:44:db:4a:1e:bd:
                    ba:a1:fb:06:ec:55:ec:1b:8f:6b:be:43:e3:fa:69:
                    07:df:31:b4:46:72:29:89:c7:ab:c5:c7:20:72:53:
                    9a:17:08:09:12:87:ff:95:c9:7c:9a:fa:f1:ef:c6:
                    94:0b:0e:65:13:9a:d3:a7:b4:b9:3a:3a:e2:4f:7f:
                    c2:42:74:89:7c:ca:75:14:6e:0e:0b:96:2e:13:c0:
                    c2:63:dd:e6:ea:98:fc:e4:c2:3d:81:44:66:f3:eb:
                    60:3d:a3:5b:42:eb:ec:2e:c2:00:1c:ed:76:36:41:
                    ab:13:c0:84:e0:46:96:10:75:9c:af:96:23:17:0c:
                    b3:81:36:fc:90:18:84:a4:83:cf:ee:11:4d:49:86:
                    ea:00:59:64:fa:5b:3e:61:dc:b4:61:b1:b6:66:96:
                    38:da:53:5a:3d:e4:de:29:e2:8d:31:f3:b0:85:dc:
                    f7:4e:c5:3d:e2:1b:e2:78:ef:b6:eb:d0:d3:1c:3d:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:CB:5D:F4:A0:F4:6B:5D:EC:9A:21:46:AD:DB:25:98:C1:49:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44dde3cd-1526-389d-92ab-25dd50cb4ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d7:47:22:7c:ab:6e:88:54:58:b7:ec:fb:67:52:ee:fb:47:
         dd:a2:a0:18:a9:7f:f9:55:62:3b:4d:51:37:13:b4:c6:ad:c7:
         3c:bb:41:c7:09:70:11:13:09:e8:ec:38:bc:e8:13:a6:f3:ef:
         f1:59:c7:56:1d:3c:61:5c:11:9d:d6:5a:77:4b:83:76:62:61:
         10:9f:d2:51:5a:66:8a:81:91:ac:1e:1b:a6:5a:9f:4b:94:f0:
         63:ca:ec:f2:01:7e:4a:ad:a7:a1:d5:1a:42:23:ff:bd:23:fa:
         09:b6:8f:10:2e:c5:23:99:48:30:d1:e9:f4:5b:f5:be:a1:59:
         bb:9f:f9:85:15:9c:6c:8e:49:c1:7f:ef:c5:31:cf:31:37:08:
         d0:4e:33:5e:f2:b6:5d:9a:e4:79:90:47:36:78:44:88:a5:3b:
         d9:1b:23:55:87:52:5f:ad:90:3b:9f:6a:98:da:23:c3:30:cc:
         ad:db:39:55:a4:4c:8a:0e:9b:b1:70:df:95:25:05:07:38:5a:
         3c:d0:3e:84:12:9b:8f:b8:bb:d7:d7:23:4d:eb:8f:8b:77:5a:
         32:c4:a2:3e:45:f4:74:f8:7c:65:9d:c0:45:9d:57:68:b4:00:
         bb:24:1b:e9:ca:5a:00:fd:2d:6b:07:44:83:88:3b:72:3e:a3:
         26:a6:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----