Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77be138b-b285-3545-a766-e59c0df68d78.roa
File:                     77be138b-b285-3545-a766-e59c0df68d78.roa (raw, json)
Hash identifier:          Qwqm+/BdZPZbFF4nNVRGTIrutUbDMfXiefqdm5rAFB4=
Subject key identifier:   B6:4C:F1:75:4D:D4:28:C3:63:97:CB:1C:63:89:FD:42:FA:51:F2:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858415B30B3538F0FBB5ACE6D9700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77be138b-b285-3545-a766-e59c0df68d78.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 29 Jun 2025 04:00:00 +0000
asID:                     207279
IP address blocks:        166.0.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:5b:30:b3:53:8f:0f:bb:5a:ce:6d:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 29 04:00:00 2025 GMT
        Subject: CN=1d58753d-273d-4158-be73-3cb476d8a6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:60:d7:8b:8f:c5:8c:17:de:6e:cc:91:2a:
                    23:25:b0:7a:5d:68:cf:4b:75:c5:d2:06:11:cd:3a:
                    46:8c:2a:46:5a:e2:5a:d6:70:6e:a0:87:dc:20:f7:
                    d8:64:a4:84:ce:f1:34:1c:c5:aa:f6:8a:bc:12:5d:
                    95:cf:39:dd:23:13:df:59:1c:aa:13:05:7d:98:2d:
                    70:bf:ca:e5:6b:43:fe:1e:b8:5e:e7:92:21:e3:51:
                    07:65:70:f5:3f:72:1e:b8:0e:1b:ee:36:d2:de:2c:
                    1e:61:40:49:4a:4c:3f:31:33:77:b9:cd:69:fa:08:
                    1f:52:73:e0:76:a4:16:68:6b:76:f8:1e:9b:5c:80:
                    72:a7:41:74:19:ef:2e:e7:50:15:5f:1b:f1:2a:b4:
                    52:33:80:07:e5:0d:a3:64:1e:86:86:00:32:f5:56:
                    75:16:ea:70:e4:e7:3f:3c:90:66:b1:cb:99:0a:b4:
                    23:78:a2:44:c0:0b:cf:24:29:50:39:af:fd:1b:c9:
                    91:e4:39:22:25:9c:fb:a8:96:9d:4f:dd:6a:b1:fa:
                    60:3b:f5:cd:7c:a7:d7:19:24:5a:92:08:c3:f5:da:
                    18:9e:f2:77:10:9b:bc:32:a3:70:48:42:d3:06:0c:
                    b5:d8:7c:89:f1:fc:19:b5:a8:9e:98:d4:ce:96:15:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4C:F1:75:4D:D4:28:C3:63:97:CB:1C:63:89:FD:42:FA:51:F2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77be138b-b285-3545-a766-e59c0df68d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:84:7b:c2:cd:8f:b5:a2:66:ab:57:5e:9f:2c:a0:40:4e:10:
         ec:76:65:2b:18:17:46:b7:69:03:a4:ca:cd:c3:1d:a5:4e:2f:
         bb:1b:f7:64:75:a0:4b:aa:94:a0:3c:9a:1a:f8:1e:f5:3b:ff:
         87:27:4e:18:6f:04:8f:eb:fe:98:3a:b4:b0:2d:cb:a5:eb:d9:
         bb:e3:6a:db:c4:3a:f4:2d:c2:88:37:4b:de:26:ac:47:a8:ca:
         73:ee:f1:15:e7:2b:e3:51:9c:68:64:1f:6b:2f:4c:69:48:94:
         97:bc:6d:8b:6a:d4:08:e5:ea:a5:d3:ec:93:7a:4e:62:ef:56:
         5f:e6:88:0d:56:cd:8a:77:1e:54:6e:b6:14:45:76:af:87:ac:
         27:cb:e7:ab:30:8d:92:e0:41:f1:44:1c:00:b7:0c:01:7d:e6:
         40:87:a6:35:3e:db:24:48:04:74:a3:16:ec:53:c2:8b:75:29:
         34:fa:09:ae:f0:67:69:d9:9a:a0:20:a7:9e:f4:4d:29:02:1e:
         f7:68:d7:3e:80:73:44:10:c2:4a:ae:a0:69:93:f3:12:4d:bd:
         15:1f:22:bc:ed:cf:ff:38:b3:59:44:d6:95:04:5e:f8:97:0f:
         46:da:29:78:e5:1d:f9:a3:45:5b:5d:9a:68:38:85:c7:6e:9f:
         f8:49:e8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----