Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c280951-e6d8-37a2-b103-a525b41461fd.roa
File:                     7c280951-e6d8-37a2-b103-a525b41461fd.roa (raw, json)
Hash identifier:          f/E8gFLbDFSTL0uTysvRfd8YVT/6PUi1qjrKlcCqMkE=
Subject key identifier:   71:7E:E8:11:AB:32:CA:3A:A8:40:40:61:2B:96:8A:EF:03:FB:3C:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858414D64F83AAFDA91F20D8CE8C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c280951-e6d8-37a2-b103-a525b41461fd.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 24 Jun 2025 04:00:00 +0000
asID:                     135752
IP address blocks:        108.165.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4d:64:f8:3a:af:da:91:f2:0d:8c:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 24 04:00:00 2025 GMT
        Subject: CN=78d6c873-bc95-43a1-a72f-36efa074b293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:6c:dd:d6:89:54:5c:37:04:41:f0:b9:90:
                    7a:ed:2b:f6:23:4e:cc:83:05:5f:90:ef:cf:66:f3:
                    b8:9d:e2:0c:2a:80:0e:77:7d:0c:ec:7b:35:5f:68:
                    88:42:92:5f:39:c3:ab:de:7e:66:8d:62:85:6d:f0:
                    06:02:8a:04:d9:32:38:cb:0d:7a:2a:6b:09:b7:ce:
                    a6:1a:4c:72:b4:ce:7c:66:f4:ba:93:00:fc:aa:d0:
                    86:ed:64:c4:66:e5:91:47:0f:c5:06:6c:2d:78:b2:
                    be:c8:a2:01:35:10:78:b6:77:d7:6f:f6:48:70:36:
                    de:e0:96:75:68:9c:f6:fc:e6:b4:30:8f:01:84:12:
                    bf:a2:d4:17:f2:d5:2d:df:dc:21:ad:34:fa:0c:ad:
                    43:2b:35:4c:80:b8:b9:9a:da:a4:f5:28:3a:aa:78:
                    a6:3c:65:d7:3a:8e:6a:ec:86:81:f2:62:50:de:e6:
                    ad:20:e4:fd:51:f4:d6:1f:f1:f8:55:b9:32:76:19:
                    bc:2c:9a:c8:58:54:09:3c:5b:e9:6d:76:38:c3:09:
                    ab:e7:ab:b7:b2:4a:5c:26:cb:fc:cc:c6:25:a7:e2:
                    90:c4:00:01:ad:a6:9e:59:fe:eb:1c:8e:b7:4f:a9:
                    7d:41:29:82:ef:f3:9e:d8:6b:f1:ad:0a:ef:fc:44:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:E8:11:AB:32:CA:3A:A8:40:40:61:2B:96:8A:EF:03:FB:3C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c280951-e6d8-37a2-b103-a525b41461fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:6a:c2:df:93:1e:c8:f0:7c:82:40:1f:52:bc:61:89:2b:
         3e:1b:2b:27:c5:ab:2d:db:4f:8e:cc:ef:88:b6:79:79:05:66:
         67:b2:6d:c6:6d:81:b7:50:a1:42:14:0f:18:86:ec:c9:52:d5:
         c5:90:41:56:99:a8:59:15:05:47:8e:f1:00:b0:44:d4:72:9c:
         11:3a:b2:04:fa:2f:ff:5b:c4:66:91:ef:ee:8a:17:9d:11:ba:
         1d:7f:78:74:e7:c9:84:a4:98:42:1a:87:51:a1:0c:17:48:fd:
         9b:8e:50:d4:a1:f3:70:b5:c2:30:a8:d7:dc:ed:52:54:d2:1a:
         aa:83:2d:e6:52:5a:e0:4b:db:ef:ff:5e:a7:4c:20:27:6f:5b:
         ec:83:18:d4:77:62:e5:08:bd:26:0f:bf:a8:75:04:e8:bc:04:
         96:f0:72:c7:2e:a0:74:51:98:85:f1:f5:b3:53:48:d5:24:f3:
         99:83:36:48:6a:6c:ae:9f:61:64:ba:46:f9:16:3a:d6:e5:65:
         12:f9:09:51:bd:a0:cd:4b:af:4e:88:c0:4e:0d:52:46:48:95:
         ed:82:1b:86:57:89:96:9c:45:0a:04:3a:6c:a9:db:5c:96:6e:
         e1:1d:e5:23:e7:16:43:a3:83:01:26:2e:8b:6a:7f:0a:00:1c:
         8f:ec:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----