Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89894751-45a2-3fc4-b0c8-a9ae29c803ac.roa
File:                     89894751-45a2-3fc4-b0c8-a9ae29c803ac.roa (raw, json)
Hash identifier:          d7wF5axOdz5xBah2lYo1keenO9jCpYXtlF8AZzIXlYs=
Subject key identifier:   C1:26:CE:A5:25:F7:B4:7C:A5:1B:6B:80:44:95:F0:21:A8:2D:C4:A1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E63F34F19E2E2F61B05682000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89894751-45a2-3fc4-b0c8-a9ae29c803ac.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 30 Sep 2024 04:00:00 +0000
asID:                     8100
IP address blocks:        166.0.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:63:f3:4f:19:e2:e2:f6:1b:05:68:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Sep 30 04:00:00 2024 GMT
        Subject: CN=1bd91cac-bc84-4327-a513-117aa657f8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:36:9d:9d:8f:ef:ba:3e:03:4f:03:3e:e4:
                    4a:f7:c2:14:6f:04:b9:94:de:64:42:99:a5:e5:37:
                    1b:e3:69:ed:25:05:a0:58:0c:ae:18:b6:81:b7:b2:
                    9d:6c:c7:22:e2:10:d5:f0:a3:a4:e8:17:fe:37:ff:
                    5f:e2:5c:d7:4e:4e:ee:46:31:10:00:36:ee:68:d5:
                    13:f2:d3:88:44:6d:95:31:17:43:cd:f8:49:70:8a:
                    29:79:71:87:e7:3a:9b:55:0f:9e:c5:3d:4f:f3:10:
                    dd:32:2f:82:75:1a:7f:ac:55:72:61:88:09:f1:f2:
                    f2:f6:f3:bb:99:7b:a4:ff:08:48:55:56:95:e2:fc:
                    0f:11:c4:95:70:0a:9b:56:89:35:8e:1c:87:13:55:
                    bc:d5:c8:74:b5:b1:2d:67:2b:2b:b5:d5:8a:18:22:
                    f8:60:a9:9f:5d:a9:18:cd:50:a0:a7:56:c6:3a:12:
                    c9:0a:82:8b:8e:85:6d:1c:2c:00:a2:09:03:5d:1f:
                    59:75:4f:44:41:70:b4:c8:c9:5f:c7:42:79:0e:94:
                    03:0c:87:be:72:24:6a:19:cf:83:6b:28:aa:04:d7:
                    d8:1c:05:6a:5a:ac:d0:7d:66:54:eb:00:fc:06:7b:
                    65:09:e7:9b:48:b1:50:6e:9e:3a:10:93:76:09:5f:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:26:CE:A5:25:F7:B4:7C:A5:1B:6B:80:44:95:F0:21:A8:2D:C4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89894751-45a2-3fc4-b0c8-a9ae29c803ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:23:8a:82:1c:b6:d9:7c:54:6b:a9:09:a2:66:cd:20:7a:c3:
         48:1e:aa:39:88:7d:8b:b5:89:d1:c7:43:3f:82:d1:ae:cb:91:
         af:1f:2f:02:60:4d:cc:29:8f:90:e1:8a:e1:e1:29:89:f7:1b:
         35:5d:c2:5f:d6:33:03:40:c1:f7:a7:cd:25:cd:5a:cd:24:d7:
         91:96:20:a0:41:60:4e:7f:f6:89:9c:28:d7:53:58:51:3c:c6:
         89:96:53:15:cd:6f:0b:96:d1:50:9c:3e:6d:cf:a8:78:6d:cb:
         0f:f5:b3:8c:27:38:f3:a9:d6:ff:54:61:2e:2b:44:63:95:b1:
         c9:c3:11:d2:99:8f:f5:0a:5c:6d:c1:03:f3:7c:5c:87:fd:85:
         54:d4:2b:04:02:7c:b2:bb:a2:1a:22:35:dc:fb:45:2c:10:fd:
         17:51:65:f8:50:24:9a:2b:fd:18:96:94:d1:5d:e6:74:20:46:
         e2:9a:1b:e7:8e:89:de:1e:c4:f5:be:84:25:9b:7d:cf:8d:fb:
         de:0f:84:b0:a2:9a:48:ea:80:53:51:09:6b:b5:29:74:02:29:
         d8:ce:73:e9:36:14:72:30:0e:f4:63:f6:50:44:e1:da:07:11:
         b0:52:ef:48:f2:8a:34:8b:24:45:75:e1:45:76:ab:d8:3e:6d:
         19:18:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----