Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b39fab1-89c0-391b-8914-8125b7146b4d.roa
File:                     8b39fab1-89c0-391b-8914-8125b7146b4d.roa (raw, json)
Hash identifier:          XSsKovSRLPPdYk2FTrKAIdf27b7shdWzh+fF1Au1ms0=
Subject key identifier:   6C:00:43:1C:2F:9D:A6:0C:70:D7:10:D7:0E:50:81:A1:2C:8B:35:42
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583EC90156498EFF62756453C650
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b39fab1-89c0-391b-8914-8125b7146b4d.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 05 Nov 2024 05:00:00 +0000
asID:                     3257
IP address blocks:        166.1.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c9:01:56:49:8e:ff:62:75:64:53:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Nov  5 05:00:00 2024 GMT
        Subject: CN=48dfe223-4786-466a-80ab-30d1718cee41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:72:2c:af:9a:a3:8c:c4:ed:95:b1:03:8f:
                    e4:b9:89:02:ee:f4:45:4a:88:19:5c:51:0b:e2:0b:
                    89:a8:f0:c7:90:b9:a6:65:c3:3b:f7:86:04:12:c5:
                    95:6e:2d:5a:68:a9:4c:d5:51:cf:64:da:f1:01:4c:
                    be:fd:36:c1:f3:cc:ce:ec:c8:e0:ca:0d:0d:1f:76:
                    7a:e7:c2:53:93:0f:c6:08:06:70:da:b3:cc:9f:17:
                    83:6d:27:17:92:03:5a:82:ec:dd:18:f1:8a:b6:0e:
                    0f:98:eb:9f:d2:9c:22:2d:b0:ff:24:04:80:8d:6b:
                    ff:b3:20:48:ce:92:25:2d:16:04:69:18:ab:a8:15:
                    8c:db:ab:77:1e:70:f5:38:9e:3f:2d:30:75:eb:8e:
                    d2:1e:dd:7b:78:e7:23:b3:6c:95:f3:fb:91:f2:82:
                    e2:6d:c4:70:3f:e1:58:7a:ec:aa:03:39:7f:59:f0:
                    13:0d:e4:dc:b8:b4:73:31:62:6f:90:62:d9:8d:e3:
                    77:87:01:f8:65:80:34:f5:ec:33:93:c6:2e:9b:f9:
                    08:21:52:55:65:9f:e1:f4:b8:77:b0:09:65:39:84:
                    23:d3:93:0a:ad:de:59:e3:58:14:75:96:4b:01:f1:
                    b8:31:ad:66:41:02:88:04:05:c3:e5:4f:50:19:1e:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:43:1C:2F:9D:A6:0C:70:D7:10:D7:0E:50:81:A1:2C:8B:35:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b39fab1-89c0-391b-8914-8125b7146b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:0f:63:63:74:01:b4:20:ef:31:c4:49:4e:cb:2c:65:84:
         7a:d4:7c:7c:39:7d:6d:e7:b8:64:0e:47:55:77:ad:67:1d:f6:
         95:16:a8:86:fa:ee:ce:38:b4:e0:80:7e:13:bd:f9:24:cc:b1:
         02:53:18:c0:65:ef:b4:b1:6d:80:59:f1:d6:d1:3e:6d:8f:a2:
         b1:d7:bf:49:dd:b9:4c:57:7f:1a:86:a8:3c:2e:f0:64:69:e5:
         74:b8:39:12:7f:c5:41:68:8d:35:12:eb:1a:7f:95:5d:71:c4:
         6a:33:15:93:0d:0b:62:1f:19:b0:38:df:48:04:96:0f:af:b0:
         ca:c1:9f:22:4c:c7:f9:aa:89:b6:b5:72:9f:a0:8a:d1:11:7a:
         fd:44:f6:96:ac:69:95:05:89:60:70:aa:97:02:49:86:4b:d3:
         c3:38:2e:d8:a4:0e:76:3a:8c:20:a6:ae:18:60:25:77:92:20:
         e0:40:50:d2:d3:fc:ac:8f:fe:06:41:fa:4e:24:b2:11:a0:77:
         c7:de:be:a4:95:eb:97:87:e4:9a:08:29:dd:cd:14:de:a8:35:
         30:7e:87:c6:7b:05:ba:eb:36:2d:d8:be:4d:e3:f9:5b:16:d5:
         56:29:99:d2:7c:81:12:21:6a:12:50:b8:08:3f:d7:ae:37:9d:
         1d:c6:12:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----