Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96bb5247-2ec3-3ba8-9438-b0e46f9f51cf.roa
File:                     96bb5247-2ec3-3ba8-9438-b0e46f9f51cf.roa (raw, json)
Hash identifier:          kWtAkJxZyztyGH02A52gMoSAW4Z68a9S9UIUtBTO+/U=
Subject key identifier:   1A:EF:1A:D7:7A:F7:A1:97:39:8D:00:22:C6:06:3C:70:2D:51:2E:3C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841653E0847556D98AEEAD67F60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96bb5247-2ec3-3ba8-9438-b0e46f9f51cf.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 02 Jul 2025 04:00:00 +0000
asID:                     35913
IP address blocks:        166.1.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:65:3e:08:47:55:6d:98:ae:ea:d6:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  2 04:00:00 2025 GMT
        Subject: CN=61ba399f-b636-48e1-8db1-63d3db9cdd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:de:d1:79:41:9d:0b:96:21:13:a2:a5:04:
                    95:52:3a:df:d0:75:a6:0b:05:b6:5e:69:87:7a:79:
                    3f:57:15:03:24:1d:76:93:50:1a:4d:28:cf:15:14:
                    53:24:2d:45:7d:69:30:07:0f:97:cb:5f:78:f6:b3:
                    26:78:29:85:22:71:0c:bd:41:25:0c:ab:cd:7a:07:
                    90:2b:03:1f:9f:8b:da:2d:a4:f9:56:51:c2:5d:e3:
                    5a:9a:b3:55:a6:cc:23:14:80:c4:37:ac:2e:38:54:
                    14:b3:e5:c5:b3:33:9d:fa:b3:0a:c5:21:90:88:cb:
                    f2:8b:2d:54:3e:40:83:86:9b:b2:6d:3d:57:44:ad:
                    b7:94:3c:fb:60:95:9b:9e:a1:24:ff:b2:96:f8:e8:
                    7d:1f:da:e4:2d:a8:e3:da:21:20:24:3c:ec:5c:5c:
                    0a:02:06:e8:de:6d:88:bc:6d:51:bd:8b:47:17:0a:
                    2e:d6:3a:07:2a:07:29:4f:cd:92:4f:40:84:bb:5d:
                    07:b1:84:f7:a9:54:d2:bd:1a:51:eb:d3:88:ef:ae:
                    36:bb:fe:e5:96:4c:13:27:9d:a9:43:3d:45:22:1f:
                    06:13:db:1c:79:52:a0:ed:a1:85:8e:cf:fe:85:81:
                    fd:b4:38:2d:f1:1a:97:36:d2:28:16:85:3e:fa:f3:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:1A:D7:7A:F7:A1:97:39:8D:00:22:C6:06:3C:70:2D:51:2E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96bb5247-2ec3-3ba8-9438-b0e46f9f51cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:96:75:01:43:a0:d0:a6:2d:6e:f2:b7:53:4e:63:45:af:
         c5:8f:50:39:f6:07:78:84:84:97:5b:d7:5a:37:bd:4b:d3:e5:
         7c:54:bc:76:99:9e:16:c4:b8:5b:d4:19:b8:39:85:6a:9c:e1:
         01:74:8f:6e:95:9a:05:69:f1:68:7c:93:6e:71:df:64:4a:af:
         8e:7d:d2:d5:82:ec:71:54:e7:df:53:45:50:50:b6:68:ba:63:
         de:f0:78:0a:9a:ba:cc:0d:47:ab:cc:b2:9e:13:79:63:50:6b:
         36:8f:83:18:20:d1:14:64:71:a0:11:c6:72:50:45:57:d5:30:
         93:28:15:0b:c1:a1:df:c2:a0:af:e9:da:76:f4:6d:97:24:e2:
         ab:48:96:76:2e:83:ac:36:8e:92:83:27:05:59:eb:73:28:1b:
         b2:04:4d:9e:5f:a3:0e:e2:ce:53:95:c5:ee:5d:3f:89:b6:da:
         1c:ff:36:f6:6b:be:84:c7:19:0a:dd:ef:9c:45:6f:34:07:bc:
         48:7e:fb:23:8c:61:31:0a:40:a4:71:30:14:50:ff:2b:cb:35:
         48:d8:33:62:90:f1:85:51:a3:71:1d:1f:82:07:7e:e3:71:d9:
         bb:3a:55:77:07:93:58:cb:f7:10:68:5c:70:51:c4:1f:1a:80:
         97:7a:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----