Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b326d19d-7dab-3455-b0fd-0c1ba41cffd9.roa
File:                     b326d19d-7dab-3455-b0fd-0c1ba41cffd9.roa (raw, json)
Hash identifier:          jZScYJb/jB4/3MlHepHfSbOsv9weUC7Gs6+HlSBMBC8=
Subject key identifier:   D6:DD:00:EC:9A:68:05:41:7F:B2:38:20:4A:7F:AB:FC:BB:2D:72:F3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E617765863B2614C849A23E90
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b326d19d-7dab-3455-b0fd-0c1ba41cffd9.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 29 Sep 2024 04:00:00 +0000
asID:                     207459
IP address blocks:        166.0.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:61:77:65:86:3b:26:14:c8:49:a2:3e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Sep 29 04:00:00 2024 GMT
        Subject: CN=709b2a26-a1bc-4168-a3d6-c49f6a457b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:a2:3f:43:69:d0:3e:29:a1:c7:6b:e8:eb:
                    3b:f7:99:18:0f:f0:3a:96:7b:33:3e:99:a3:00:2a:
                    91:a7:07:96:ff:53:41:14:8a:1f:0c:08:72:f0:0f:
                    98:00:95:53:ed:c3:b0:87:2a:31:25:e4:7a:35:3a:
                    2c:19:af:22:cd:71:df:e6:67:e5:2b:ff:e7:df:37:
                    0c:f1:d1:0f:e6:19:21:45:2b:69:69:46:63:a8:e9:
                    85:a1:a2:ee:c3:2b:b9:9d:97:28:42:bd:4a:52:04:
                    7d:1a:75:68:7e:6f:4e:67:b3:8f:59:07:29:1b:67:
                    b3:c9:0a:a7:ef:79:f6:97:8c:18:16:12:c2:09:c4:
                    0d:dc:c2:50:90:e0:5a:ec:01:37:db:e7:67:06:7a:
                    3d:6f:f8:b2:05:3b:21:b2:29:74:c7:62:9f:29:23:
                    20:93:39:6d:e3:38:57:a1:9b:f4:b1:53:f5:26:6c:
                    4a:cd:60:10:98:64:ea:22:ff:31:04:8d:74:9c:dc:
                    d5:8e:8e:88:35:fe:cf:01:ca:65:0d:88:cc:08:36:
                    fc:81:ef:49:2f:e0:61:c0:c6:10:3a:40:cf:4d:ea:
                    7b:b0:1f:b2:4e:b3:32:91:32:a0:a5:31:3a:4a:90:
                    a6:7b:33:c3:64:4a:e3:1c:89:c0:41:fd:35:0c:99:
                    0f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:00:EC:9A:68:05:41:7F:B2:38:20:4A:7F:AB:FC:BB:2D:72:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b326d19d-7dab-3455-b0fd-0c1ba41cffd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:34:af:56:58:2d:23:f0:0f:8e:59:2b:1e:47:36:9c:cb:
         72:65:9e:00:df:90:3a:bc:c9:84:1d:7c:f9:04:c7:86:11:8b:
         b3:1c:5f:55:58:43:36:a4:8d:5c:8d:04:70:fd:77:d8:ad:af:
         96:a0:25:bb:ec:0c:d3:0d:d6:fa:c6:ee:90:c5:49:28:02:9f:
         11:62:68:47:9e:2d:87:d4:f6:2b:23:13:50:3b:4e:e0:fb:fd:
         f2:8a:d5:66:9d:fb:99:43:b7:74:f8:3c:43:f8:08:d3:ac:22:
         3c:7b:00:2d:c3:50:bc:ff:a7:2f:37:0e:e2:83:db:3a:b7:ee:
         ae:72:e1:76:8a:46:7f:9c:12:b5:c3:60:a1:b0:ec:8f:2a:72:
         b7:5d:43:13:fc:e3:3b:b2:19:77:2b:19:ca:cf:57:2a:fc:fd:
         b2:53:0b:ef:2f:55:85:d7:fa:53:d8:d7:6a:b7:52:b5:e7:0f:
         5c:0a:94:66:50:50:87:78:7f:20:7a:0e:06:79:14:dc:fb:f5:
         a2:79:b6:a2:9d:40:52:dd:a3:0a:08:08:8a:cd:61:36:15:f4:
         9a:b4:0c:dd:a5:75:4c:78:0f:4e:5e:82:96:0b:05:c5:ec:6f:
         df:d6:fb:de:28:a5:71:75:5b:d7:60:b2:10:4c:09:ab:15:4b:
         dc:45:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----