Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b372e296-4241-3557-921c-97f3be34a011.roa
File:                     b372e296-4241-3557-921c-97f3be34a011.roa (raw, json)
Hash identifier:          Ve77nieyRlQe0Z5H4Cvf9MaLPsfOvDDaire2EAr/Iac=
Subject key identifier:   A9:67:40:9B:37:45:1F:11:C2:35:92:ED:3A:B3:4F:28:7D:74:9F:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858410C1079222F694E9394FB9140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b372e296-4241-3557-921c-97f3be34a011.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 31 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        108.165.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:0c:10:79:22:2f:69:4e:93:94:fb:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : May 31 04:00:00 2025 GMT
        Subject: CN=6c73bad8-b073-4c1e-8340-bfe97f190911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:12:21:93:e2:0e:43:5e:88:5d:1f:dc:2c:
                    62:1e:f3:13:a6:5b:b3:f6:75:a2:0c:53:88:c0:cd:
                    48:69:ae:b0:97:f7:24:3f:bc:a9:bd:ca:16:a5:1c:
                    7c:c4:d4:66:47:fb:2b:fa:e6:b2:f7:63:4d:af:db:
                    89:ce:02:b5:68:8a:e5:c4:10:5a:57:f0:25:c9:bc:
                    82:45:a8:e7:51:55:a8:5d:e6:27:86:32:2a:16:91:
                    0e:e4:0a:a8:91:49:45:b4:07:5c:fe:e9:ce:dd:7f:
                    9d:f5:81:1c:0c:48:cd:51:d4:65:42:69:4b:64:75:
                    7a:f6:7a:9a:d0:62:c6:4c:52:d3:f3:ee:99:9b:fa:
                    d1:7c:66:c8:c9:25:4e:66:8c:a0:8c:23:fc:31:21:
                    7f:86:d0:c0:91:53:12:9f:9e:5d:e3:ec:d3:eb:3a:
                    91:f1:34:23:78:c0:84:52:0c:da:a8:30:58:60:4e:
                    c7:c7:a6:89:bc:97:45:c3:6b:43:16:14:67:06:ae:
                    51:48:60:e4:c9:20:b2:65:9a:5f:25:a5:b0:57:96:
                    63:5b:88:5e:fa:0f:d9:34:72:48:9b:2d:4e:59:67:
                    0c:0b:86:b2:83:90:12:24:90:a4:dd:d7:4f:a2:b4:
                    f9:82:53:d7:47:6e:32:7a:0a:c4:f4:2d:35:d4:84:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:67:40:9B:37:45:1F:11:C2:35:92:ED:3A:B3:4F:28:7D:74:9F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b372e296-4241-3557-921c-97f3be34a011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ee:c2:98:6c:91:1d:d9:19:95:a8:32:5b:22:0b:62:1a:92:
         4f:f8:f1:99:a5:15:59:39:3c:5e:85:79:04:b6:a3:18:3c:5f:
         81:32:84:85:e9:9e:6b:a3:d9:29:74:ff:7f:7a:0f:a9:6e:d1:
         62:64:c0:13:24:94:3e:76:d6:23:16:45:91:9f:30:29:de:61:
         8d:d1:47:9f:a6:0c:f4:ae:b0:84:c6:7a:51:2a:4a:45:5c:e0:
         9e:7a:ce:4c:8a:2b:dc:fb:61:47:3a:6e:e2:c1:21:bf:7e:8e:
         48:c3:b8:92:a1:41:55:9a:c1:2c:c7:71:79:44:b7:b1:07:05:
         d8:f9:fb:1c:91:b1:98:49:d7:43:d2:66:06:e3:1c:08:e1:26:
         bd:c8:6f:f9:c8:cf:8e:7c:51:38:75:85:65:d5:08:c4:39:71:
         6f:ce:eb:ca:14:77:c2:aa:73:d5:f1:8d:04:43:f3:8f:4e:10:
         66:63:43:c9:a6:8e:cb:a2:d0:f2:33:92:3a:9e:5c:69:0b:fa:
         20:c5:89:8d:0e:28:fc:bc:00:56:68:4a:97:64:8a:c3:76:70:
         3c:4a:94:cc:b2:19:62:09:08:5d:f5:d7:fa:62:06:02:ee:5b:
         9f:d3:f3:66:d3:e8:24:63:df:d4:93:5a:fb:2d:d4:a3:06:32:
         48:83:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----