Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b46a4bb1-492d-3417-99c5-13ede63a3aca.roa
File:                     b46a4bb1-492d-3417-99c5-13ede63a3aca.roa (raw, json)
Hash identifier:          NPMfvbSn01FEDognuIHkTv1vPFmI3YHyxr1D0y/4njo=
Subject key identifier:   C8:D7:F5:01:2E:8D:01:E8:4D:58:99:3B:CD:B9:5E:47:C3:0E:BF:B4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841745565240F38126560D9BC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b46a4bb1-492d-3417-99c5-13ede63a3aca.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 08 Jul 2025 04:00:00 +0000
asID:                     140947
IP address blocks:        166.0.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:74:55:65:24:0f:38:12:65:60:d9:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  8 04:00:00 2025 GMT
        Subject: CN=b2d2dec6-e382-46c4-94d8-3943b4bd66aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a5:76:c9:ab:b3:cf:dd:62:c9:48:15:6d:b3:
                    0e:b9:6f:97:d0:7d:a8:c9:fd:6c:c2:64:2c:39:c3:
                    8a:04:cf:f5:29:7d:c8:ac:86:2a:7f:91:b5:50:04:
                    00:1a:0f:b4:bd:b4:9c:70:81:2a:7e:7e:6d:92:f8:
                    b1:eb:d0:fb:6a:e7:d0:7f:2a:e7:1f:0c:48:a1:ad:
                    9d:bf:10:28:8d:8f:ec:44:24:cc:a0:a8:33:77:a6:
                    79:10:d4:e5:a0:a7:89:c1:a5:d2:a7:63:1c:3a:6a:
                    a9:dc:b0:3d:c4:11:5d:91:d2:37:51:cd:73:10:e0:
                    12:66:5d:55:7b:06:95:86:ef:1f:24:65:e6:04:e8:
                    2c:f0:c2:d2:79:68:39:bb:a8:ab:df:be:61:5a:f2:
                    0b:21:4d:44:29:94:a2:33:3f:e6:db:84:9c:12:d7:
                    9b:7e:aa:56:7d:9f:01:de:dd:09:b2:0b:cf:e1:02:
                    82:08:05:99:49:a6:68:a9:ee:d8:fa:c8:cd:14:b6:
                    33:f3:47:e1:ca:42:fe:38:be:f9:04:9f:c3:1b:fd:
                    ba:60:80:10:98:2c:51:70:e0:c8:87:3e:41:d8:79:
                    8e:14:77:e4:f7:8f:5d:11:89:71:ae:74:0a:f8:7d:
                    1f:cb:6f:9f:15:97:9e:4d:7e:bc:62:b7:cf:f9:10:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D7:F5:01:2E:8D:01:E8:4D:58:99:3B:CD:B9:5E:47:C3:0E:BF:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b46a4bb1-492d-3417-99c5-13ede63a3aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:35:91:d7:bf:69:34:96:8c:c4:0c:e7:a5:32:ca:e8:b7:10:
         2b:d4:d0:32:ca:1a:81:6a:d1:22:01:c5:61:f5:64:2d:3a:87:
         1e:9b:8a:37:2d:e6:71:92:f0:a1:cd:e2:92:8b:03:46:9c:a6:
         20:de:d9:bc:9a:90:79:88:f0:39:69:48:73:15:aa:e5:60:dd:
         3d:ed:19:1d:58:b6:aa:a4:aa:96:35:f4:05:65:3a:7d:ec:81:
         f4:d4:49:e6:cb:38:3c:28:3c:80:62:17:f1:8f:a7:8a:71:29:
         39:80:c5:5e:5d:b4:a2:c4:11:88:61:6b:a3:57:7c:46:91:dd:
         9d:9c:d0:ed:3f:78:af:3d:b9:98:b4:da:ca:8a:9d:63:2a:ef:
         26:26:e9:a6:73:81:e0:28:9f:65:a0:3b:d3:53:c8:63:5e:25:
         a0:da:a6:be:41:4e:05:52:4a:18:1c:a7:ae:43:23:a3:16:23:
         9d:24:c6:83:6e:32:69:0f:2c:4f:e9:62:5c:66:02:45:c3:13:
         5e:5b:f4:05:75:e4:2c:91:33:b7:f6:cd:a7:08:6a:23:00:c2:
         b4:4a:1f:1c:df:29:7f:73:dc:ea:25:3d:db:fc:23:a1:5d:0e:
         40:15:6a:38:4f:08:00:6a:04:d9:11:da:48:e1:50:71:84:1d:
         8c:4a:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----