Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6180856-2af1-3ae9-8532-f9143f64886f.roa
File:                     b6180856-2af1-3ae9-8532-f9143f64886f.roa (raw, json)
Hash identifier:          XZccA7L6lHQKO8KuQsR9dilC0lbWayvspIh2Y49LE20=
Subject key identifier:   E1:9E:0F:DC:3E:01:E2:B8:70:BF:20:5A:17:F8:AD:68:B6:60:73:CC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F7B3DABBE39F1D70316C97C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6180856-2af1-3ae9-8532-f9143f64886f.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 08 Jan 2025 05:00:00 +0000
asID:                     210703
IP address blocks:        166.0.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7b:3d:ab:be:39:f1:d7:03:16:c9:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jan  8 05:00:00 2025 GMT
        Subject: CN=09efb5a7-3e0f-465d-aca7-d7c1ffddcaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:bb:09:d0:10:f5:db:14:84:72:51:83:56:
                    97:f4:aa:8d:cf:4d:d4:96:2f:de:7a:a9:82:ab:c9:
                    bd:a0:2b:58:6a:dd:8b:f9:75:9b:45:7f:3e:ca:30:
                    e9:26:a7:47:3c:83:5f:2b:db:3f:84:8c:1e:f3:31:
                    f6:65:79:f7:98:91:e8:db:80:dc:87:29:7d:7f:f5:
                    d5:8b:ec:19:c2:c7:49:c0:6a:51:b7:b5:39:80:0d:
                    31:20:55:6a:1f:5f:19:83:84:d3:11:7a:db:1e:9f:
                    e0:25:cb:3a:c4:fe:70:de:cd:89:ba:13:15:e3:a3:
                    8e:b8:6f:b7:25:b0:db:3d:b5:2e:73:b1:e9:03:02:
                    a3:de:29:9c:38:34:41:7e:ca:95:b9:48:a8:eb:c0:
                    e0:65:22:63:69:35:88:79:fa:72:2d:6d:65:40:b6:
                    5e:ad:73:21:99:60:4d:fd:93:b6:aa:4e:83:c0:90:
                    80:d1:a6:63:10:c1:0c:35:b8:82:d9:7e:84:42:e8:
                    f4:b0:e4:8b:4e:46:b1:06:31:7f:d0:3a:26:1a:1d:
                    00:68:90:60:b7:14:5d:43:41:cb:2d:df:a1:b8:f1:
                    b6:76:92:5d:2d:4d:a0:b2:fe:ce:64:46:bc:df:91:
                    f8:4c:ab:9e:d2:77:f9:d9:17:e5:1b:59:9b:e1:bf:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9E:0F:DC:3E:01:E2:B8:70:BF:20:5A:17:F8:AD:68:B6:60:73:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6180856-2af1-3ae9-8532-f9143f64886f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:e1:fd:71:66:aa:07:2f:8b:ec:c0:7c:1b:63:75:45:86:
         d1:10:24:c5:87:7a:e7:a3:c2:ff:d8:61:85:20:df:1c:6a:a4:
         b8:4a:f0:ee:a0:02:95:4b:f8:9c:76:3e:b0:bf:6b:d3:ce:34:
         af:af:50:13:fa:23:cd:55:92:36:6f:f6:66:55:18:f1:f4:49:
         19:29:ec:96:4b:e0:f3:a1:c8:28:5c:12:3e:17:d1:4b:b6:0c:
         d0:6a:2b:f7:c3:43:15:01:39:65:5d:57:6c:e8:d3:88:b4:71:
         1f:bd:59:4e:4a:c2:98:a3:30:e3:29:7d:85:57:be:dc:9e:eb:
         87:03:7e:69:df:f8:ba:0a:b3:82:35:19:66:71:82:d3:b4:7a:
         00:e8:69:2c:b0:37:74:d0:b0:02:24:b8:e5:bf:5c:1c:4f:f3:
         4f:73:9a:de:d5:f9:7d:51:48:1e:c4:3c:17:88:1e:66:e1:90:
         c9:2e:e9:40:b5:a2:c0:b1:44:95:78:2f:8a:98:c9:a2:e9:d4:
         6e:2f:a6:9c:a5:8d:05:8c:94:3c:48:e6:94:39:d8:65:9d:2d:
         ea:c5:2e:7e:a0:9c:b3:a9:ef:09:af:41:42:0b:1f:7f:8d:3e:
         97:d4:15:3f:5a:01:91:8f:9b:64:1d:0e:7c:b6:be:69:c6:b0:
         f7:26:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----