Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1f83559-96f0-3953-887d-c7081ab1a9ba.roa
File:                     c1f83559-96f0-3953-887d-c7081ab1a9ba.roa (raw, json)
Hash identifier:          vJleLY4hBy1ejtMyJVahScnSfpj7gcBPAMJUhWtX9+M=
Subject key identifier:   AC:DA:9E:FC:67:82:FC:3C:55:4A:16:44:97:1F:A4:87:6E:5F:F8:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858412C634DC7DF215D48C966D0A8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1f83559-96f0-3953-887d-c7081ab1a9ba.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 12 Jun 2025 04:00:00 +0000
asID:                     212219
IP address blocks:        108.165.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:2c:63:4d:c7:df:21:5d:48:c9:66:d0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 12 04:00:00 2025 GMT
        Subject: CN=86a20c2f-7837-4a8b-9247-a565becdba3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:ee:cb:43:e5:d1:1f:7e:07:e5:2d:30:37:
                    7f:47:d2:75:2b:69:ae:a8:99:80:a7:86:81:ea:f1:
                    d5:f7:4c:15:36:78:0f:59:a5:58:d9:1f:fb:cd:cc:
                    a2:89:b7:78:05:a0:42:1d:a9:ee:1a:7c:4e:8d:2f:
                    b6:10:64:4f:7c:1c:47:f7:82:a6:11:a1:18:17:30:
                    5a:eb:e7:0c:3c:7b:da:88:38:ac:e3:5d:18:22:bf:
                    fe:cc:db:7a:15:77:78:be:4c:0c:a0:45:a0:1b:76:
                    c3:3f:35:78:f6:ac:4e:b2:61:0d:21:e6:be:51:3b:
                    5b:ad:38:97:ac:31:c9:9e:df:80:09:55:de:1f:bc:
                    23:9f:a5:56:75:39:bb:a5:af:33:60:45:87:a9:ac:
                    75:ed:76:c0:bf:0f:49:b9:cd:b6:9e:ce:84:96:78:
                    6d:7a:01:95:52:83:68:5a:24:8f:8c:02:58:ca:3e:
                    12:c1:fc:10:fa:19:82:a6:d8:bd:8a:c8:b4:82:68:
                    70:10:54:46:da:36:5e:fc:be:7e:27:7a:58:00:19:
                    2b:71:05:a7:bc:86:13:53:13:9f:cf:e7:39:86:3f:
                    a5:82:dd:c2:d3:e2:2a:34:4a:21:56:91:77:00:69:
                    42:d3:84:ba:98:72:67:37:36:ca:69:5e:41:21:7d:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:9E:FC:67:82:FC:3C:55:4A:16:44:97:1F:A4:87:6E:5F:F8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1f83559-96f0-3953-887d-c7081ab1a9ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:80:37:19:f6:59:23:50:6d:6a:bc:46:73:38:98:95:16:f5:
         ad:d6:a4:c3:09:27:03:f9:d7:f0:d3:a6:19:10:8f:fa:6a:0e:
         c6:b6:6f:78:d2:01:c4:d8:38:60:9d:ac:c8:35:7f:e4:ba:6a:
         7e:5a:67:44:d9:2e:8a:02:a5:4e:76:22:76:97:d2:28:6d:95:
         9a:dd:2b:8b:d9:95:37:da:94:cc:54:5e:1f:8f:b7:16:44:b2:
         21:d5:2d:b4:4b:dd:10:5a:d2:16:dd:34:41:ae:64:82:69:6c:
         cf:c8:cb:23:ab:2f:c9:81:8a:7d:12:1a:8a:2f:03:cd:ec:59:
         25:ff:6e:3a:3b:50:a0:ff:6c:c4:25:84:f7:28:7f:79:7a:55:
         1a:c8:8c:da:09:f0:ee:b4:a3:f8:d2:3e:1d:05:0a:74:dc:8e:
         04:f4:a7:12:08:1b:06:a5:9c:d9:e1:71:85:48:24:89:99:ec:
         62:21:e3:01:8f:fb:51:dd:3c:9e:1a:61:f7:12:fe:f1:ef:9d:
         a1:6e:4d:14:ad:c8:26:88:00:6e:6c:81:03:15:6c:10:fd:8a:
         17:da:2d:da:97:81:17:92:ca:97:99:5c:89:86:d5:8b:7c:d7:
         a4:32:c0:50:5c:8d:67:40:ea:ca:97:06:28:69:3b:7b:9f:81:
         30:b0:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----