Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec5e14f0-646f-359c-89fd-2e2deb209263.roa
File:                     ec5e14f0-646f-359c-89fd-2e2deb209263.roa (raw, json)
Hash identifier:          nhsxUnerPXSzV2B2+tKX3wiNWg381wnXQc+KaLJFZe4=
Subject key identifier:   A5:DE:7A:E2:DE:AF:B8:2E:96:39:80:97:0C:AE:D6:25:45:D8:59:55
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840BF49E2E5AC971E16F78BFD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec5e14f0-646f-359c-89fd-2e2deb209263.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     61138
IP address blocks:        166.1.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bf:49:e2:e5:ac:97:1e:16:f7:8b:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=7663cd3e-781d-4804-81cf-d7470694d8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:2e:92:e5:ba:93:b5:02:1f:c6:3e:b1:43:
                    8e:28:a6:a0:64:3a:37:2e:bf:0b:20:c0:cd:03:af:
                    03:79:47:34:10:63:0f:d6:78:66:bf:6e:37:f1:3e:
                    99:3b:f0:3d:ba:66:27:a8:d7:41:5b:8e:c8:f0:ec:
                    d7:19:22:3d:d8:72:7e:75:48:e9:c8:b7:3d:ef:98:
                    00:2f:2b:a9:ee:86:97:91:29:10:3f:40:92:78:c6:
                    05:13:79:21:af:01:bb:14:bd:77:38:e5:d8:d2:f2:
                    bb:cb:a1:42:73:f0:af:4b:1c:2e:d7:e8:c6:ee:3f:
                    65:df:55:69:7e:88:94:22:b1:e4:2d:37:eb:72:0b:
                    35:14:85:62:9a:c8:d8:16:05:93:77:e8:fc:85:4f:
                    a1:fd:38:bb:f3:50:7f:4e:35:15:e4:ca:56:7f:57:
                    50:f8:88:7c:03:9e:1b:b2:60:34:79:64:f3:cf:65:
                    a4:4c:81:66:25:92:e0:54:82:74:b9:19:69:59:b9:
                    24:05:98:7d:e9:1f:90:2c:21:b3:7c:83:94:b6:58:
                    d9:80:16:af:ef:2f:11:74:56:63:ef:62:d1:6e:24:
                    1e:13:c9:d8:c7:be:da:19:40:18:a3:22:57:ea:b9:
                    51:cb:bf:c3:34:f0:6c:9f:4b:e0:0f:4a:0a:a7:5a:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:7A:E2:DE:AF:B8:2E:96:39:80:97:0C:AE:D6:25:45:D8:59:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec5e14f0-646f-359c-89fd-2e2deb209263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:42:7b:ac:55:9c:f7:e0:11:c4:93:8a:9b:af:f4:98:d3:
         82:e9:37:1e:50:c6:33:23:7a:4a:cf:62:db:4c:02:41:0c:8c:
         45:d6:b3:a8:61:da:5d:ad:10:24:ff:40:fd:b0:ce:7d:6a:90:
         90:29:83:65:de:fa:29:4a:8e:dd:10:6b:db:e5:d9:6b:ae:de:
         27:b1:0b:8f:92:55:6e:0c:da:d3:8f:ea:b4:2b:df:29:b2:0d:
         08:9f:ec:7a:3a:64:37:67:da:c8:39:21:0e:80:1e:a4:a2:e6:
         b4:a4:23:73:2b:4f:64:5c:b1:c5:11:14:63:35:4f:6c:da:e9:
         40:3c:1b:f2:1d:92:81:15:cd:f0:5b:f7:3b:69:61:ed:fb:04:
         1b:31:e6:81:32:a6:eb:66:e0:9e:fe:b2:5f:d0:e1:83:51:4a:
         ab:79:67:86:0f:a2:7c:ce:19:7a:7f:03:3e:04:d4:9b:be:79:
         2f:a7:6c:79:31:39:bc:f0:53:cf:29:f8:f0:a4:b3:2e:56:3b:
         6c:b2:b8:d5:3b:2f:79:de:75:2f:4a:44:41:66:b4:5e:89:f2:
         03:d2:77:e4:a1:6f:57:fd:17:7d:63:a9:36:89:55:cc:1c:d0:
         d9:71:6d:0b:b9:08:37:63:f9:b8:59:27:88:bd:c6:9e:2b:9e:
         75:11:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----