Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6f94e5b-d765-3057-9125-6a2a0e583e94.roa
File:                     f6f94e5b-d765-3057-9125-6a2a0e583e94.roa (raw, json)
Hash identifier:          1g9aLCJqQNVGbT4vjTzNolBRjFRoivLLa8QUk0B/czE=
Subject key identifier:   9B:6F:99:43:2A:D3:AA:B5:24:87:B1:53:6A:1A:05:3F:90:61:16:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583FFC9CBCD8C32EC0E14F99FA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6f94e5b-d765-3057-9125-6a2a0e583e94.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 23 Feb 2025 05:00:00 +0000
asID:                     63023
IP address blocks:        166.0.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fc:9c:bc:d8:c3:2e:c0:e1:4f:99:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Feb 23 05:00:00 2025 GMT
        Subject: CN=0cf0ea61-627b-4779-9f86-33f637d4fb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:09:26:15:18:ec:05:19:ff:b1:ae:3c:7f:
                    e4:b9:e4:b8:eb:00:8e:54:68:67:ce:7f:13:ac:b3:
                    74:7a:c4:d4:9d:1d:9e:46:41:20:25:e1:b8:77:f2:
                    5e:17:47:4a:13:64:a2:76:c6:a8:c0:40:9c:84:be:
                    53:b6:f8:4a:c7:99:01:de:da:c1:05:22:18:12:24:
                    2f:48:37:ef:e8:dc:da:87:0b:b8:5c:10:96:58:e8:
                    78:22:ab:2d:14:79:44:65:6b:73:b3:66:91:f3:97:
                    76:ab:a5:e3:f7:51:3b:4e:e0:eb:65:09:3a:2a:ad:
                    d6:36:ad:74:ea:44:b7:35:30:dd:cb:af:19:48:ae:
                    26:25:f5:8e:b3:ac:8a:6d:2a:2a:37:a9:73:90:de:
                    f1:47:fd:fa:18:af:65:0a:b8:a0:ce:5f:97:4d:cc:
                    17:89:30:3e:3f:28:19:3a:d8:d2:ad:c7:af:f2:5e:
                    4f:98:c0:70:3e:c3:06:cc:82:2b:f9:35:5e:f2:4c:
                    66:f3:5a:95:3c:f8:20:4a:d7:32:25:b9:46:fe:7d:
                    81:0e:b4:ba:45:73:aa:e0:7b:20:a8:22:30:b8:c7:
                    74:26:3e:73:76:58:e4:81:3a:0f:73:56:ee:eb:13:
                    90:f5:9a:10:8e:ae:37:e3:cb:02:b1:53:df:79:36:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6F:99:43:2A:D3:AA:B5:24:87:B1:53:6A:1A:05:3F:90:61:16:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6f94e5b-d765-3057-9125-6a2a0e583e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:02:91:61:b4:0d:f1:8e:e2:7d:e4:fe:67:07:76:7f:8d:8d:
         2f:61:34:bf:78:02:7a:5a:5e:5f:b1:54:3c:4b:b9:b7:9e:4e:
         c7:8e:c2:9f:3b:9f:47:63:72:9f:24:87:cb:8c:23:1a:f4:78:
         a6:a6:12:b8:ac:e6:4c:32:2b:1a:f9:ae:4a:23:18:9c:36:e6:
         50:30:ed:ca:d9:09:71:55:9b:97:ae:ff:2c:d0:1c:0f:a0:9f:
         1f:8f:2e:17:92:a8:74:ee:7d:78:10:6e:b3:4f:73:82:02:f0:
         55:6f:64:84:e0:c0:0c:a1:97:af:44:33:be:49:9d:e3:2e:41:
         ef:a8:d7:95:6b:0a:58:b4:53:09:a7:0b:34:83:d4:d1:77:08:
         42:b6:d6:dd:ca:66:f3:0f:1a:05:10:1d:b0:06:4a:bf:49:4b:
         8a:77:5f:7f:10:b9:85:e1:a6:51:a6:fb:19:e7:e3:0f:11:20:
         17:ff:12:df:6d:89:ed:d5:ff:5e:55:b1:dd:fc:4a:45:3d:aa:
         2c:b4:22:b5:42:d1:b5:00:3b:1d:69:96:3e:0f:67:0c:14:2f:
         c8:2b:e8:25:42:2f:ee:36:e3:14:d9:39:1c:11:1d:4d:d5:87:
         e2:eb:66:ef:59:43:52:46:e4:97:b4:bf:0c:e8:0b:0f:38:67:
         55:f9:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----