Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f7bd897f-c251-3214-8799-a0e8ef16edac.roa
File:                     f7bd897f-c251-3214-8799-a0e8ef16edac.roa (raw, json)
Hash identifier:          S17dKsogh0cpAYpgeszy5tdC5BrNOLz/Y/LzjFEoR7k=
Subject key identifier:   D6:0E:27:5D:71:2B:EC:85:34:68:54:AE:65:10:4F:0C:E1:5E:3A:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583BC035708A7BDF57F4CF286D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f7bd897f-c251-3214-8799-a0e8ef16edac.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Thu 01 Feb 2024 05:00:00 +0000
asID:                     19437
IP address blocks:        166.0.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:c0:35:70:8a:7b:df:57:f4:cf:28:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Feb  1 05:00:00 2024 GMT
        Subject: CN=4aa6a877-2012-4042-83c0-c09f327b235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:85:73:c8:3d:58:c5:ce:e9:43:73:62:4a:18:
                    7a:98:0a:f5:17:96:12:ea:90:c8:6b:61:56:4c:78:
                    0c:14:49:f1:66:c6:69:e3:34:e3:be:31:9e:7b:56:
                    07:77:76:e0:f4:d1:65:ed:f9:fc:a2:85:ac:bb:6d:
                    13:fc:89:06:8b:c6:8d:ed:2b:f6:1f:a7:0f:5e:b3:
                    d8:0c:ee:53:08:99:3a:c2:7f:b3:09:31:e9:36:3e:
                    bd:c5:f9:18:5c:a6:31:4b:f4:d4:8a:33:20:16:64:
                    86:2c:4a:b6:c9:f0:12:30:bd:57:15:cb:7f:57:79:
                    f8:d5:43:36:ff:ba:9f:7c:e6:16:51:af:89:9e:e1:
                    8f:a3:ab:14:de:8a:5f:14:19:be:56:d5:96:05:6f:
                    e1:08:40:d8:01:e6:17:c3:b2:1a:25:8c:2e:2d:98:
                    54:b8:91:45:86:c9:bb:e7:63:9f:a9:cb:1d:b1:4f:
                    0d:d2:6d:6b:cf:ae:25:86:c8:c5:5f:cf:34:cc:b4:
                    b0:0c:c1:d2:f8:95:37:6d:7e:02:e6:a9:ae:b3:19:
                    cc:68:17:62:df:95:d2:75:88:c3:bb:1f:f8:0f:7f:
                    de:2b:4d:7f:a2:c0:15:57:1e:8d:ce:f1:0d:a7:bc:
                    69:04:68:98:d8:96:af:ba:26:c4:43:fe:b7:c1:fb:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:27:5D:71:2B:EC:85:34:68:54:AE:65:10:4F:0C:E1:5E:3A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f7bd897f-c251-3214-8799-a0e8ef16edac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:b7:00:f3:2d:44:8a:8b:9f:b6:fe:26:21:cc:05:97:63:
         9a:a8:29:61:db:9e:05:ee:b3:06:38:01:ac:4a:06:b4:80:f6:
         61:12:71:7f:7f:63:16:8d:b8:cf:da:dd:37:47:00:92:e4:bc:
         08:ac:d8:c9:45:9d:a1:3d:1a:25:47:b2:01:ad:63:43:4a:c9:
         d6:f4:c7:72:c9:46:bb:83:ef:11:2d:4f:16:cc:81:be:dd:5e:
         1c:75:0f:c3:33:83:07:92:c4:f0:7f:9e:a5:6d:2b:4a:66:37:
         65:3b:37:c2:4d:70:2b:b1:33:dd:25:85:cf:76:91:0a:a2:70:
         72:a7:ff:7f:93:74:63:e4:b5:e6:89:29:39:36:1b:01:87:e9:
         8a:97:ed:38:ed:e6:a4:2b:a8:39:ff:d0:66:a1:c0:63:39:fc:
         b4:99:9f:ae:8d:8d:09:b8:45:e3:3e:15:e9:71:89:e5:e5:62:
         9e:3d:10:f8:a7:e3:16:1c:b3:99:2c:3a:e6:3d:55:6c:f5:15:
         ad:57:26:5a:8c:dc:de:0d:18:1c:59:98:9a:e6:6a:c6:ca:50:
         27:85:38:c1:8a:95:f4:75:37:91:d1:24:14:e6:0e:b6:4f:4b:
         b0:18:57:d4:0c:4d:5d:0a:ab:7d:2d:1e:0c:1e:13:d3:a8:75:
         5c:db:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----