Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f802ea2b-0915-3fbb-88ae-c02a032b82b0.roa
File:                     f802ea2b-0915-3fbb-88ae-c02a032b82b0.roa (raw, json)
Hash identifier:          DwUb0NkVgcn+vmZB51Jh6O6MzmDiLTG6PKta5jEGv7U=
Subject key identifier:   54:40:D7:45:0E:34:39:B5:F0:AB:75:4D:A5:73:B1:AE:95:28:06:ED
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583CEE75C769B129675627CDE4C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f802ea2b-0915-3fbb-88ae-c02a032b82b0.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Sun 19 May 2024 04:00:00 +0000
asID:                     49392
IP address blocks:        108.165.240.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ee:75:c7:69:b1:29:67:56:27:cd:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : May 19 04:00:00 2024 GMT
        Subject: CN=0045e5e1-6e36-43a3-b20b-f48305c628af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:3b:ea:f7:83:b2:44:ec:08:fc:b5:f3:2c:
                    b0:28:27:f4:c5:34:8e:c9:5e:53:0d:f0:e8:4e:01:
                    bf:a9:0e:69:d3:4a:29:06:ae:dd:c3:a8:03:c8:5e:
                    af:e6:c2:a9:42:9c:f2:cf:81:e8:ef:29:09:d7:28:
                    8f:37:9f:ec:6f:01:11:0f:37:19:07:92:cb:af:57:
                    b9:a5:a7:b3:2a:aa:a5:1d:5a:94:8b:0f:35:9c:45:
                    3f:93:eb:f3:c4:56:d2:86:19:62:57:42:3f:30:57:
                    c8:90:97:9d:d1:c0:b6:f0:aa:f3:c6:d3:5a:8b:44:
                    d4:70:20:42:a3:33:05:08:a6:da:65:8c:2b:09:f2:
                    42:6e:0f:70:d2:e4:53:e5:54:40:52:e8:40:81:fe:
                    4e:cb:aa:c8:c8:57:c3:6a:29:67:62:08:c8:c9:e1:
                    11:f8:85:2a:5f:51:5f:63:12:a4:09:fe:3b:05:e9:
                    fb:aa:d7:f8:9d:3b:e0:81:e9:a0:c2:6e:82:89:6b:
                    cd:18:f6:c9:2c:34:5e:c7:79:7f:a0:88:6f:a8:53:
                    d6:86:a4:56:4a:dd:f7:92:c3:58:ce:17:cb:4b:7e:
                    11:dd:8d:f0:34:b9:22:76:f6:07:6d:61:8e:61:f5:
                    14:49:80:81:89:79:29:aa:8a:28:19:bb:7c:7c:40:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:40:D7:45:0E:34:39:B5:F0:AB:75:4D:A5:73:B1:AE:95:28:06:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f802ea2b-0915-3fbb-88ae-c02a032b82b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:99:46:37:b9:c0:7e:d9:3e:2c:28:ee:76:f2:be:bb:3c:03:
         16:e7:7d:07:64:6d:f9:08:e5:59:bc:06:b0:af:c7:3e:58:06:
         84:29:93:ba:32:55:54:f5:ad:b9:ab:06:e3:5c:0a:e6:5c:42:
         38:80:54:a3:5c:ce:27:b5:51:a7:79:0a:4b:28:dd:bf:26:cf:
         06:f3:a7:c2:62:bc:cb:d1:e0:ba:89:e8:d9:ae:ed:89:1e:5a:
         3f:17:e4:22:bc:76:42:15:3d:63:35:10:00:01:1e:72:0f:d6:
         77:cd:43:c1:b3:89:18:d2:b0:31:3d:06:f6:cb:3c:95:67:c5:
         db:81:ec:5e:9d:91:05:db:9b:df:19:2a:02:51:09:74:64:ea:
         92:10:8b:5f:e8:78:63:dd:17:30:44:4b:7e:d1:c7:df:8a:63:
         7b:df:f8:c4:0e:85:d0:a8:70:c4:02:a5:8d:95:d5:be:df:28:
         d7:7e:af:eb:3d:3a:2d:12:16:16:f8:e0:71:fe:8c:1f:98:9a:
         05:97:c7:35:ef:1c:2f:f9:07:da:b8:7e:65:22:d5:48:cf:da:
         02:0a:74:17:d1:70:57:a5:2c:af:9d:2c:f3:0b:f5:27:51:03:
         ed:c7:19:02:6f:9e:bf:41:8d:5a:b0:f8:15:54:91:fc:47:ca:
         84:2d:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----