Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3544ffa5-757e-31d7-9db2-7dbf0bdc52a6.roa
File:                     3544ffa5-757e-31d7-9db2-7dbf0bdc52a6.roa (raw, json)
Hash identifier:          FLAH7TqJB0GTqj9Grfiz6Io1UEHLSRfQ9WfFQdFhuEc=
Subject key identifier:   47:E7:DB:63:81:0B:3F:B0:C2:44:C1:0F:88:0F:B6:8C:0E:EB:AE:07
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841856903E1295E3447C07DF740
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3544ffa5-757e-31d7-9db2-7dbf0bdc52a6.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 14 Jul 2025 04:00:00 +0000
asID:                     38337
IP address blocks:        136.0.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:85:69:03:e1:29:5e:34:47:c0:7d:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 14 04:00:00 2025 GMT
        Subject: CN=510395ad-681f-4f41-8477-a81b3a03bfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:a9:0b:6f:1a:fa:16:9d:03:ed:8b:56:ec:
                    e8:d6:8a:3c:6a:44:d3:c6:99:0c:48:57:1a:0e:99:
                    d0:0b:20:74:7e:3b:14:df:63:00:b4:21:65:28:6d:
                    67:c2:a3:bf:c1:18:b7:b7:6c:47:67:ed:6b:1b:8f:
                    cf:0a:7a:7c:f8:f3:8a:4f:b0:45:a3:55:61:6f:9e:
                    8d:e7:ab:a3:bf:cc:32:be:d0:19:2a:df:1e:b6:b4:
                    60:e1:fe:4e:cf:b0:7a:8e:91:16:52:2b:dd:bb:1b:
                    e0:74:62:8f:37:2f:8c:57:fb:ba:06:7c:5d:f3:11:
                    21:70:29:02:9d:66:42:f2:9b:ba:f6:2b:6f:2a:28:
                    c0:43:9f:e0:ed:15:c1:be:68:22:f5:33:9e:21:f2:
                    4c:b8:5e:39:fd:54:98:d7:e8:2f:57:cc:86:4a:8c:
                    ab:18:da:0d:bc:82:1b:2a:3f:e6:8f:20:a4:10:33:
                    23:8c:14:64:0c:8b:b7:93:c8:c5:8c:b6:85:f3:15:
                    e4:56:92:93:dc:7a:03:34:b5:fd:bc:e7:95:43:b8:
                    44:50:ce:00:b8:ba:e3:06:18:62:b5:d2:d2:7b:c6:
                    22:13:fc:7b:c1:25:78:b2:06:c8:b5:20:7e:c9:d7:
                    10:c3:cc:31:ed:4f:dc:72:9e:c2:1f:6d:28:d9:28:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E7:DB:63:81:0B:3F:B0:C2:44:C1:0F:88:0F:B6:8C:0E:EB:AE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3544ffa5-757e-31d7-9db2-7dbf0bdc52a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:27:ef:e3:84:18:a4:92:bc:59:99:6e:16:f9:52:18:70:
         8a:21:73:0d:da:f7:0a:3b:28:48:26:7f:f3:d3:36:1d:cd:57:
         f6:48:e9:af:7b:a7:e2:46:76:12:eb:14:ee:74:56:59:7b:47:
         c0:3a:cc:35:a7:f5:ff:55:fb:d6:8c:c8:c8:eb:ad:70:d7:74:
         65:5b:43:73:c1:0a:70:b2:44:0c:d1:4b:f6:60:de:66:15:1e:
         be:bd:69:55:56:c5:4a:c8:a1:2a:a8:62:dc:bb:4b:1d:b5:70:
         90:0f:1a:b2:4b:9b:cc:a7:c2:ca:55:b9:aa:c0:0b:52:8d:6f:
         c0:8d:c5:45:fa:f8:6f:59:bf:02:51:d7:49:d7:65:ec:12:74:
         8f:fb:e9:f9:c6:5b:73:6e:76:4a:0f:bf:f7:73:06:cb:48:b7:
         30:70:e3:7f:4e:b5:e6:5c:7b:cc:17:45:88:a3:b9:c6:4c:15:
         30:30:16:78:56:05:be:81:91:bf:91:f3:94:8d:6e:73:26:72:
         3d:e6:42:c1:17:01:8e:48:25:34:2a:81:96:78:5f:af:60:4f:
         01:44:64:05:6b:28:e5:ba:b0:c5:79:8a:ce:06:9b:4c:b6:c9:
         86:46:38:a5:0c:0e:e7:0c:09:3a:48:e7:5b:46:7a:d1:1f:27:
         b9:fd:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----