Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a7946b90-cba2-3e9c-aa34-9a7dede3f3fa.roa
File:                     a7946b90-cba2-3e9c-aa34-9a7dede3f3fa.roa (raw, json)
Hash identifier:          YIOWn5z61aETF+78uLL6PsUY26fS+P21XeXG/UkhvB8=
Subject key identifier:   B7:0A:0C:2A:87:BC:A5:DF:7C:0C:EC:1D:09:A1:E1:0F:30:CC:EC:DE
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F4328583D40C35FC40B3FF04872B90CF0
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a7946b90-cba2-3e9c-aa34-9a7dede3f3fa.roa
Signing time:             Mon 21 Dec 2020 05:00:00 +0000
ROA not before:           Mon 21 Dec 2020 05:00:00 +0000
ROA not after:            Tue 18 Jun 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        144.168.0.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:40:c3:5f:c4:0b:3f:f0:48:72:b9:0c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Dec 21 05:00:00 2020 GMT
            Not After : Jun 18 04:00:00 2024 GMT
        Subject: CN=a5d5b519-3f60-4bcd-9117-e70473906a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:03:55:94:e9:81:98:f3:d8:0f:10:e3:d6:
                    0f:20:74:94:98:b1:0a:b3:cd:73:81:b6:d3:dd:e3:
                    e5:3a:09:ff:e4:44:19:c8:fb:24:5b:6b:d7:fb:be:
                    e2:84:70:09:8b:db:3f:36:08:26:8c:c6:00:1d:06:
                    3c:9d:f5:a7:c6:e6:fa:da:cd:d8:88:0c:fd:88:ee:
                    ac:35:a0:02:13:a2:75:00:c4:ae:c2:32:2d:63:48:
                    9b:fa:72:7a:0d:c4:a5:57:4b:48:38:15:96:c2:df:
                    9b:1a:56:aa:7d:94:de:eb:66:58:64:24:0b:de:c5:
                    da:9f:76:90:86:d0:89:e6:24:41:51:62:82:51:43:
                    a1:39:22:5b:17:fd:14:86:ee:f9:e9:ee:43:77:21:
                    7e:ac:0b:8d:8a:eb:2d:02:5c:8a:fc:3e:e5:c6:ad:
                    1b:fd:19:14:00:af:db:5d:3e:e6:47:87:a6:2a:40:
                    5f:2d:af:b8:26:13:95:b8:0d:1c:90:b8:40:ce:31:
                    ea:fd:22:0e:8b:f8:d7:a8:68:e9:e7:ee:10:2d:d4:
                    bb:25:f1:0c:7a:25:fa:a1:a2:54:20:36:21:c6:e5:
                    9b:99:3d:3e:82:33:8b:35:b6:62:c2:1c:81:63:cb:
                    38:39:0e:e9:ba:2a:08:02:5d:a6:a1:35:00:47:30:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0A:0C:2A:87:BC:A5:DF:7C:0C:EC:1D:09:A1:E1:0F:30:CC:EC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a7946b90-cba2-3e9c-aa34-9a7dede3f3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ab:fc:33:06:4f:d6:d6:d2:f9:fc:13:7d:88:5f:8f:8c:35:
         5f:bd:cc:af:2d:7c:1e:e3:88:54:6b:08:af:3c:63:82:7a:50:
         eb:a7:43:48:15:51:7c:40:d8:de:31:12:4d:3d:1f:4d:d4:88:
         9f:2c:73:8a:0d:c8:79:c6:da:98:ea:90:6d:cb:e5:df:75:0c:
         9c:2c:fd:2c:ac:ca:ff:d0:f6:d3:aa:24:0c:4a:4c:e2:1f:4e:
         30:3c:ae:46:19:bf:73:be:0a:0f:2a:f1:c0:b8:cb:33:15:62:
         13:9e:c7:1a:91:87:67:a9:0a:46:a7:ca:f8:a9:e3:20:62:b0:
         35:8a:26:40:95:c2:6c:9c:18:7d:3e:83:12:11:db:e5:77:48:
         93:77:99:6a:c2:fc:86:62:1b:f5:4d:ec:ff:d5:25:b9:97:5c:
         b3:6c:b3:1a:8e:c2:84:bf:ab:c4:07:ec:0e:f4:1f:eb:09:e7:
         d7:79:80:a5:cb:c7:d4:31:50:a0:e1:36:32:90:2f:f1:f1:94:
         05:cc:a9:86:44:98:ae:90:38:f5:52:69:06:73:f1:ea:c5:00:
         19:24:63:b9:6d:52:b9:96:31:06:db:79:31:ef:23:59:21:d6:
         42:97:f4:21:55:1b:9b:40:6e:8d:60:c7:b6:f2:98:e2:b5:05:
         0e:9d:81:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----