Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/45a53cae-9b64-3843-a5b2-278be1c18816.roa
File:                     45a53cae-9b64-3843-a5b2-278be1c18816.roa (raw, json)
Hash identifier:          BUxmUSJtdAh+dTmTBGBFDGYX+GeeNJN/mMemc/vwUpY=
Subject key identifier:   63:BF:35:62:85:39:EF:21:AE:93:9C:8C:5E:22:1E:F1:38:C9:1C:4B
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F4328583AC5DF5C3EBDDE3BFF06B71FC0
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/45a53cae-9b64-3843-a5b2-278be1c18816.roa
Signing time:             Tue 22 Dec 2020 05:00:00 +0000
ROA not before:           Tue 22 Dec 2020 05:00:00 +0000
ROA not after:            Sat 04 Nov 2023 04:00:00 +0000
asID:                     26548
IP address blocks:        172.111.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:c5:df:5c:3e:bd:de:3b:ff:06:b7:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Dec 22 05:00:00 2020 GMT
            Not After : Nov  4 04:00:00 2023 GMT
        Subject: CN=5d7f5642-68ee-45fb-93a1-dbc1b758f9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:0c:d4:cf:be:46:cf:1f:50:81:b5:38:25:
                    ba:70:a2:1c:f6:f0:9d:d6:23:78:ea:c7:af:34:1f:
                    61:ef:1b:2e:27:69:dc:ce:52:32:c3:58:a1:82:0c:
                    4b:a3:4c:44:81:11:25:49:b1:db:c9:de:43:f5:e5:
                    bd:f1:bb:b1:22:de:fb:c7:a9:bd:2d:64:53:73:ff:
                    fc:7a:90:a1:91:47:23:4c:4b:da:d7:c9:89:df:7a:
                    56:1b:2e:8f:5c:b9:de:89:46:16:48:de:08:ea:8e:
                    13:b1:45:d9:62:2d:c7:00:fc:8d:b4:5c:a1:d3:63:
                    20:82:64:bc:1d:b5:48:f3:61:39:2c:cc:7d:0f:1c:
                    a5:73:80:64:55:e4:37:e0:b6:da:c4:87:f1:cc:59:
                    b3:01:60:ac:d8:bb:60:41:f3:37:5e:6b:64:66:11:
                    db:81:98:8d:44:50:de:2b:cf:01:00:aa:c3:02:06:
                    51:08:2a:e8:fd:dc:df:48:67:8f:4b:f8:f9:09:fa:
                    9c:e5:1d:82:1b:3e:66:a2:27:1c:f3:44:4a:a4:6b:
                    46:9e:a0:81:7e:a4:ad:ca:8b:6d:1c:77:7d:94:41:
                    33:6f:18:4c:96:e6:72:b9:4b:14:4d:84:3f:93:62:
                    b0:87:32:ba:d9:dc:2a:2a:65:23:79:12:28:d8:cc:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:35:62:85:39:EF:21:AE:93:9C:8C:5E:22:1E:F1:38:C9:1C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/45a53cae-9b64-3843-a5b2-278be1c18816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:3f:f0:77:f0:37:11:bc:41:61:e0:2d:62:50:9c:38:db:
         38:52:4c:64:81:14:e2:85:51:7d:1e:94:dc:c3:de:72:40:cd:
         48:d9:85:a7:49:50:79:87:84:fc:04:5b:61:f2:e1:1d:73:52:
         16:9b:34:40:6a:d1:33:a4:85:26:f8:92:67:44:12:8b:9d:fa:
         a8:ba:17:99:78:22:97:05:f0:9e:0f:78:67:74:62:7a:f6:c8:
         21:7c:9c:58:5b:1e:86:53:6e:b9:94:83:d4:8d:1b:cb:d6:e5:
         a3:80:03:40:bc:d5:e9:bf:28:25:b7:dd:a9:26:bd:7a:9a:21:
         02:07:64:e2:01:a7:01:23:a4:c9:7f:ba:3b:c1:f9:10:f6:98:
         3f:0e:b7:ba:de:05:d2:4d:03:f1:bb:5d:f8:a8:d8:a8:74:36:
         c4:3e:ee:ae:0e:6b:ce:97:19:c8:aa:57:63:d8:27:4a:c2:ed:
         ac:9e:f1:c7:fa:cb:e6:56:94:2a:fb:21:29:97:df:a5:c4:6b:
         a5:6d:3f:02:fc:b2:8d:1b:a2:18:dc:ca:f0:79:e4:81:05:11:
         93:1f:0f:26:f9:80:2d:4f:40:0b:88:5e:84:e9:8b:6c:cd:38:
         b6:f5:02:2e:7e:30:0d:e6:a2:d7:09:2f:ab:17:47:cc:52:71:
         92:db:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----