Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b5a60290-7b19-3eb2-8716-0d250aed0799.roa
File:                     b5a60290-7b19-3eb2-8716-0d250aed0799.roa (raw, json)
Hash identifier:          TdUACNYm53HCqulDVlZKd/uw7R/HTuR6FP8fGBnA3/8=
Subject key identifier:   7B:6B:6F:AC:6F:52:25:DD:EB:B9:3E:E7:97:A5:37:A5:2F:DD:FE:3C
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F4328583D5AC81459749765863AAB3A00
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b5a60290-7b19-3eb2-8716-0d250aed0799.roa
Signing time:             Fri 12 Jun 2020 04:00:00 +0000
ROA not before:           Fri 12 Jun 2020 04:00:00 +0000
ROA not after:            Thu 27 Jun 2024 04:00:00 +0000
asID:                     13329
IP address blocks:        199.180.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:c8:14:59:74:97:65:86:3a:ab:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Jun 12 04:00:00 2020 GMT
            Not After : Jun 27 04:00:00 2024 GMT
        Subject: CN=4f4fda2b-3e91-45bf-b8ac-1bb592a136e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:e9:71:5f:3a:00:ba:50:21:5e:8e:c8:57:
                    21:89:88:cb:6b:90:1f:08:8f:ee:7e:9d:9c:ef:05:
                    dc:c1:2d:a5:16:4f:03:5d:4a:d8:1c:b4:77:39:8c:
                    3a:4a:21:48:38:66:b3:3a:2c:11:24:b3:70:fc:62:
                    5d:4b:b6:5e:df:41:3e:7b:78:99:94:66:12:b1:cd:
                    a1:33:03:03:7f:36:27:9c:ae:ca:3d:17:f4:98:62:
                    ea:2e:3f:1c:90:ae:f0:1d:5b:59:b5:46:23:5f:40:
                    88:4e:fa:d1:9f:27:9e:07:be:77:d8:4e:4d:be:6e:
                    be:00:50:fc:b0:6e:08:b7:8b:c6:20:51:32:48:6e:
                    d4:e4:82:6d:df:d9:79:78:48:93:a6:76:c5:44:92:
                    75:5a:83:3a:3f:bc:e1:7d:be:41:66:72:18:bf:89:
                    ab:3a:74:04:7a:7d:41:62:ee:6c:b9:a8:5d:92:09:
                    01:54:6e:cf:1e:38:fa:c8:24:58:54:b2:29:5a:55:
                    2b:d7:e7:a6:1b:e6:de:5a:31:d5:24:b1:f8:02:90:
                    67:5a:df:d2:31:48:75:12:ca:1d:64:7e:72:08:81:
                    89:37:e3:cb:29:82:6d:37:4f:da:ec:ee:70:e7:77:
                    d5:53:32:1a:8a:ba:31:d4:34:60:fb:19:2b:86:2c:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6B:6F:AC:6F:52:25:DD:EB:B9:3E:E7:97:A5:37:A5:2F:DD:FE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b5a60290-7b19-3eb2-8716-0d250aed0799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:6c:09:1a:70:c9:92:34:69:ac:24:2c:56:98:eb:02:97:
         a7:9d:16:17:82:78:a3:ad:94:25:9f:98:1b:a3:f9:51:73:f7:
         ee:37:25:f4:d6:ce:52:3e:e7:52:03:e9:07:88:61:9f:f9:fe:
         88:47:ac:67:a6:48:7e:5b:4d:f0:c8:cb:9e:a1:92:25:fb:95:
         18:10:31:08:74:30:bd:28:43:32:e2:c0:86:25:39:69:86:47:
         58:1f:f7:f7:11:16:b9:33:83:95:7e:bb:f0:5d:ec:37:fe:3d:
         4b:92:a7:17:bc:f0:c4:ef:98:40:75:21:b2:05:ad:a8:f2:78:
         27:ec:6a:bd:cf:43:7d:f8:58:42:6c:06:27:cc:e8:26:b7:a4:
         b3:03:40:0d:d9:66:3c:be:1d:48:ac:36:ed:21:68:91:63:2c:
         37:47:0e:6a:2a:c9:cc:60:9b:f6:ea:93:a9:9f:67:5f:7f:bd:
         26:36:fc:ff:db:83:b5:56:2a:7e:e3:13:8d:fb:a3:98:52:9f:
         f0:20:72:f7:b6:2b:3e:7b:88:03:d3:62:32:7b:c0:21:d5:60:
         02:7e:11:39:6c:4e:2c:b3:d1:34:16:94:28:c9:20:48:a9:b5:
         e6:de:08:32:b0:03:39:62:0b:74:69:92:87:ba:41:d8:96:c4:
         a9:2b:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----