Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d1ec690-bf07-3676-bf16-db5f1204901a.roa
File:                     2d1ec690-bf07-3676-bf16-db5f1204901a.roa (raw, json)
Hash identifier:          oItMZ4KZvLCV6wduifGOolCJBpKlhU4K6S0T0sMWLI4=
Subject key identifier:   ED:17:C0:BB:BC:5A:3E:EF:73:78:7D:92:B9:41:15:4C:BA:C9:63:91
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583E6150E0BDD912D3A2DCF3D820
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d1ec690-bf07-3676-bf16-db5f1204901a.roa
Signing time:             Thu 02 Jul 2020 20:35:46 +0000
ROA not before:           Thu 02 Jul 2020 20:35:46 +0000
ROA not after:            Sun 29 Sep 2024 04:00:00 +0000
asID:                     8100
IP address blocks:        184.174.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:61:50:e0:bd:d9:12:d3:a2:dc:f3:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  2 20:35:46 2020 GMT
            Not After : Sep 29 04:00:00 2024 GMT
        Subject: CN=44f86d95-4738-4f82-853f-fb77cd44b375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:17:29:f9:9a:8f:9f:11:af:c7:43:a9:fb:
                    f1:b1:68:61:21:0c:1d:40:04:fe:7f:d4:16:47:51:
                    e5:7c:85:cc:1c:df:52:51:57:f3:eb:89:fc:84:32:
                    21:0c:92:8c:61:8e:95:25:d1:fb:32:f7:f0:d9:f1:
                    2b:36:42:af:72:55:c3:de:c2:1a:b0:57:18:f8:78:
                    67:f9:7d:28:6d:b9:9c:14:e4:39:8f:81:ec:5b:57:
                    6c:2b:c5:7c:6e:ae:60:c9:a8:5d:f6:79:6b:aa:da:
                    64:2a:1c:82:98:0b:8b:f2:a4:d2:d3:28:b1:e4:56:
                    be:0e:a8:34:4c:22:72:90:f2:c9:f1:6b:73:d6:0d:
                    b9:c6:18:46:7b:f6:41:9f:a8:02:1c:d3:e0:dc:e7:
                    86:28:e6:10:b6:3e:d0:a0:14:41:ff:38:04:e1:d8:
                    8c:01:77:5f:64:00:c1:18:02:5d:05:17:c5:0e:bc:
                    20:0d:da:2e:a6:43:bd:87:68:98:3b:50:01:b6:ed:
                    5b:64:b1:ee:54:eb:5a:95:b7:9c:4b:78:b3:f4:1c:
                    b3:62:2b:8a:0f:44:fa:83:fa:81:bb:ed:53:3b:3a:
                    0c:79:23:7c:67:26:67:4b:26:57:c1:33:38:d3:be:
                    de:20:54:35:1a:9b:c6:d1:6c:71:93:e5:fa:cc:8b:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:17:C0:BB:BC:5A:3E:EF:73:78:7D:92:B9:41:15:4C:BA:C9:63:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d1ec690-bf07-3676-bf16-db5f1204901a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1d:7d:77:00:07:f4:15:01:0f:0d:60:fa:24:9c:20:76:c5:
         f2:cb:65:26:fb:21:ec:72:e5:06:bc:4c:ab:74:85:2c:d0:d4:
         1d:22:8f:55:68:41:4f:bd:78:5b:12:12:1a:ab:19:92:e2:a7:
         7c:35:1b:88:f8:43:34:f5:dd:f2:aa:42:aa:1b:28:b0:71:a3:
         68:eb:02:f0:5f:b5:98:e2:c3:44:69:21:30:88:bd:6b:24:e5:
         50:88:63:79:3a:21:49:3d:1f:b4:1e:b4:1a:2a:a7:6d:76:6f:
         d9:73:7e:4a:44:8f:dc:44:89:ea:98:6c:3f:ad:07:20:3b:14:
         34:01:e6:e8:1f:9a:66:cf:be:aa:fe:14:d4:e0:87:68:9e:38:
         4e:a3:cb:ad:d0:14:32:46:5c:ce:d7:43:4d:b3:02:c0:02:d9:
         aa:6a:29:c6:e6:8b:ac:ee:e6:17:c2:1c:58:b6:d9:f2:57:f6:
         1b:5d:66:08:37:1e:d3:14:00:2c:21:14:05:bb:54:bf:f3:a6:
         e0:a6:1c:97:7a:d8:fc:c1:70:3e:d5:e5:41:63:3d:63:92:4f:
         4e:a1:f0:a9:ef:c8:9e:5b:45:cb:e9:ae:52:09:fb:50:38:d2:
         4c:8f:0a:27:35:6b:a5:65:91:43:2b:83:ee:01:72:cc:a3:11:
         79:e0:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----