Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/af057c96-5b48-3603-b61e-080ff9d99fd8.roa
File:                     af057c96-5b48-3603-b61e-080ff9d99fd8.roa (raw, json)
Hash identifier:          CxiZtJ7/Tet77clUrq7cyHaULgBiQdORhjYjcwNU+cA=
Subject key identifier:   B7:C1:52:E9:C6:BB:18:7C:13:FF:A4:EF:DC:02:27:98:B0:70:10:37
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583E6701C218155E328534FA33C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/af057c96-5b48-3603-b61e-080ff9d99fd8.roa
Signing time:             Thu 02 Jul 2020 20:35:46 +0000
ROA not before:           Thu 02 Jul 2020 20:35:46 +0000
ROA not after:            Tue 01 Oct 2024 04:00:00 +0000
asID:                     207459
IP address blocks:        216.74.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:67:01:c2:18:15:5e:32:85:34:fa:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  2 20:35:46 2020 GMT
            Not After : Oct  1 04:00:00 2024 GMT
        Subject: CN=29dd8730-2cb6-4f35-af30-ed105ed09115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:c5:f3:fa:8c:93:65:77:c0:70:49:77:c9:
                    65:68:1e:f3:49:99:52:a9:6d:8d:4e:2b:e6:9b:80:
                    d3:d4:e9:48:fd:9c:72:7d:23:30:dc:60:df:2f:94:
                    63:17:c0:98:36:a6:f4:ce:50:8d:11:08:c6:87:aa:
                    7e:19:04:77:60:39:c9:c6:66:0b:d6:a1:36:1d:d9:
                    e8:85:a4:84:f3:c9:b4:5e:63:40:d8:42:91:e1:32:
                    61:ca:5e:36:36:7e:89:25:23:0a:76:4b:90:f3:7a:
                    95:40:4f:d9:db:26:07:55:9d:c4:87:59:59:16:9b:
                    e5:c0:bc:36:2e:ef:7b:e8:f2:c8:97:95:ae:2b:1d:
                    3e:33:e2:e5:eb:71:cc:5b:ee:bc:ae:8a:c2:f1:2f:
                    34:e2:a9:8a:26:1a:f6:83:0c:e3:d1:ed:fc:25:3b:
                    08:3f:66:fc:fa:dd:bb:7f:e0:f3:d9:27:99:8a:f9:
                    8a:1f:36:f6:37:d6:05:83:fa:11:dc:f9:63:e7:10:
                    74:32:c1:21:03:05:c4:57:50:f7:03:e5:af:0f:5d:
                    be:b0:de:bd:d3:78:a5:91:f7:d0:dc:a0:44:51:f4:
                    ea:af:ab:01:80:ef:8f:55:5c:7e:0e:8b:b8:71:8a:
                    06:44:cf:2f:cf:46:f4:80:e4:fc:a3:cb:f9:4a:00:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C1:52:E9:C6:BB:18:7C:13:FF:A4:EF:DC:02:27:98:B0:70:10:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/af057c96-5b48-3603-b61e-080ff9d99fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:2b:b3:5d:91:99:b7:03:07:cb:4e:15:90:33:99:da:26:
         b0:ff:ed:6e:55:53:6d:8d:d0:b7:a8:ca:f5:69:e7:45:dd:a0:
         4e:37:ee:b5:0b:c2:4a:13:69:37:97:21:16:66:c7:0b:3c:42:
         2b:1e:b5:84:fa:da:9d:3b:8b:4d:00:93:7e:6a:4a:53:78:20:
         a9:52:0a:60:9d:16:6e:f5:ff:0e:a6:9a:f1:f3:25:81:80:2c:
         e2:3b:97:1d:94:ec:2e:95:e1:5c:6c:89:3a:93:9e:9c:34:39:
         21:ad:f6:bd:e5:e7:9b:9d:d4:7a:72:64:d6:89:ec:a2:33:44:
         3d:4d:c5:0f:8f:24:5b:08:21:4e:9e:82:f0:67:70:02:72:92:
         0c:34:2d:43:33:18:83:c9:27:e0:21:14:6b:43:e4:89:40:8f:
         92:c6:bd:17:26:7c:2a:d1:59:4d:23:68:22:8e:37:c2:4e:81:
         83:55:24:64:b8:e3:5f:ba:0e:42:79:5d:73:56:43:f4:22:f8:
         90:55:8a:ec:aa:f6:73:7e:79:55:87:10:0e:48:96:4e:f9:28:
         e4:0f:92:b3:1e:13:df:b1:d0:2a:d4:aa:2d:46:04:db:3f:a3:
         b4:08:28:64:3a:9b:11:da:a5:5a:54:12:c2:80:77:4c:46:d5:
         23:b7:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----