Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/0bbfc39e-d8da-3797-80da-aa4c94af4120.roa
File:                     0bbfc39e-d8da-3797-80da-aa4c94af4120.roa (raw, json)
Hash identifier:          KX5IDFlAoRsL5OAVHHr8cKnc676F9r7x9tPmP/sV0Cs=
Subject key identifier:   80:F8:5F:A5:3B:41:74:BA:80:60:D7:F0:1D:79:EF:93:62:C1:69:57
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328583C7E03DFD564C31F0F61A1E000
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/0bbfc39e-d8da-3797-80da-aa4c94af4120.roa
Signing time:             Thu 12 Mar 2020 04:00:00 +0000
ROA not before:           Thu 12 Mar 2020 04:00:00 +0000
ROA not after:            Tue 09 Apr 2024 04:00:00 +0000
asID:                     62240
IP address blocks:        64.40.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:7e:03:df:d5:64:c3:1f:0f:61:a1:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Mar 12 04:00:00 2020 GMT
            Not After : Apr  9 04:00:00 2024 GMT
        Subject: CN=e3a73e06-b156-42fd-9d7f-4f094df07ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:a4:dc:c5:c7:57:ed:90:0a:c0:ac:0f:87:
                    07:8a:32:76:3b:92:d4:7c:9d:e2:4a:56:1e:85:4c:
                    02:d0:2d:e1:bc:a5:d4:83:22:1e:03:06:99:84:53:
                    1d:2b:de:7a:e5:a7:0b:c6:5e:fc:0b:59:18:41:11:
                    cf:ba:72:0d:a1:51:47:ee:0f:82:47:2b:f7:7a:f6:
                    49:03:b9:8e:00:67:31:50:b9:56:21:05:9f:2e:a8:
                    16:6e:f9:8c:4f:65:b7:53:9a:2f:3b:9b:4b:5d:bb:
                    31:61:85:14:cb:02:2d:e2:32:16:41:fa:88:66:61:
                    f4:94:84:08:02:68:46:eb:b0:64:e1:3d:b9:1e:fb:
                    f6:4c:f4:cc:7d:d4:a9:dc:9e:57:de:79:52:1e:90:
                    31:1b:f5:bd:64:fe:24:d9:0d:72:e5:6e:00:d9:f6:
                    c0:99:98:a0:cc:6a:98:3a:5b:42:b1:d8:01:a6:b8:
                    28:47:12:43:e8:95:c5:f3:b6:3e:c2:d0:ea:13:12:
                    85:29:26:7b:22:fa:e7:08:45:63:85:57:ff:29:ed:
                    18:b3:49:40:8a:e9:00:0a:a1:9b:64:a4:eb:78:34:
                    67:de:77:e8:2f:73:99:f2:6e:89:35:96:0b:3c:9e:
                    d1:ce:52:06:7f:26:9e:fe:02:56:8f:89:62:34:fe:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F8:5F:A5:3B:41:74:BA:80:60:D7:F0:1D:79:EF:93:62:C1:69:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/0bbfc39e-d8da-3797-80da-aa4c94af4120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:3d:91:db:96:92:f5:4d:8b:ff:f3:e0:17:ed:2f:75:a9:42:
         18:7d:25:74:5a:72:ba:bd:ff:de:64:48:2a:14:c6:44:46:1c:
         57:d7:80:21:f1:e5:c4:0e:88:d0:39:4e:0f:e0:e8:07:60:4c:
         91:37:8e:e4:4c:61:55:11:95:e3:4d:b7:9f:ee:70:bd:12:5d:
         d0:25:2b:c1:00:07:74:84:5b:b3:4d:46:a5:5e:73:9a:ae:cd:
         60:97:0f:fa:3e:02:c3:fb:d8:6e:7f:85:39:01:50:7c:06:69:
         ab:39:91:13:85:ae:31:27:2c:c5:c2:80:c0:7e:54:7d:ae:56:
         5f:2b:5c:71:6c:ec:8b:2a:75:92:b2:67:7a:4f:95:96:c6:13:
         b3:b4:d6:e4:4c:47:fb:75:1c:08:3d:0f:6d:a1:10:29:b9:7d:
         87:ef:18:b8:3c:3a:72:d7:01:b3:ed:33:0f:fa:c4:7d:1c:1d:
         00:a9:72:0f:c2:ea:cc:cc:3c:5d:7a:ae:92:2e:89:a6:88:3c:
         92:cc:3a:84:2c:8e:d7:72:be:37:04:ef:21:b2:37:1c:bd:e3:
         1e:6b:d3:1e:27:63:d2:37:88:7f:82:2b:78:a6:27:66:a2:af:
         1d:5a:d2:01:ed:12:d2:e9:08:b8:e1:3d:85:87:7b:46:b1:a5:
         02:f7:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----