Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/d65ed2fd-fd06-3662-ae3c-7911c5d76ab4.roa
File:                     d65ed2fd-fd06-3662-ae3c-7911c5d76ab4.roa (raw, json)
Hash identifier:          KSROZ5s9iIEX7Zk4tDhzoD6KGvB0c6dMF6keNgouPlA=
Subject key identifier:   FB:2B:35:B7:17:65:4A:AB:4C:04:E4:F8:F6:8E:6A:C5:ED:A5:1C:43
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F4328583D03BAC398F9EBA18A2FE60C00
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/d65ed2fd-fd06-3662-ae3c-7911c5d76ab4.roa
Signing time:             Fri 14 Aug 2020 04:00:00 +0000
ROA not before:           Fri 14 Aug 2020 04:00:00 +0000
ROA not after:            Mon 27 May 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        66.118.48.0/22 maxlen: 24
                          66.187.196.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:03:ba:c3:98:f9:eb:a1:8a:2f:e6:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Aug 14 04:00:00 2020 GMT
            Not After : May 27 04:00:00 2024 GMT
        Subject: CN=daf3b07f-b991-4b90-86cf-be18305f4c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:95:e7:40:67:11:ab:e7:36:f7:27:0c:3c:
                    63:12:1e:36:43:44:88:f8:b3:dc:2e:bc:5e:1e:81:
                    fa:61:9b:c7:a4:f2:20:8f:84:79:61:40:db:b9:2c:
                    00:62:74:7c:f3:42:62:34:c7:2e:e5:84:5e:8c:6a:
                    99:c1:80:bc:7a:df:ff:15:e3:23:27:ae:54:bc:5a:
                    05:2b:3e:41:ed:f1:b1:90:80:07:53:c7:e6:89:b8:
                    90:55:c2:85:aa:8f:a0:a2:e8:40:e7:15:c5:61:99:
                    cb:b0:9a:ce:2f:0c:57:86:35:fa:27:ad:6b:80:6a:
                    78:55:ab:2c:32:1f:be:f8:cf:4a:68:a8:40:34:1a:
                    d0:88:92:ba:4b:88:9e:95:85:56:57:1b:f3:35:0c:
                    bf:b8:76:9b:3a:d2:53:aa:9e:9f:73:0b:e2:a1:e8:
                    18:45:6d:00:77:74:49:bf:ed:eb:78:db:ef:7e:35:
                    11:32:dc:e1:0c:9c:01:c6:1e:fe:e1:7f:95:a6:22:
                    27:7a:10:43:f8:8d:a2:28:bf:52:56:80:54:5f:ae:
                    0f:71:ae:3f:ee:5e:3e:18:d2:ff:f5:7a:18:a6:f4:
                    26:f4:df:3d:b2:45:15:f9:3e:9b:5d:ce:88:29:78:
                    b9:59:d4:0b:7d:a6:ae:f8:1d:a9:81:a9:30:79:5d:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:35:B7:17:65:4A:AB:4C:04:E4:F8:F6:8E:6A:C5:ED:A5:1C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/d65ed2fd-fd06-3662-ae3c-7911c5d76ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.48.0/22
                  66.187.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:3e:5a:69:68:b1:75:c7:02:49:aa:3d:26:aa:b4:6b:15:
         de:e8:05:04:e6:16:ca:72:47:ac:b9:67:b9:7f:6e:8f:6b:30:
         fc:3e:a0:36:1f:3b:a7:c2:c6:88:f0:23:a9:cf:dd:06:68:18:
         71:66:97:8f:52:ba:42:ee:80:97:42:df:c0:cd:d8:ab:dc:f3:
         a5:4c:29:42:eb:46:1b:5b:b8:a4:43:7b:87:22:f0:35:81:2b:
         5b:8d:c8:80:01:2e:9b:6d:74:f4:6f:83:7c:36:95:0f:9c:eb:
         fc:cd:1e:ef:4d:03:bf:66:99:f2:ce:25:60:55:a8:4d:8e:83:
         43:96:cd:ec:79:b1:83:f2:ca:7f:d9:81:de:2b:23:77:9e:ab:
         e4:5e:85:d1:53:78:cf:4c:55:e3:51:77:a2:ae:2b:55:b7:1f:
         f0:c4:4f:bb:e5:a2:37:32:06:05:14:27:07:b2:b0:48:39:bf:
         36:3b:85:b6:bd:48:8b:78:7c:8c:02:e7:c6:e4:d1:16:60:9a:
         8e:ab:3b:2d:22:c6:20:72:4a:71:64:e0:95:c7:c7:92:6a:13:
         3b:50:c2:96:86:10:e7:a5:66:03:3f:5c:40:d7:57:fa:56:8a:
         34:cb:77:cf:8b:cb:a6:9f:26:e4:c1:68:17:f6:62:ad:ff:dd:
         1e:2f:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----