Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/17932995-f517-3aa9-9115-f9decd9839de.roa
File:                     17932995-f517-3aa9-9115-f9decd9839de.roa (raw, json)
Hash identifier:          PZoon61EryP3EXim4uo9vT2zqlbsV25auvTtdky5rbk=
Subject key identifier:   A0:E2:E9:22:DC:9C:54:DB:36:6F:4B:7A:CB:57:38:58:A4:D3:9C:FA
Certificate issuer:       /CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Certificate serial:       010D0C9F4328576D51CC73C042CFC165F3172896
Authority key identifier: E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/17932995-f517-3aa9-9115-f9decd9839de.roa
Signing time:             Wed 19 Sep 2018 18:28:25 +0000
ROA not before:           Wed 19 Sep 2018 04:00:00 +0000
ROA not after:            Tue 19 Sep 2028 04:00:00 +0000
asID:                     6456
IP address blocks:        208.90.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:f3:17:28:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Validity
            Not Before: Sep 19 04:00:00 2018 GMT
            Not After : Sep 19 04:00:00 2028 GMT
        Subject: CN=2df0306b-e2fe-4ea9-adcd-0088300190cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d5:1e:e6:08:b5:c7:21:fe:76:e7:5d:55:0b:
                    e4:c1:60:ad:61:23:bf:d4:9f:2a:45:e1:89:c8:8b:
                    6c:39:31:02:73:db:1a:2b:10:99:01:47:97:06:1e:
                    e9:71:4d:78:ad:d6:ad:98:09:d3:96:34:71:19:f8:
                    40:de:8b:a4:9e:d0:b8:cb:46:d5:bf:3d:0e:cc:f9:
                    0f:8e:ae:55:d5:d1:23:16:f6:e8:30:e9:19:2d:ff:
                    47:63:63:27:af:38:a7:1a:87:a9:0e:bf:90:2f:eb:
                    32:a3:e5:66:27:c1:e9:24:71:7f:dc:07:b3:d3:35:
                    48:c1:2f:27:d2:6c:cc:47:93:03:2a:0e:07:72:c1:
                    7d:e3:94:ea:1c:01:5a:63:1b:de:dc:30:cd:fc:f2:
                    6b:9b:b1:58:c6:0d:e8:e5:77:e1:99:4a:99:79:74:
                    56:34:78:44:a1:4f:33:6e:1d:fc:25:51:77:88:79:
                    a0:85:6c:49:8f:61:1a:ca:f8:bf:a5:4c:e7:37:97:
                    99:0c:a5:dd:3a:76:d6:6c:56:5b:b8:ea:fa:49:3a:
                    90:c9:cc:6e:f2:7f:96:0c:a0:0c:49:b8:60:e1:f4:
                    f3:58:d9:24:d6:8b:c0:77:a4:92:a9:59:a3:14:45:
                    45:7d:66:a2:8c:92:73:c8:94:ac:82:fd:41:a2:6d:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:E9:22:DC:9C:54:DB:36:6F:4B:7A:CB:57:38:58:A4:D3:9C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/17932995-f517-3aa9-9115-f9decd9839de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:73:8a:b9:82:3b:d3:0d:48:50:67:b6:70:b2:19:19:ad:a1:
         f3:30:cc:ca:6c:e7:b2:bc:e5:f8:44:22:4a:93:02:58:ba:c5:
         f3:ec:1b:1a:05:15:29:62:2b:97:1d:6e:1f:38:13:66:3e:4e:
         a7:60:7d:40:b2:3f:50:ee:75:91:c1:bd:09:2f:11:67:a8:77:
         ac:9f:80:0d:3d:00:90:4d:78:a9:29:93:5c:60:c8:4e:14:4f:
         54:48:59:af:b2:dc:51:f5:ff:a2:8a:ca:0d:33:80:8d:0f:a0:
         c0:ac:3c:32:8c:fb:70:1d:3c:42:c7:59:30:28:f7:2b:a6:ab:
         e2:f7:3e:a2:a7:40:67:7a:fc:c9:98:dc:d4:77:df:c8:27:7a:
         9b:5e:13:1e:ff:07:ec:69:f7:e7:e5:73:6b:7e:31:fe:39:ab:
         0c:f9:68:a5:13:ce:b5:3e:84:cb:bd:cb:f8:0a:ea:e3:a3:39:
         bb:75:18:53:4e:b6:ae:98:0c:ff:ba:df:d8:b5:81:5a:5a:a3:
         e3:fb:e6:fb:99:bb:2d:31:21:f5:7d:d9:c2:cc:ee:cc:5e:5c:
         7a:7d:27:f9:b7:f0:75:eb:2a:01:47:0b:b7:65:51:af:80:2f:
         61:04:68:9c:1b:08:d1:4b:1c:23:46:7b:c5:a9:5a:f8:15:08:
         44:d2:09:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----