Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/66caa431-18af-30a3-ba41-dddf01dcf489.roa
File:                     66caa431-18af-30a3-ba41-dddf01dcf489.roa (raw, json)
Hash identifier:          OniSnf+65xY2655Fmnuj61N5whbg+Z/waxkxLeboBu4=
Subject key identifier:   F5:F2:13:EF:42:16:C9:38:3D:30:C4:56:AA:2A:31:85:7A:DD:A7:43
Certificate issuer:       /CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Certificate serial:       010D0C9F4328576D51CC73C042CFC165F313F20D
Authority key identifier: E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/66caa431-18af-30a3-ba41-dddf01dcf489.roa
Signing time:             Wed 19 Sep 2018 18:24:55 +0000
ROA not before:           Wed 19 Sep 2018 04:00:00 +0000
ROA not after:            Tue 19 Sep 2028 04:00:00 +0000
asID:                     6456
IP address blocks:        2620:0:cf0::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:f3:13:f2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Validity
            Not Before: Sep 19 04:00:00 2018 GMT
            Not After : Sep 19 04:00:00 2028 GMT
        Subject: CN=c7a542e5-1838-40e2-9534-91b1a04f01de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:81:36:00:ab:ba:bf:17:75:7e:77:c6:43:
                    58:14:de:ed:03:28:92:61:70:97:28:07:c8:ef:b0:
                    34:84:c5:4f:6d:a3:a5:94:ec:83:7b:d1:bf:b0:21:
                    32:2c:cb:fe:db:6b:a2:11:f9:0e:5f:d6:9c:89:f3:
                    9f:7e:c4:82:2d:d1:ec:4a:5e:58:77:79:82:ad:97:
                    85:fd:6b:bb:82:24:54:96:24:52:97:e5:ef:a3:c7:
                    1f:52:35:b3:d4:58:d6:c8:ca:4c:3f:06:45:49:3e:
                    e6:5b:04:e8:73:4e:af:c4:c6:d0:35:0b:f1:70:5b:
                    0f:3b:94:59:20:02:02:88:5c:4b:44:2f:eb:27:59:
                    4b:70:ea:3e:b9:2e:ba:b2:66:58:5f:01:8a:ca:60:
                    4b:93:48:92:43:5c:e2:21:a0:64:7d:4f:84:da:db:
                    a2:1b:cd:00:35:af:76:a5:6f:74:a5:6e:1d:dc:a3:
                    cb:62:b2:d8:0f:77:ed:2d:5e:21:87:4e:07:0f:22:
                    61:47:91:53:3a:0a:30:a7:05:1c:cf:f0:65:10:d0:
                    50:c0:31:b8:b2:ff:7e:cb:08:9d:83:92:05:4c:36:
                    44:39:72:ae:a0:1d:4a:29:2e:03:b9:62:6c:ba:89:
                    5d:41:49:08:f0:3b:9f:b5:30:a6:64:4a:2c:4c:b3:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F2:13:EF:42:16:C9:38:3D:30:C4:56:AA:2A:31:85:7A:DD:A7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/66caa431-18af-30a3-ba41-dddf01dcf489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:cf0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:c7:7b:65:cf:72:6a:2a:44:64:34:d3:31:ca:3f:0e:14:
         ca:6d:a3:09:c9:0d:06:1e:9f:09:27:3b:c8:8e:92:3e:c8:e7:
         e6:96:fe:75:32:f6:3d:bc:7b:73:52:f5:70:75:bf:d4:16:f3:
         5e:30:f3:46:79:24:60:76:f8:02:0c:90:48:13:4f:f7:9f:3a:
         06:79:cc:86:d7:73:09:79:c9:22:76:66:b5:15:1f:10:3f:d8:
         4c:ab:f0:3f:0e:ba:dc:c7:69:05:91:92:88:ff:34:37:ae:8f:
         7b:49:99:56:77:b7:11:e0:89:99:dc:ca:ca:4e:45:51:1b:91:
         1f:e3:f9:ba:ce:21:2d:48:da:db:4b:30:fd:86:3b:1b:74:d1:
         61:0e:b1:9b:8a:23:59:ab:79:ac:34:c1:9a:27:4b:a5:5f:ca:
         97:e8:28:84:8c:3e:e7:b1:f3:6c:d5:06:45:8b:95:20:8c:b1:
         e3:83:1a:a9:35:f0:59:c1:67:b5:36:bd:63:d7:b7:28:7c:1e:
         aa:70:d8:9e:c1:f0:5a:53:47:c2:11:5f:64:13:ca:1c:dd:fc:
         6c:07:47:e7:93:6c:75:74:1b:2b:72:6b:1d:0e:5a:ef:00:bd:
         b7:b5:53:6a:be:ec:70:66:f1:f9:1b:59:54:f2:43:5a:e7:24:
         56:18:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----