Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/67468145-e6bd-3d61-b51d-7f3833e389e8.roa
File:                     67468145-e6bd-3d61-b51d-7f3833e389e8.roa (raw, json)
Hash identifier:          k797zCax/i2CF5t9FNS63HE1QSVKzhD1dbJ2I2u7/Rg=
Subject key identifier:   75:18:C7:CD:26:5A:33:94:DF:D5:23:44:6B:23:B2:9C:8B:B0:1F:7D
Certificate issuer:       /CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Certificate serial:       010D0C9F4328583FC93C88B49CFED8308060BE00
Authority key identifier: E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/67468145-e6bd-3d61-b51d-7f3833e389e8.roa
Signing time:             Wed 19 Sep 2018 11:25:47 +0000
ROA not before:           Wed 19 Sep 2018 11:25:47 +0000
ROA not after:            Mon 18 Sep 2028 04:00:00 +0000
asID:                     6456
IP address blocks:        208.90.168.0/22 maxlen: 23
                          208.90.170.0/24 maxlen: 24
                          208.90.171.0/24 maxlen: 24
                          2620:0:cf0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c9:3c:88:b4:9c:fe:d8:30:80:60:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Validity
            Not Before: Sep 19 11:25:47 2018 GMT
            Not After : Sep 18 04:00:00 2028 GMT
        Subject: CN=9f71e79b-8911-453c-a7aa-dd709907148e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:56:57:53:8f:ef:0c:a0:e4:22:5e:d1:36:
                    b8:0e:9e:71:8c:39:90:4b:a8:0c:3b:39:4f:58:cd:
                    1f:b8:1d:99:77:d7:13:90:da:39:69:8f:87:69:cd:
                    20:cd:8f:91:84:21:eb:0c:9f:51:98:84:ba:cd:2d:
                    82:17:92:a9:23:61:6b:87:28:68:16:d7:5f:99:5c:
                    16:b1:b1:35:88:72:ef:d8:bc:c9:f7:16:e7:de:0d:
                    8d:8c:94:0f:e9:26:e4:70:1e:8e:2c:84:c0:61:da:
                    66:84:65:31:ad:ab:46:51:d8:bf:62:73:29:b4:c1:
                    bb:72:37:db:34:ce:7a:ff:eb:49:86:b3:8a:c1:3a:
                    88:70:5d:33:7c:b2:87:a5:cf:e5:72:43:e0:39:14:
                    0e:74:ef:34:19:51:e6:18:af:5b:62:2f:c8:21:dd:
                    90:b8:b6:b4:1c:6b:6c:f1:b5:b7:d4:20:c3:71:35:
                    ca:27:11:46:da:d4:bf:f1:fb:cf:86:70:9b:bc:eb:
                    c8:f2:e1:d5:2f:7a:8e:83:c5:81:50:20:fe:38:4e:
                    b4:62:0c:ff:c4:f9:8e:77:6c:3a:91:89:9a:57:67:
                    e0:a8:93:fa:61:40:96:fb:d9:42:76:19:c9:ef:a2:
                    73:94:a9:07:59:b3:ca:60:af:72:47:bf:60:04:00:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:C7:CD:26:5A:33:94:DF:D5:23:44:6B:23:B2:9C:8B:B0:1F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/67468145-e6bd-3d61-b51d-7f3833e389e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22
                IPv6:
                  2620:0:cf0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:99:c4:e3:9c:4c:ef:ae:0b:40:cf:d6:42:5e:70:0e:4f:
         5f:90:7e:14:de:2a:0c:66:3c:b2:2e:c9:62:ad:6f:d6:f5:c3:
         04:29:52:d4:3e:a1:a8:97:d9:d0:50:e4:37:f1:1a:ef:ce:b3:
         f8:b5:28:98:d8:0e:41:49:5c:e5:59:58:0a:de:12:4e:49:d5:
         e3:7a:11:82:78:c1:32:48:e9:e4:86:35:94:e2:17:2e:75:ff:
         b8:02:d8:20:2b:55:58:31:d4:e1:32:3f:79:8a:f4:a0:d7:9a:
         6c:b6:65:50:be:69:c7:87:85:04:9f:b6:07:ee:40:45:53:f3:
         d8:70:22:9e:f2:ca:01:4c:84:16:e1:f7:06:62:50:5e:cb:31:
         e6:0f:2e:f6:46:cc:45:3f:3d:ab:a0:7f:88:43:0f:5e:00:c6:
         79:50:22:f4:b2:85:7c:b9:36:e0:63:2b:0a:ce:bc:14:15:87:
         11:73:77:27:20:cb:12:74:e7:2b:d8:9b:e4:74:0f:b7:d9:8f:
         c8:71:25:03:34:7a:c8:09:5e:77:49:12:74:ff:8e:85:2e:47:
         54:95:d2:b9:42:4a:b7:89:bc:58:d1:11:cd:b9:be:ac:54:17:
         35:0f:4e:f0:84:e5:eb:24:48:7c:1a:32:91:cb:6b:63:4a:41:
         2f:b6:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----