Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/f0b691df-d2e0-33de-a521-67a1d2c75cda.roa
File:                     f0b691df-d2e0-33de-a521-67a1d2c75cda.roa (raw, json)
Hash identifier:          NiASaKlEA+Q0dwKO5/K6W+C5F2UC4aS4pzHmFZVtnQw=
Subject key identifier:   CF:F4:F3:1A:AF:9E:60:BE:43:B5:CA:6D:2D:97:6E:08:57:CB:3A:FF
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F4328583BF7203A36FCE8B39C83203480
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/f0b691df-d2e0-33de-a521-67a1d2c75cda.roa
Signing time:             Fri 05 May 2017 04:00:00 +0000
ROA not before:           Fri 05 May 2017 04:00:00 +0000
ROA not after:            Mon 03 May 2027 04:00:00 +0000
asID:                     13213
IP address blocks:        74.123.244.0/22 maxlen: 22
                          104.129.160.0/21 maxlen: 21
                          104.247.88.0/22 maxlen: 22
                          2607:6880::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:f7:20:3a:36:fc:e8:b3:9c:83:20:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: May  5 04:00:00 2017 GMT
            Not After : May  3 04:00:00 2027 GMT
        Subject: CN=2d33b40a-40e9-4992-8942-6efc6a6a2033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d2:8f:4c:36:5a:7b:1a:7c:3b:07:3c:95:81:
                    b9:82:fa:90:63:e1:a2:6e:4c:ba:ba:06:29:ba:e8:
                    61:9b:f9:bb:11:77:31:84:b9:6f:7f:6c:71:5b:28:
                    48:de:9f:c2:3e:e6:f6:a7:9b:e3:a5:cd:d6:c6:bf:
                    8e:0e:f8:23:2a:bd:b0:f3:7c:15:5c:d5:96:8d:88:
                    64:29:d5:58:38:59:41:32:ed:45:d2:0d:59:28:4f:
                    33:12:be:11:6f:ea:be:ce:9e:26:99:ea:a5:86:34:
                    ac:33:46:a3:f3:49:c7:66:3e:fc:3a:9f:b3:fd:cf:
                    29:ea:79:a5:23:49:b6:01:95:02:e5:bf:06:d3:56:
                    5d:9a:ee:7a:cd:d2:7f:83:70:91:c8:89:13:b1:f0:
                    7b:c1:68:e3:0c:0a:bb:b8:c3:78:48:47:4f:e1:5e:
                    57:8f:67:df:c4:2a:eb:8a:af:4d:e8:3e:1d:21:90:
                    73:28:3e:41:b5:98:b3:5d:ec:cc:e6:1c:b2:16:8a:
                    f2:2e:1b:a8:83:8b:d3:cc:9a:eb:36:93:30:7f:48:
                    1f:f9:7d:6d:fd:ba:d6:d7:29:7d:77:26:66:03:ae:
                    3f:52:44:a2:e8:01:2a:52:e3:85:4f:3d:80:5a:c8:
                    29:e8:d9:10:24:f9:e4:83:df:47:de:f9:95:03:fb:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F4:F3:1A:AF:9E:60:BE:43:B5:CA:6D:2D:97:6E:08:57:CB:3A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/f0b691df-d2e0-33de-a521-67a1d2c75cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.244.0/22
                  104.129.160.0/21
                  104.247.88.0/22
                IPv6:
                  2607:6880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:ef:2f:ba:29:a7:e2:7e:bf:3a:66:c8:be:b9:f2:01:f2:
         d9:aa:6d:43:94:42:3b:c5:a5:47:06:e0:e6:dc:ab:00:fb:b0:
         7d:46:78:8c:4a:73:2a:62:84:51:03:1d:a6:67:57:9b:ce:e3:
         79:97:22:f2:d4:78:a6:5c:ff:69:6b:44:ad:16:71:76:96:77:
         ad:b5:51:42:bd:bc:c4:6d:3a:6d:7f:60:70:0b:c0:ef:3e:75:
         a3:f9:1f:de:7b:1c:e4:ab:c3:69:52:50:6f:cc:c8:c6:22:e0:
         87:29:a8:bf:d0:fc:05:1d:c4:f8:4e:43:ba:06:dd:a5:d5:10:
         2f:b2:3a:e2:bc:32:08:0c:1c:cf:df:8b:54:38:e0:08:75:f3:
         43:f4:cc:57:5b:74:1a:b9:f5:ff:24:fb:18:8b:cb:cc:d3:4b:
         b5:9f:75:d2:7d:ca:73:d7:6e:c0:c1:f0:c8:83:9a:a6:85:b0:
         5b:bf:89:4c:ed:ca:ca:62:66:d6:b9:73:8a:82:ee:ab:c7:a8:
         70:e4:c3:47:6a:01:f2:a5:89:23:77:d6:43:cb:74:a3:2d:07:
         71:a1:86:1e:c3:23:83:cd:87:86:ad:b9:be:b0:16:1e:cf:77:
         5f:a7:1f:f7:3a:20:6a:5a:f6:e4:72:ee:cd:f2:73:99:ce:fc:
         5e:27:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----