Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a66ca4c-2ffa-3afb-b8c3-f560f5f9d41a.roa
File:                     2a66ca4c-2ffa-3afb-b8c3-f560f5f9d41a.roa (raw, json)
Hash identifier:          6BvBz8JDcbO8Svfj51P9QLl28S9yqXlMZMbWI/SGQF8=
Subject key identifier:   D9:F5:90:8F:FA:96:4E:24:93:FB:DB:06:B3:22:05:76:77:F3:58:6D
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F432858395E4CFDAE712281B0EC446A40
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a66ca4c-2ffa-3afb-b8c3-f560f5f9d41a.roa
Signing time:             Mon 01 Mar 2021 05:00:00 +0000
ROA not before:           Mon 01 Mar 2021 05:00:00 +0000
ROA not after:            Sat 13 Oct 2029 04:00:00 +0000
asID:                     36492
IP address blocks:        143.131.0.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5e:4c:fd:ae:71:22:81:b0:ec:44:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Mar  1 05:00:00 2021 GMT
            Not After : Oct 13 04:00:00 2029 GMT
        Subject: CN=c7160ead-35fa-4739-b453-303fc8c8bf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:d4:05:a3:49:65:df:b5:53:66:65:f1:66:
                    e3:44:14:69:6c:1f:5a:f1:11:d5:9b:d7:a3:47:2a:
                    73:d2:8b:bb:70:ef:7e:27:3b:2a:bf:42:34:0e:58:
                    b8:43:77:1d:ee:bc:da:9e:c3:29:df:97:2b:81:96:
                    8b:cd:b0:c6:2d:94:c6:0c:34:20:cc:ec:fe:08:4f:
                    e2:8f:94:98:51:11:a7:19:f6:c7:1c:ae:86:aa:9a:
                    40:ef:bd:8e:e3:a2:09:5b:91:fd:36:8f:c9:6f:76:
                    f1:6e:c9:de:1f:eb:e6:c3:1d:e6:21:8f:a3:4f:b4:
                    6f:90:ac:df:b8:8e:59:6e:7d:ee:69:e6:26:8a:ab:
                    d5:ae:1d:4e:3f:6d:31:73:97:24:ec:66:06:b6:89:
                    9e:c4:84:1a:ad:82:d6:94:f6:20:08:7d:9b:18:0a:
                    79:e0:85:12:ad:c9:35:44:23:8d:96:ef:9a:e7:fb:
                    cf:b0:fc:10:49:fd:02:27:0e:70:9c:53:e6:c0:73:
                    b5:76:e4:43:27:0a:fb:48:dc:49:83:d7:6e:74:17:
                    09:2a:32:01:6e:78:bb:73:26:9c:49:76:b4:bd:29:
                    dd:2c:5c:11:e4:f4:d9:42:69:a5:e8:7d:07:15:2d:
                    f9:bc:5a:8f:91:8e:26:d3:03:fd:f8:d3:18:74:1b:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F5:90:8F:FA:96:4E:24:93:FB:DB:06:B3:22:05:76:77:F3:58:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a66ca4c-2ffa-3afb-b8c3-f560f5f9d41a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.131.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:e8:c5:28:5f:22:8d:21:df:d4:ea:b1:5f:49:b6:4d:51:
         7c:39:a4:ee:2d:ec:93:b3:66:d5:8a:bd:83:75:ba:c3:54:fe:
         05:12:46:4a:da:e5:4b:be:ae:02:52:25:b6:96:06:21:85:7c:
         ae:03:ed:35:e2:cf:58:11:42:96:ae:29:b3:64:62:30:6e:db:
         50:cc:11:c1:75:4c:a5:4a:2c:a9:b1:91:13:1f:b9:2c:08:ea:
         8f:10:d2:60:e7:ef:9c:57:84:b8:70:51:10:67:21:38:1b:53:
         53:ed:e0:d9:5d:85:02:d6:1e:31:9c:03:6f:fd:b4:5f:34:43:
         c4:12:92:99:ea:db:b3:7b:95:69:1b:74:97:c7:60:e2:29:51:
         84:82:22:43:1e:4b:96:29:8e:c1:2a:c5:d6:5e:e6:a1:b2:f3:
         5d:6b:f2:17:25:94:14:c9:e6:06:09:3b:69:4e:7f:5e:d9:29:
         d6:7c:ec:35:e2:80:69:14:5b:51:1a:9e:b7:18:ed:85:e4:c5:
         6b:e5:2a:e1:1c:e6:3e:1f:0c:45:80:8a:a5:96:84:56:4d:a6:
         57:fb:2b:05:d4:4e:87:b3:49:dc:7e:a6:8b:0b:99:ef:4c:8a:
         bb:6e:0d:d3:bc:71:05:af:84:e0:86:12:bd:16:3b:1f:d5:1e:
         72:24:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----