Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa
File:                     72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa (raw, json)
Hash identifier:          CxxtIf2bb7gpSoz+Vd0GEtxGLGisqqWira/eeMyw4g0=
Subject key identifier:   56:38:7D:7C:0F:F3:5B:29:A8:61:EA:E7:25:81:2E:78:67:19:EC:95
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F4C984F
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa
Signing time:             Wed 08 Jul 2020 16:40:15 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Sun 14 Oct 2029 04:00:00 +0000
asID:                     36492
IP address blocks:        143.131.0.0/20 maxlen: 24
                          2605:59c0::/28 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:4c:98:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 14 04:00:00 2029 GMT
        Subject: CN=3b9cf1c6-b9d6-4943-bedb-69c55f651cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:bf:5a:5a:3e:07:3c:ed:ad:5d:76:07:3d:
                    48:c6:1d:4b:3f:ed:76:c9:6d:de:33:8a:48:e7:9b:
                    91:7a:31:e8:2a:05:77:17:2a:91:b7:26:f0:33:18:
                    31:00:f2:eb:b2:1b:2a:a2:04:fb:16:38:2b:d4:ac:
                    10:83:aa:c2:d1:4d:23:bc:ee:03:ab:43:b0:ca:d5:
                    8e:39:34:63:8d:42:ff:71:73:d5:24:58:5d:37:db:
                    23:7a:05:45:a0:98:9b:b6:f0:3b:5c:37:e5:4b:e2:
                    fe:61:11:b9:a7:19:96:73:99:49:dc:49:70:85:ac:
                    16:f7:78:e5:36:60:b5:37:d6:6e:c9:49:aa:0a:d6:
                    a1:3f:27:2d:29:6e:62:ca:46:df:a0:45:fb:97:a2:
                    15:21:1c:6e:2a:9b:fc:11:3d:28:1b:d9:4a:99:09:
                    25:a6:f8:bc:4a:45:5a:ab:da:1b:10:8d:4a:ba:fe:
                    7f:fc:90:e1:74:f7:de:5f:1a:7a:50:46:07:25:e8:
                    22:96:80:84:d9:47:e7:f9:b7:bf:91:13:6d:6a:1e:
                    9b:3d:cc:1a:3c:17:91:e6:3c:70:43:ae:2e:63:d0:
                    33:0c:09:af:70:5f:da:bf:b6:47:bb:ea:f3:39:91:
                    36:a8:95:59:a9:c8:c7:5b:a5:2b:1d:9a:29:f8:a2:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:7D:7C:0F:F3:5B:29:A8:61:EA:E7:25:81:2E:78:67:19:EC:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.131.0.0/20
                IPv6:
                  2605:59c0::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:6e:ec:e5:ce:9a:59:e5:32:ed:91:78:7a:db:0e:9e:51:d2:
         31:8a:12:2d:82:7b:ae:32:2e:06:c7:46:95:08:75:0f:b6:cb:
         06:da:58:bc:40:d2:0a:a6:72:dc:f6:f9:48:71:45:2e:55:f2:
         14:f8:b1:cc:49:19:f9:40:53:7d:c0:b7:c9:b3:e9:f7:19:7d:
         00:d8:f6:95:9c:97:1d:cb:71:38:cf:4b:c0:6e:76:ae:78:d5:
         70:60:43:94:65:ca:43:35:1e:59:8a:d8:27:78:e5:48:d3:25:
         e9:ea:a2:ca:e7:f3:0e:52:13:6a:12:ea:de:ba:5d:3a:2f:15:
         a2:c9:55:1b:b5:67:a1:ec:3c:8a:5d:7d:63:4c:0f:9c:95:6b:
         0a:38:68:76:e9:aa:b9:fb:aa:10:c4:63:9a:24:ba:95:00:9d:
         95:93:b9:bc:bf:2c:9c:7f:6a:7a:f0:49:8f:af:f3:19:45:ea:
         3b:a4:30:e1:3c:ac:95:15:87:81:15:71:e4:c9:64:75:dc:af:
         6f:bb:c6:75:e6:b0:3a:ea:05:a8:3b:ac:20:54:d4:23:8f:4f:
         be:75:35:93:41:0d:05:c1:53:97:80:19:0d:22:96:7d:63:18:
         6c:8a:42:70:fe:3e:e0:7f:8e:3d:1f:9a:62:9c:bf:a9:e5:dc:
         aa:31:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----