Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/79c31ab8-a614-321a-a993-6d8bc70a7f13.roa
File:                     79c31ab8-a614-321a-a993-6d8bc70a7f13.roa (raw, json)
Hash identifier:          HHcmKFCb14skMUdVS58mX5Ftq1yNLFgi4asyofbigiU=
Subject key identifier:   C5:66:D2:BF:EA:E0:4A:0E:92:AA:CF:DF:34:67:21:52:B7:B3:3F:56
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E6B37290F
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/79c31ab8-a614-321a-a993-6d8bc70a7f13.roa
Signing time:             Thu 14 Nov 2019 18:40:07 +0000
ROA not before:           Mon 14 Oct 2019 04:00:00 +0000
ROA not after:            Sun 14 Oct 2029 04:00:00 +0000
asID:                     36492
IP address blocks:        143.131.0.0/20 maxlen: 24
                          2605:59c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:6b:37:29:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Oct 14 04:00:00 2019 GMT
            Not After : Oct 14 04:00:00 2029 GMT
        Subject: CN=c26cbb0d-8c75-4bfe-a545-6c1c561a9123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:a9:af:39:91:3f:11:8d:e1:4a:68:b6:37:
                    59:a7:14:f2:7a:ee:40:65:c8:62:71:ef:f1:b7:ba:
                    56:5b:18:8d:42:ea:6a:2d:dc:0f:22:90:0f:6c:fc:
                    23:3b:ec:e5:83:22:e7:44:a7:4d:c0:46:e1:c2:9c:
                    b2:64:2b:b3:ef:a5:e6:bf:7b:0f:34:92:89:a7:71:
                    b5:a5:9b:3e:cf:1f:24:d7:0e:63:a9:a6:f7:72:b7:
                    b4:ff:86:16:4a:78:8d:9e:c1:97:43:46:d0:dd:93:
                    b5:99:79:0a:69:ef:77:91:b1:56:20:b4:0c:da:da:
                    43:b6:25:d1:81:69:dc:55:fc:85:ad:49:82:f3:85:
                    28:98:9a:b3:7e:4e:db:ab:5e:46:7f:91:6e:14:58:
                    2a:fa:4f:d6:af:3b:af:f7:9e:6b:8e:3b:90:76:da:
                    63:03:63:0d:43:50:3f:96:66:5f:f2:01:62:7a:06:
                    c7:3e:eb:0d:c6:7b:3a:63:96:d2:81:de:d4:bc:55:
                    a1:fb:75:04:81:7b:d6:00:11:1b:62:1d:04:ca:de:
                    77:09:b6:e6:70:94:e9:d2:04:3e:82:97:12:aa:32:
                    83:7e:9d:7e:ee:78:dd:91:10:c7:2a:f8:a4:5c:0d:
                    5a:75:9e:59:1e:ee:1a:62:0d:f5:e5:7f:3b:d0:d3:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:66:D2:BF:EA:E0:4A:0E:92:AA:CF:DF:34:67:21:52:B7:B3:3F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/79c31ab8-a614-321a-a993-6d8bc70a7f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.131.0.0/20
                IPv6:
                  2605:59c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:45:d2:1c:66:49:c0:2c:16:08:82:cf:61:3f:a1:a4:10:
         77:68:50:3e:b0:d3:2c:80:ee:17:68:d8:3c:2e:a4:5a:3b:60:
         62:9a:2d:6a:e7:d2:a7:db:3f:93:8d:8d:dd:68:d9:cf:c7:0a:
         94:56:57:6d:47:79:b0:d8:93:e7:9b:0a:e3:39:7b:f8:7e:75:
         96:11:63:39:63:21:9c:38:d5:6b:78:58:c6:64:2f:4e:90:45:
         85:c5:c2:c0:50:a4:ba:6d:a1:1b:df:27:b9:c1:99:9f:1a:14:
         2c:4e:34:45:7d:c5:35:f3:34:42:30:f5:21:36:6a:e0:36:4b:
         60:c4:1f:f5:6e:b3:c1:52:0f:d1:f0:e6:a0:55:c2:49:40:a6:
         b0:f7:f6:45:59:d3:44:e7:41:e2:38:66:73:6f:af:1d:89:f8:
         17:16:5f:31:8d:2f:34:e2:38:f3:ab:bb:29:f3:b0:47:3d:82:
         b3:b5:6b:91:11:ca:3a:f8:8a:87:0e:a8:e2:cd:f7:15:4b:49:
         54:50:0e:10:82:39:cf:ff:54:90:89:ab:c4:5f:8e:57:d2:90:
         08:9d:b5:ce:6a:6a:bc:fc:6a:65:d5:db:f6:9d:05:c4:ad:44:
         05:75:01:8b:b3:31:6c:83:2c:44:72:5a:8b:e7:80:ce:4b:e5:
         cd:07:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----