Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/f143c76a-2584-33a2-a2f7-daa23a965416.roa
File:                     f143c76a-2584-33a2-a2f7-daa23a965416.roa (raw, json)
Hash identifier:          LYStSsyOsr73jbcAky+z+8JyIRYG4Vjehaf2oavFzFg=
Subject key identifier:   29:46:52:B6:BC:80:34:98:B0:62:07:43:3E:8A:78:97:74:3C:F1:26
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328576D51CC73C042CFC17391E57478
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/f143c76a-2584-33a2-a2f7-daa23a965416.roa
Signing time:             Mon 27 Jul 2020 20:10:00 +0000
ROA not before:           Mon 14 Oct 2019 04:00:00 +0000
ROA not after:            Sat 13 Oct 2029 04:00:00 +0000
asID:                     36492
IP address blocks:        205.174.156.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Sep 2022 22:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:91:e5:74:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Oct 14 04:00:00 2019 GMT
            Not After : Oct 13 04:00:00 2029 GMT
        Subject: CN=09d83355-6016-4018-82f3-1415e004d3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:9a:33:e7:4f:66:ee:89:40:89:b9:34:a2:
                    5a:a9:21:0e:a6:5c:b9:24:3e:a3:a9:78:a9:b2:b7:
                    26:8e:82:2e:81:2d:86:25:93:7f:c0:6c:1c:e5:a7:
                    28:9c:1c:a1:c2:5a:22:8f:b2:ba:88:cc:28:eb:1a:
                    cd:16:24:33:c3:b6:32:70:b5:6d:f6:98:ad:43:5d:
                    93:8c:08:6a:f0:84:56:73:59:75:af:07:ff:67:8e:
                    bf:fc:e5:a0:a4:cc:1f:06:af:02:3d:6e:05:42:dd:
                    d3:19:33:9f:a3:0b:0d:d1:16:8f:95:b2:5f:97:bf:
                    4f:49:68:6e:2d:09:e0:e4:93:97:27:48:9d:a2:4d:
                    dd:07:bb:45:37:36:1b:53:50:11:59:bf:6e:e4:7d:
                    2c:0e:1c:d7:83:ca:70:75:87:ea:e2:33:85:c1:d2:
                    f7:84:76:e5:82:6a:74:6d:93:8c:4d:72:51:19:14:
                    5b:12:1d:1a:44:0e:1e:d6:87:a0:60:df:0d:3c:d0:
                    a8:45:2a:8d:e4:1a:59:82:d9:ce:7d:37:06:6c:a7:
                    84:cd:ba:62:eb:3e:89:69:ce:6b:36:63:65:9a:5a:
                    ed:d6:6d:ba:33:cf:12:ad:a6:94:d1:99:93:eb:7f:
                    5f:76:bd:bd:d6:ae:e7:4a:84:0c:11:4e:dd:46:43:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:52:B6:BC:80:34:98:B0:62:07:43:3E:8A:78:97:74:3C:F1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/f143c76a-2584-33a2-a2f7-daa23a965416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.174.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:56:f9:19:c0:00:91:bd:38:f2:38:0f:5a:94:c9:9b:b8:a6:
         d7:6c:c9:91:eb:7e:88:f8:fb:12:f6:c7:a1:39:f3:c5:f3:8b:
         78:c0:07:cd:38:cd:f1:c7:3f:09:54:83:1f:3e:2b:bf:7b:25:
         c2:8f:ea:f1:37:9f:e9:9a:49:51:9d:f5:08:e0:82:76:f8:a3:
         37:79:9b:53:ee:bb:8e:51:77:55:fe:dc:11:2d:69:ac:a2:16:
         8f:f4:02:75:49:65:21:8f:29:43:bb:22:4b:f7:db:07:ce:30:
         cd:6a:1e:14:7d:8a:0a:60:b7:34:e7:d6:a7:8b:50:8c:26:eb:
         a0:de:20:ea:c0:ed:e6:63:be:c3:8f:19:04:15:7c:09:b3:53:
         a9:3f:2d:d5:31:91:ba:76:27:c4:08:8f:65:34:a0:ce:be:9f:
         4f:1c:24:e6:d4:66:7b:5d:6e:25:c0:73:ba:f8:45:f0:e9:fc:
         f0:ec:9b:72:44:f9:54:ab:15:f4:3b:02:3e:14:3a:30:9a:3b:
         42:19:b6:a6:11:70:a9:fa:62:68:5d:de:b3:c0:98:48:22:d0:
         a3:f2:9c:69:7d:43:4a:a8:d5:45:e4:3d:ef:54:e5:26:24:13:
         6b:5e:d3:32:3b:06:d7:3a:c3:71:1e:9e:cd:9d:2b:22:29:4f:
         57:63:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----