Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a3329353-5806-31a9-8d17-3a2f9ab0c984.roa
File:                     a3329353-5806-31a9-8d17-3a2f9ab0c984.roa (raw, json)
Hash identifier:          ncCpL+lfj7qzcF2ToJ8dQ249JxNnJTd7OedURrKw/yU=
Subject key identifier:   18:76:B7:E4:A3:B2:F9:A2:48:13:1D:65:71:6F:90:8E:A3:5A:D3:E7
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328583A46224CABF737CBD1EA58C100
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a3329353-5806-31a9-8d17-3a2f9ab0c984.roa
Signing time:             Thu 10 Jan 2019 05:00:00 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Fri 18 Sep 2026 04:00:00 +0000
asID:                     20473
IP address blocks:        63.209.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:46:22:4c:ab:f7:37:cb:d1:ea:58:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Sep 18 04:00:00 2026 GMT
        Subject: CN=2fd3683e-ba7d-4b25-bcd1-c509fc3d057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:17:69:d0:fa:a5:c6:ae:18:d2:70:da:29:94:
                    b3:c9:48:58:50:c4:3b:55:d0:63:34:31:ef:45:d3:
                    0b:e2:3d:5e:0b:1d:02:15:ca:38:bf:c6:2a:eb:c3:
                    d9:54:ab:8d:e4:2b:42:5e:67:db:49:07:f7:87:f9:
                    68:4b:83:ea:e3:3b:3b:c9:a9:93:a9:fa:eb:f3:00:
                    15:32:93:72:6a:de:6a:7a:a6:67:d1:6e:1c:15:5a:
                    17:88:f9:ab:d2:c8:cd:64:26:dc:02:35:b4:14:44:
                    d7:9b:8b:88:86:2e:47:0d:a8:dc:f7:71:c7:9e:63:
                    5a:f3:84:60:c8:12:81:59:7c:0b:fd:9d:e1:b7:48:
                    08:24:02:75:42:35:6c:43:19:6d:6f:01:e3:bd:5b:
                    46:08:a9:de:cb:04:54:7c:17:bd:97:ca:35:51:36:
                    b5:f7:f0:14:b5:04:bf:21:c7:a5:a0:be:63:7c:71:
                    6c:9e:f3:30:39:62:11:36:f9:e5:46:96:2c:d4:49:
                    b1:28:6a:d1:c4:b7:3d:03:f9:da:a4:a7:38:5d:84:
                    34:92:ff:47:8e:6c:5e:20:3b:43:11:fd:f2:08:8b:
                    59:37:5f:85:e1:eb:18:7a:b8:0f:27:81:f7:cf:a9:
                    08:7b:00:0a:c4:73:36:dc:5a:f0:73:51:bc:b9:b5:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:76:B7:E4:A3:B2:F9:A2:48:13:1D:65:71:6F:90:8E:A3:5A:D3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a3329353-5806-31a9-8d17-3a2f9ab0c984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.209.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:48:34:a4:6e:c2:37:61:21:29:16:5f:69:7e:ad:b1:43:4b:
         21:9b:ac:6f:08:97:e4:0e:57:5c:98:1a:69:63:37:92:a7:74:
         b7:71:54:d7:de:5b:5b:82:58:00:93:11:4f:21:9c:08:96:19:
         ad:2e:3e:ad:ef:90:e2:c2:3f:79:26:92:47:31:df:a2:ec:44:
         bb:93:50:f7:6a:51:96:65:fc:ea:67:61:47:51:d6:74:73:1e:
         b0:3c:73:fa:56:cc:34:8a:4b:c7:f6:75:da:29:c1:52:b2:45:
         7b:b7:1d:3d:2d:6b:3a:78:13:0d:51:92:45:b4:d1:a5:3c:2f:
         e2:7d:36:53:6a:ff:e9:6f:81:42:b9:8f:d9:11:05:2b:33:e5:
         d4:8f:ba:0b:61:f7:2e:61:ab:29:70:e5:e7:02:fe:ec:f0:d3:
         f8:01:48:77:e9:54:b1:84:0d:04:ff:f4:8c:82:c9:77:1d:0a:
         d2:b2:e9:d6:32:7f:f7:c8:58:a4:df:d0:50:5c:83:a5:d2:d5:
         2b:ba:14:96:5f:d5:37:a8:d1:ed:2c:6c:8a:9b:76:dc:f5:0b:
         7a:cb:97:89:f4:2d:28:7a:95:43:24:8f:27:03:88:3d:eb:73:
         01:19:cd:dd:78:e2:93:64:d5:0a:6a:ce:fc:24:5d:24:7e:04:
         c2:f2:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----