Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c8d43f49-78fa-3ada-81bc-6f544069a953.roa
File:                     c8d43f49-78fa-3ada-81bc-6f544069a953.roa (raw, json)
Hash identifier:          R9qgEZrryJHjM1seXEoSonbl6O6TQTfWnqhKU/SapQk=
Subject key identifier:   E3:DB:B3:03:61:A4:EA:8A:A1:26:03:83:57:F3:C4:C3:6A:AE:68:F7
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328583A462311FE0961B2DCD49FF060
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c8d43f49-78fa-3ada-81bc-6f544069a953.roa
Signing time:             Thu 10 Jan 2019 05:00:00 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Fri 18 Sep 2026 04:00:00 +0000
asID:                     20473
IP address blocks:        63.210.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:46:23:11:fe:09:61:b2:dc:d4:9f:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Sep 18 04:00:00 2026 GMT
        Subject: CN=559c4505-3e1e-4361-8b2f-581daddf61a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:56:42:87:4b:d7:46:58:71:4f:7f:cc:77:
                    1b:94:6f:a5:80:c9:b6:b1:61:5b:cc:b2:4f:8c:1a:
                    39:ce:b5:56:77:8e:cb:d5:ba:8b:01:33:2a:66:3f:
                    34:85:79:02:c7:61:b6:36:72:a9:72:61:af:8d:e9:
                    3e:f5:dc:13:22:0f:91:8d:ac:ed:9a:19:50:50:57:
                    09:cd:b8:47:6b:29:ba:52:b7:1d:23:0c:f5:a1:ce:
                    ec:de:86:20:a3:29:03:c8:3a:91:2f:80:a3:ad:b1:
                    4c:b9:52:63:66:5f:f1:0c:c6:2e:24:d5:fa:12:3b:
                    42:5e:ae:bc:bc:70:aa:45:58:e1:a4:2e:c4:fa:84:
                    92:4e:fb:c7:db:51:c9:92:c5:a4:e8:f7:ae:96:bf:
                    07:cd:59:47:58:82:6b:f7:17:0e:20:b3:0b:0b:1d:
                    79:05:c6:56:0c:01:cb:39:03:27:f5:37:02:81:6f:
                    8b:c7:78:79:1b:9f:63:69:d7:08:c0:3a:0f:27:a4:
                    1d:54:bc:08:24:8f:07:c3:8d:ae:f6:cf:44:47:99:
                    b0:ff:fb:b5:5e:e0:f4:d1:99:db:62:0f:3f:e1:4a:
                    16:f1:f1:69:b6:5e:29:e6:bf:32:b2:9d:ac:39:08:
                    4e:81:0a:d1:74:30:6e:37:e5:a1:0e:6b:1e:46:cf:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DB:B3:03:61:A4:EA:8A:A1:26:03:83:57:F3:C4:C3:6A:AE:68:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c8d43f49-78fa-3ada-81bc-6f544069a953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.210.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:12:93:9c:00:0c:57:75:b1:65:da:62:bc:eb:7f:07:74:ed:
         8e:dd:3f:87:d0:be:7b:4b:5c:01:cd:36:02:1d:73:fc:38:63:
         27:d8:6c:1b:f9:d1:79:9e:87:08:b5:b7:ce:b3:dd:68:6c:28:
         8d:e2:78:ad:b8:f6:f8:96:a7:62:68:c3:d5:b5:c0:8f:2f:b8:
         36:f7:ac:a5:2a:d2:96:09:3e:ed:80:05:de:2f:55:24:4f:56:
         0e:48:f6:ae:8a:bb:26:cf:b8:fc:e6:bd:7e:a1:94:eb:4b:4f:
         d5:67:92:fb:9e:00:9b:ca:9a:8a:87:27:70:77:b7:ec:83:c8:
         6a:03:b2:2b:bd:82:f2:fe:93:ef:23:2f:4f:3c:94:fd:a7:34:
         85:f6:68:d9:3a:ed:12:3d:bb:a6:c7:c8:c2:66:02:30:64:0f:
         81:c7:85:a1:56:b8:47:31:b9:66:45:37:be:ef:1e:8b:ed:9a:
         e6:bd:d5:4b:da:ef:07:c1:a5:1d:a6:91:10:5f:5e:e6:b5:a2:
         1a:eb:f4:16:72:8f:17:8f:22:ff:ba:75:63:3f:fa:76:b6:4d:
         6c:af:c8:ac:0e:f4:97:a6:da:ec:bd:d4:86:73:dc:2e:a8:12:
         a6:88:0b:1a:4e:16:55:7c:83:e4:9a:f6:08:2f:9e:d3:88:1a:
         ca:ad:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----