Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3666d54e-d60a-3b45-adf3-124a23ff516a.roa
File:                     3666d54e-d60a-3b45-adf3-124a23ff516a.roa (raw, json)
Hash identifier:          kkcOQLq8pqCOr+lt2Q9SmTexjGqjJEdjrE7XhqnR28Q=
Subject key identifier:   87:99:2D:09:14:4B:A2:C1:D2:44:6A:3A:C0:81:81:A9:F2:6E:56:82
Certificate issuer:       /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
Certificate serial:       010D0C9F4328576D51CC73C042CFC14E89086B13
Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3666d54e-d60a-3b45-adf3-124a23ff516a.roa
Signing time:             Mon 13 Jul 2015 20:08:27 +0000
ROA not before:           Tue 02 Jun 2015 04:00:00 +0000
ROA not after:            Mon 02 Jun 2025 04:00:00 +0000
asID:                     26415
IP address blocks:        144.29.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:4e:89:08:6b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
        Validity
            Not Before: Jun  2 04:00:00 2015 GMT
            Not After : Jun  2 04:00:00 2025 GMT
        Subject: CN=e17bf5bc-fb17-4046-8206-2d56ece77dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:74:f2:92:74:cd:bd:dc:0d:75:c0:e8:5e:
                    2e:20:b8:01:10:2d:34:2d:80:e6:22:7a:b7:87:55:
                    dd:0f:d4:e5:eb:0f:73:b6:82:66:7f:5f:30:ee:f6:
                    4a:41:e4:b3:07:f9:5e:dd:db:9d:4c:28:d9:96:d9:
                    0c:db:6b:89:63:9c:5e:28:e8:b9:47:4c:73:9f:e1:
                    69:5f:05:fd:d1:cc:ea:05:58:1c:b2:25:45:b1:fd:
                    ec:06:c0:79:21:b3:a0:3d:b2:b2:9d:8f:0d:b0:06:
                    07:5e:e9:62:a3:ef:9d:56:33:27:ad:7e:d4:83:78:
                    35:9e:2a:4d:c1:fd:e5:87:a0:d8:f9:b7:4e:99:63:
                    6c:cd:7f:70:68:01:0e:2a:a7:4d:da:eb:31:30:45:
                    4c:96:37:9d:b5:f4:97:4d:7e:96:6c:50:2b:a3:dd:
                    8d:db:0a:f8:e6:3e:57:ce:dd:0f:bc:93:36:da:00:
                    a7:77:89:c9:9f:c8:2f:47:d0:99:c3:95:92:ce:1b:
                    3c:f7:6b:0a:2b:e9:0b:e2:cd:bf:bf:fc:12:d9:24:
                    3c:74:30:6b:93:95:f2:ce:dc:09:0b:4a:91:33:33:
                    d2:e0:04:5f:07:d3:6c:33:69:52:a4:fa:4c:00:db:
                    df:7d:f4:5b:81:24:3d:d9:3c:74:7d:7f:62:f1:5a:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:99:2D:09:14:4B:A2:C1:D2:44:6A:3A:C0:81:81:A9:F2:6E:56:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3666d54e-d60a-3b45-adf3-124a23ff516a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:cc:9d:6e:28:d7:dc:5a:4f:87:b1:b0:aa:52:b1:c6:d5:88:
         c5:85:36:d6:4b:18:8b:4d:a8:27:6a:8c:a0:2f:82:80:eb:c5:
         31:4c:66:a2:76:92:9a:32:df:95:27:b9:ec:fb:06:6a:64:59:
         16:8b:10:1d:c4:c2:a6:f9:d5:85:d4:8b:50:32:52:1f:5b:3e:
         f4:81:f8:94:aa:8e:7c:15:8d:97:42:6f:0b:58:6a:c9:97:0b:
         2a:05:07:0e:05:96:93:62:4c:0b:d8:88:9e:e3:3c:54:30:54:
         12:1d:48:86:c1:e2:ae:f8:ca:57:c0:24:fb:a7:c8:61:5f:49:
         23:52:db:c1:06:1a:d9:d2:b8:35:9e:c7:50:15:1d:c2:94:e6:
         a6:65:44:70:1e:02:10:1f:d1:1a:ec:00:b6:4e:b4:c0:15:91:
         75:15:e4:a5:79:97:f3:6d:b5:31:2a:a4:2f:a3:6b:c2:df:2b:
         8f:0a:ef:ac:b1:d2:88:9c:41:a9:38:88:6e:2c:31:04:e5:45:
         00:9a:c4:91:d9:b9:2c:f0:49:7e:26:f9:b0:77:03:d7:6d:fc:
         92:e2:0c:ed:f0:7b:5b:70:bb:ae:3e:86:20:64:35:21:c9:2a:
         51:bc:04:49:c5:5a:3c:8c:8c:28:d2:dc:c9:fd:90:53:0b:96:
         03:27:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----