Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/730ca87a-326f-3334-8e07-4494961227e4.roa
File:                     730ca87a-326f-3334-8e07-4494961227e4.roa (raw, json)
Hash identifier:          WFVwdmGxAA77GQOgVCVpdBg7PZ4BHiJpQxilZ4lNing=
Subject key identifier:   4C:4A:DB:2C:EC:E0:30:5A:EC:CF:D9:90:D7:21:0A:27:A4:0B:DE:42
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328583F85B9D93FF93312973EBBC3C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/730ca87a-326f-3334-8e07-4494961227e4.roa
Signing time:             Mon 16 Sep 2019 17:43:40 +0000
ROA not before:           Mon 16 Sep 2019 17:43:40 +0000
ROA not after:            Sun 12 Jan 2025 05:00:00 +0000
asID:                     3320
IP address blocks:        173.239.216.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:85:b9:d9:3f:f9:33:12:97:3e:bb:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 16 17:43:40 2019 GMT
            Not After : Jan 12 05:00:00 2025 GMT
        Subject: CN=483a7d21-ae9c-427a-8006-c22a206ba85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:a1:79:4e:74:fd:14:d9:ec:38:2c:48:da:
                    5e:93:ef:0f:4a:68:c9:00:3b:5b:70:d9:05:fa:ae:
                    47:45:2e:1f:14:13:59:52:ec:aa:5f:4c:0f:41:6a:
                    27:31:15:09:3e:ae:f8:5b:9a:ed:d4:ad:0b:fb:b2:
                    fa:e1:84:e5:e0:2c:fb:ef:9f:33:8d:45:16:d5:a6:
                    b9:6c:a0:8d:af:86:3f:85:41:b5:07:60:de:5e:26:
                    1b:e0:45:24:a1:9c:7a:71:a0:af:ee:56:45:58:a1:
                    ef:fb:07:ca:d0:cd:14:af:90:b4:37:7b:ea:1b:b8:
                    7a:fa:d0:b6:9c:50:60:41:ad:61:33:39:31:84:7b:
                    53:68:8a:4e:01:71:5c:29:34:06:61:d7:49:d5:8c:
                    6f:95:d7:c7:fe:a6:c0:17:3c:50:6b:e4:53:82:7d:
                    a6:92:63:18:31:f7:01:ff:2b:ff:2d:71:8d:79:b1:
                    6f:4a:d1:8a:e8:4e:d9:0b:aa:0c:13:e6:be:88:31:
                    cd:16:f7:c4:0b:c9:ea:9e:8b:b2:5f:bc:e3:f4:0c:
                    0b:3c:39:8d:b9:99:48:1c:b7:fe:e3:98:dc:e5:6d:
                    94:7b:09:f6:a7:e6:82:e3:0d:cb:2b:7f:36:29:49:
                    d8:d6:e0:4a:2a:0c:f7:6c:a9:d7:d3:a7:3d:cc:1d:
                    b3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4A:DB:2C:EC:E0:30:5A:EC:CF:D9:90:D7:21:0A:27:A4:0B:DE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/730ca87a-326f-3334-8e07-4494961227e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:53:c3:c7:eb:9f:ae:10:b3:a4:a3:bd:53:82:8a:07:aa:
         78:89:cb:e9:2f:bf:9b:0e:58:3b:13:c8:a0:74:3d:f5:38:93:
         21:37:a9:1c:da:05:89:5d:5f:a9:10:cc:19:81:0b:e6:8c:f9:
         18:f7:44:7d:f3:9a:c2:c2:93:d6:d9:65:f9:e6:57:2e:e7:47:
         5e:8f:14:11:22:25:cc:39:13:25:f1:74:d1:ec:17:2f:a2:75:
         04:c4:bc:ca:f6:30:ee:68:64:51:91:d2:65:ea:24:96:15:67:
         9e:4c:d2:88:13:71:e2:7a:6d:03:9d:4a:3a:82:6d:8b:e2:23:
         d4:c8:12:28:fd:09:60:fb:7b:2d:c1:b9:c5:6c:0e:00:97:25:
         37:34:99:2e:35:88:69:48:81:94:c4:74:ae:5f:84:d5:18:c7:
         8d:1d:cf:57:f5:db:4c:94:fa:7f:a1:25:c0:58:36:55:0f:3c:
         0a:c2:b9:aa:da:91:ae:1f:8a:ab:0a:72:3d:98:06:cb:bd:7c:
         73:6f:b9:35:04:a2:83:e7:89:6c:1a:23:89:55:64:fc:be:da:
         a1:de:26:16:a2:81:c0:a5:c9:34:5c:5c:8f:0a:6f:d7:ce:7b:
         7d:e9:83:57:a8:a9:e8:85:29:79:2a:2e:1e:7d:aa:78:f5:65:
         a8:e8:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----