Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a376e60-d498-3f7a-84df-401802fc553d.roa
File:                     5a376e60-d498-3f7a-84df-401802fc553d.roa (raw, json)
Hash identifier:          A6MF84rEXHGwz6waY4oP/wtKkUJgLuVyUAtsEqnbODY=
Subject key identifier:   60:71:36:5A:0D:D9:E7:1B:02:83:74:85:54:32:7B:68:27:DC:00:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E4ACEB4221551074C75FCC450
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a376e60-d498-3f7a-84df-401802fc553d.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 21 Sep 2024 04:00:00 +0000
asID:                     399587
IP address blocks:        166.1.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4a:ce:b4:22:15:51:07:4c:75:fc:c4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Sep 21 04:00:00 2024 GMT
        Subject: CN=09fdaf31-108a-4291-9c8b-26f7635a0ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:48:b4:24:0f:0d:98:ad:fc:36:d5:ad:70:
                    5b:38:27:ff:38:f0:9f:ac:61:e0:3b:98:72:a3:15:
                    c0:64:71:e2:5d:94:11:59:0f:01:9d:a1:ff:08:75:
                    87:cf:bf:cd:2e:5b:85:9a:9f:f4:68:a8:16:15:9b:
                    8a:2b:26:a1:1a:e3:c2:14:3c:bd:b0:fd:24:0a:e5:
                    91:90:e4:ee:f6:d6:aa:89:1d:24:18:88:fe:77:1a:
                    a0:a4:93:44:58:bb:96:35:c1:70:73:7a:bc:4e:e1:
                    21:67:ff:de:5e:d7:90:2c:53:12:03:0e:d1:44:28:
                    7a:e8:40:c9:2e:fb:14:c5:cb:3c:cb:60:39:00:13:
                    a0:5e:e1:54:a8:2f:91:21:9f:91:bf:d4:f4:6a:88:
                    d7:58:90:ed:11:87:6b:b1:4f:98:92:66:38:94:c5:
                    8f:90:2e:48:d4:90:9f:41:c3:b6:f6:68:72:ce:6f:
                    7d:38:79:30:92:f0:39:0c:3c:a7:9b:fa:8a:c1:1c:
                    7e:21:5a:22:c0:bf:cc:f5:e9:ca:1b:78:0f:66:a6:
                    5c:c3:7c:66:ea:87:f9:e6:56:23:dc:19:ec:de:23:
                    33:2e:ad:34:ff:42:92:85:14:fc:fe:1a:a0:9c:d2:
                    6f:c7:38:9e:99:78:e7:95:9f:f6:bb:95:bb:a7:ea:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:36:5A:0D:D9:E7:1B:02:83:74:85:54:32:7B:68:27:DC:00:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a376e60-d498-3f7a-84df-401802fc553d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:58:b4:af:ad:0b:90:98:61:2a:83:dd:a9:c1:0e:99:fa:
         aa:b7:bf:a5:a7:f9:39:12:d1:20:d8:b8:ca:8a:dc:e5:e0:07:
         19:13:39:ec:45:af:3f:3c:3e:58:a4:34:65:db:8e:3d:65:fd:
         50:0d:b5:0d:5a:d3:13:83:aa:69:4a:ed:cf:d2:25:5c:75:be:
         2e:37:ea:dc:72:48:8c:5d:a5:b8:78:07:fb:42:db:6f:4c:4d:
         16:b9:f2:56:ad:1c:2a:9f:76:66:78:ce:94:1b:b8:f0:0a:87:
         11:5d:9c:d9:88:11:08:93:5b:ce:37:2d:f8:47:7c:4a:26:f6:
         60:a7:af:3f:db:4a:a8:e1:ab:bb:09:7e:61:5a:59:24:73:79:
         45:2d:87:40:15:ee:93:9d:e3:0d:43:dc:5b:c1:30:5e:9b:52:
         1c:26:64:99:6c:9a:68:56:f7:d9:f8:2d:55:c2:8f:de:c4:a6:
         e5:83:23:12:7b:92:16:99:76:4a:c5:f4:35:dd:67:f6:01:52:
         95:bb:e0:6a:59:2c:81:48:49:54:c7:0e:b7:2d:ee:87:c2:02:
         1d:b6:80:d6:dc:24:1c:e5:0e:41:c8:31:00:0a:cc:3e:28:63:
         63:eb:dc:b4:4d:73:f4:a5:51:af:43:da:68:41:96:90:3b:ed:
         63:34:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----