Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c94a9da8-678e-30d8-a734-d9d6afe5b7c2.roa
File:                     c94a9da8-678e-30d8-a734-d9d6afe5b7c2.roa (raw, json)
Hash identifier:          MyWgxNRV+jETbu1AGCgzzuctJqOpPLSYxRmItaFep9E=
Subject key identifier:   2E:0E:86:A5:4D:FA:90:8E:C6:47:24:23:53:62:4D:83:20:AD:F9:01
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583EACEEC4A82D47517D028CF560
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c94a9da8-678e-30d8-a734-d9d6afe5b7c2.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 26 Oct 2024 04:00:00 +0000
asID:                     399045
IP address blocks:        166.0.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ac:ee:c4:a8:2d:47:51:7d:02:8c:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Oct 26 04:00:00 2024 GMT
        Subject: CN=a4fcd93c-0c86-48e5-861d-2502884cf168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:a8:09:67:1d:21:1f:33:ad:83:c1:c3:7a:
                    0b:af:5d:c9:ab:fb:42:72:6f:69:ef:18:4e:a2:ec:
                    97:5c:58:e2:7d:1c:4c:1f:43:ca:0d:f3:7b:87:92:
                    46:65:2f:95:51:28:06:86:cb:c5:5c:de:3a:77:1b:
                    95:29:5e:8e:e0:11:75:a1:9f:c9:fe:ef:97:b4:53:
                    6d:29:cc:b6:ec:1b:23:41:41:93:26:56:e7:25:12:
                    de:03:2c:a7:71:e0:ee:dc:7b:e6:af:ef:bc:8a:b1:
                    da:a9:1a:08:ae:65:58:81:42:27:1b:9f:31:c9:bc:
                    20:57:17:08:5a:33:9a:9f:dd:9c:82:ee:48:22:2c:
                    14:3f:8a:65:d6:d6:0d:67:f9:17:bf:a4:ad:e0:b2:
                    f5:51:af:70:37:98:9d:df:f3:17:8f:c8:29:cb:f2:
                    ff:60:cc:f4:0b:60:9c:d5:92:aa:07:51:ec:8d:32:
                    d4:9c:6f:32:fd:2e:bc:33:40:62:db:23:86:c8:8a:
                    73:7a:f4:ef:46:10:1a:65:5d:34:f7:7e:ee:8b:5b:
                    fa:d1:a1:6e:ca:7e:bf:24:7c:ff:88:d8:ec:f5:46:
                    32:a6:e2:fe:09:29:c9:d1:13:76:b4:ef:30:62:d9:
                    33:12:c5:d0:31:e8:25:26:c6:ea:49:ff:3d:6f:11:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0E:86:A5:4D:FA:90:8E:C6:47:24:23:53:62:4D:83:20:AD:F9:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c94a9da8-678e-30d8-a734-d9d6afe5b7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0e:e9:d2:85:8e:4f:e4:10:7d:80:73:ff:f8:85:be:9a:06:
         6a:c8:29:69:99:14:a9:19:6f:69:38:4e:f5:47:38:83:60:a5:
         2a:de:38:f3:49:92:b0:a6:33:91:6f:0a:6e:5b:30:94:39:54:
         94:f2:3b:94:b0:69:87:14:63:05:28:e9:84:29:8b:0c:4f:c3:
         61:dc:b4:9f:eb:a5:00:04:75:5c:e3:5a:c8:6d:35:9e:de:da:
         8e:c4:e6:70:79:f6:d4:d8:b8:1e:bb:00:3a:f1:02:f6:dc:d0:
         81:82:9a:04:3e:cc:33:61:56:98:14:00:2f:0f:23:d2:6f:7a:
         05:0b:2f:ac:6b:92:7c:92:71:48:d8:a1:db:b6:2d:0e:bf:e4:
         f3:24:59:f5:67:80:95:09:54:7c:86:af:23:f2:89:f9:48:76:
         3f:e1:c1:c6:52:20:f0:ba:a0:1b:6e:7b:44:c2:58:ef:a4:24:
         a9:81:6c:16:ac:a4:65:d8:53:60:9e:c6:97:5e:68:12:eb:d6:
         34:fe:0d:a9:97:a9:52:7d:fb:c8:47:9c:42:eb:c3:cf:80:5a:
         e9:bc:2d:54:ca:ed:2c:aa:63:1f:57:ae:03:17:59:73:30:bb:
         8c:e8:61:a6:bf:d7:4e:77:39:34:a4:84:f8:67:ec:aa:cd:71:
         cb:9a:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----