Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ace5cb62-335f-312d-a07a-d53992ff5731.roa
File:                     ace5cb62-335f-312d-a07a-d53992ff5731.roa (raw, json)
Hash identifier:          I0ZIBDRmtoJysV3UT+u0chmZZyreId7SruVrseohlls=
Subject key identifier:   63:45:98:9C:DF:71:41:98:47:47:17:78:C4:77:14:C9:82:4A:88:B3
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328583C4FBFE7E7BAE619912B53D9EB
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ace5cb62-335f-312d-a07a-d53992ff5731.roa
Signing time:             Thu 12 Apr 2018 04:00:00 +0000
ROA not before:           Thu 12 Apr 2018 04:00:00 +0000
ROA not after:            Sun 24 Mar 2024 04:00:00 +0000
asID:                     22773
IP address blocks:        199.15.76.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:4f:bf:e7:e7:ba:e6:19:91:2b:53:d9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 12 04:00:00 2018 GMT
            Not After : Mar 24 04:00:00 2024 GMT
        Subject: CN=c37cc7ff-f4f2-40b2-9c6e-03e5e28e4535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:16:65:b9:52:52:48:9a:c2:5e:ac:90:78:
                    7d:38:a7:3c:9e:59:2a:48:d6:89:9c:59:64:70:74:
                    b2:8f:e6:67:74:ec:8b:cf:64:62:85:5d:f9:3d:27:
                    cf:2e:62:8d:41:0f:57:b6:86:b9:55:41:a5:fc:10:
                    56:44:e2:d9:d4:7f:77:4c:11:7d:eb:1c:fe:74:49:
                    61:94:e2:c0:3f:fd:89:1c:e7:9e:11:a1:68:6f:eb:
                    bd:5d:bc:cd:fe:66:a8:c0:a1:14:19:47:9d:e2:ac:
                    3c:f5:4c:c4:a2:61:5b:4c:f6:b8:10:d5:a7:ac:9f:
                    67:26:be:64:52:99:9e:40:73:19:61:8d:48:d3:b2:
                    5a:77:c5:25:74:4a:e7:c4:0a:38:f0:23:e6:03:af:
                    00:a8:47:04:8b:d5:23:2d:f3:ca:56:4b:21:77:0b:
                    db:88:b3:05:41:2b:19:78:c2:10:2b:e0:7b:5a:15:
                    cf:3f:53:0b:fb:6d:81:69:84:ca:01:56:99:6d:70:
                    e0:44:6e:f0:0a:30:38:77:46:7e:8d:99:ae:01:39:
                    30:a8:6e:4d:ea:f1:c1:37:fd:2e:b1:67:2d:d1:f7:
                    5f:da:7f:c2:c4:27:06:af:ad:b7:56:e7:e8:f9:d2:
                    46:a3:44:e7:7a:8c:4e:f5:50:67:4c:fe:34:0d:28:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:45:98:9C:DF:71:41:98:47:47:17:78:C4:77:14:C9:82:4A:88:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ace5cb62-335f-312d-a07a-d53992ff5731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:00:18:a8:52:b5:2e:a9:04:0e:b2:0b:08:c9:67:12:9e:
         19:3e:a6:53:ea:91:fd:e8:00:db:6a:3d:6d:a7:03:de:61:bb:
         3d:1a:ac:0a:a1:fb:8a:76:37:e5:b1:55:5b:f4:f5:82:9c:b7:
         ca:62:39:2a:61:6c:fa:9e:1c:66:79:b4:20:f3:fb:38:0c:12:
         cd:63:47:f8:34:f0:10:7b:b6:6f:86:2a:83:5c:79:1d:88:52:
         89:19:8c:9d:73:42:f9:68:05:f6:77:11:bc:09:7b:5c:1c:f9:
         78:56:65:f3:93:69:28:8b:3b:46:66:7c:53:61:39:cb:5b:39:
         f9:a5:29:ec:8b:a9:7a:fe:cd:1f:01:b6:06:cb:35:03:c4:15:
         21:c4:bc:d7:d3:69:b4:7f:bf:a7:f2:4a:48:8c:6d:6f:9e:d6:
         c2:bc:53:f8:8c:42:cb:9d:95:be:ea:22:5e:33:cd:69:16:49:
         e4:26:0f:22:d7:ba:31:f7:ea:da:e2:50:7f:4b:2c:46:7a:a8:
         c3:04:a9:ba:87:89:9b:55:41:1a:90:46:89:50:75:aa:f6:df:
         92:f3:b3:78:7f:3f:25:4e:d2:d6:3d:ab:5e:f6:eb:55:31:15:
         f0:cf:23:70:e9:10:7f:00:f7:a7:ad:7d:5c:97:60:41:2e:a8:
         df:9c:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----