Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/3087b7e7-f2eb-30ad-b3de-a41578f624f2.roa
File:                     3087b7e7-f2eb-30ad-b3de-a41578f624f2.roa (raw, json)
Hash identifier:          59qz139V7vzohqRkc1ybtu42fOBSCD17MGEQdh1UUvQ=
Subject key identifier:   58:10:84:CE:61:20:B7:DA:74:87:F8:9B:37:C8:71:78:D4:0F:AB:F4
Certificate issuer:       /CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
Certificate serial:       010D0C9F4328576D51CC73C042CFC165F3200C55
Authority key identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/3087b7e7-f2eb-30ad-b3de-a41578f624f2.roa
Signing time:             Wed 19 Sep 2018 18:38:08 +0000
ROA not before:           Wed 19 Sep 2018 04:00:00 +0000
ROA not after:            Tue 19 Sep 2028 04:00:00 +0000
asID:                     33108
IP address blocks:        2001:504:16::/48 maxlen: 64

Validation:               Failed, certificate revoked on Mon 24 Oct 2022 15:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:f3:20:0c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
        Validity
            Not Before: Sep 19 04:00:00 2018 GMT
            Not After : Sep 19 04:00:00 2028 GMT
        Subject: CN=1f6d7408-e4b2-4289-a277-afec93e123f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:e8:0a:ae:db:67:9d:76:42:bd:d9:71:81:
                    3c:4d:92:cb:0d:fd:4e:dd:82:91:d1:d7:75:d0:93:
                    ac:0c:95:75:f6:c9:00:1c:a1:f0:7d:8f:34:26:c6:
                    f3:43:79:d2:81:99:cc:d6:e3:b8:c3:66:59:32:2b:
                    06:93:d2:a8:0a:7f:4a:d5:ca:94:b3:73:41:52:fb:
                    7d:11:46:2a:6e:b9:ec:2d:dc:3c:8a:4d:cd:35:dd:
                    b4:1f:e9:cd:db:73:93:b8:9c:dd:35:68:72:8a:98:
                    e7:49:0f:d3:82:20:4c:8a:f9:34:16:58:00:a5:6f:
                    74:c2:4f:ab:28:65:cc:e8:81:96:3b:a5:47:89:a8:
                    45:c3:98:d1:59:e7:63:23:7c:e6:2e:fb:7a:a3:9f:
                    c5:14:f1:d5:74:25:17:54:59:68:a8:f7:b1:1b:ba:
                    d3:05:37:f9:a2:69:96:cf:93:38:39:21:ba:00:cb:
                    e3:3a:fd:e7:29:9e:1a:c1:03:e1:21:41:e8:32:1c:
                    e9:c4:bd:4d:b8:f7:47:ce:30:94:a2:de:5a:3c:a5:
                    4a:d9:cb:c6:23:8e:d9:5c:21:4a:b4:24:93:78:89:
                    28:0b:5e:ad:b5:1a:11:0f:3a:5c:6d:66:5b:f5:40:
                    e5:e6:22:52:d2:f4:42:8e:39:59:76:89:c9:22:b9:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:84:CE:61:20:B7:DA:74:87:F8:9B:37:C8:71:78:D4:0F:AB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/3087b7e7-f2eb-30ad-b3de-a41578f624f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl

            X509v3 Authority Key Identifier:
                keyid:58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:60:72:79:96:d1:eb:83:cb:3e:3d:92:de:c3:3e:ea:4c:
         52:b3:73:11:a5:7f:b3:6b:4a:5f:30:5a:af:6c:3a:55:fc:68:
         cb:9b:bc:0c:79:be:da:ca:80:a5:c2:cd:ef:04:7b:48:57:46:
         63:04:47:97:03:ca:83:a6:08:90:bd:8d:4f:fb:45:b4:fe:3e:
         4d:e3:bd:20:28:77:a1:87:9e:26:2d:b8:3f:03:9f:8b:2d:54:
         53:e0:e2:e1:83:8b:22:9c:86:7e:dc:d8:28:ad:d1:ec:98:fa:
         5c:c3:81:2f:72:68:66:d0:46:b3:c8:76:58:fa:fd:44:24:11:
         3b:87:ff:36:f0:cf:7f:4a:7a:ed:b9:fa:37:25:7b:69:d2:47:
         46:77:e2:0d:12:f3:b8:61:2f:db:6b:71:a8:23:3b:d8:86:9c:
         47:e4:38:ca:9b:ae:20:ec:ec:66:b2:d9:0c:48:3e:35:1d:98:
         c4:1e:e0:2a:57:ef:78:a8:33:a4:f5:a5:16:1d:c6:10:ca:8e:
         7f:6e:8b:ad:0b:47:ba:08:c8:b7:3f:b1:5c:44:0a:a5:88:55:
         14:9a:63:9e:40:f3:6c:fd:0d:85:20:54:f6:02:07:15:bd:62:
         5b:26:99:97:14:e5:13:5c:60:5b:1d:3a:50:ab:8b:36:69:ea:
         10:ee:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----