Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/7c0a3019-f545-39d9-8a65-d677cef4eb2a.roa
File:                     7c0a3019-f545-39d9-8a65-d677cef4eb2a.roa (raw, json)
Hash identifier:          e3ZwrGN7JSmqL6xjwOvrGvpsSLJERWirhngQ4xDohfA=
Subject key identifier:   3B:1A:0C:FD:9F:B0:70:29:AF:27:20:D5:3D:00:A6:E5:66:E0:BA:F7
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F4328583C8083E91CA0C25E2BB52548C0
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/7c0a3019-f545-39d9-8a65-d677cef4eb2a.roa
Signing time:             Thu 08 Oct 2020 04:00:00 +0000
ROA not before:           Thu 08 Oct 2020 04:00:00 +0000
ROA not after:            Wed 10 Apr 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        163.123.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:80:83:e9:1c:a0:c2:5e:2b:b5:25:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Oct  8 04:00:00 2020 GMT
            Not After : Apr 10 04:00:00 2024 GMT
        Subject: CN=64f61c1a-eadd-4adb-9580-0dce51e71b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:f0:a9:20:7d:b7:50:af:2c:b1:27:6b:8f:
                    01:d1:47:92:97:69:b7:4f:52:3f:20:a7:84:3f:54:
                    20:f0:d5:51:33:67:7f:3c:a9:71:51:17:b5:6c:00:
                    e1:6b:5e:ee:57:0b:3e:77:b0:22:60:86:ab:86:55:
                    77:ec:0e:18:bd:e2:dc:f2:87:72:66:5a:39:f5:e6:
                    a2:fa:b6:a3:6f:cf:f2:b4:84:00:25:00:5d:d9:08:
                    30:0d:71:82:7b:a8:55:27:43:b4:3c:ed:97:3f:c7:
                    28:c0:b2:99:62:4d:7b:7a:f8:48:2b:71:70:65:21:
                    96:cc:d9:9b:00:38:cd:4f:80:78:a8:30:d7:a3:4d:
                    e4:65:8c:79:c5:0f:d4:9e:47:fd:04:70:7c:ca:01:
                    c5:c1:2e:e1:d7:f0:8f:46:1f:93:5b:c9:e7:fd:69:
                    82:17:39:a4:25:33:46:04:85:5a:88:ad:56:a9:14:
                    b1:46:93:b5:f5:28:87:8c:f9:db:ac:1f:97:fc:79:
                    09:68:56:79:91:8f:a6:4f:5e:fa:37:57:13:3f:fa:
                    87:01:4e:54:35:33:5c:cd:8a:c1:e3:61:d6:68:d5:
                    14:d4:a0:e8:48:da:94:a1:e3:40:1e:05:15:fb:56:
                    9e:04:49:32:d3:d8:34:94:d7:d1:df:d1:14:4e:db:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:0C:FD:9F:B0:70:29:AF:27:20:D5:3D:00:A6:E5:66:E0:BA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/7c0a3019-f545-39d9-8a65-d677cef4eb2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:43:b3:04:d6:c9:84:6e:41:ba:91:0a:10:25:05:e0:62:
         df:a8:cb:7f:0a:bd:6a:ee:0e:90:75:81:c6:b9:5b:de:41:e0:
         08:53:8f:e0:9e:cf:4d:a2:7e:33:6b:32:26:7d:08:73:0c:c7:
         d2:a0:15:0b:55:72:3e:01:ea:b6:2d:00:3f:f8:68:17:8d:e5:
         53:5d:06:d4:c4:04:31:81:36:42:3d:11:9b:c8:42:65:b2:24:
         f3:39:13:6a:8f:8f:5f:56:41:e3:b8:7c:9b:f4:d7:f0:07:c4:
         c0:12:03:c3:b3:ff:d8:ed:6a:bc:ed:63:0f:97:21:81:ce:d1:
         33:ea:1b:7d:81:00:3d:26:0e:65:ff:59:ce:f9:f6:dd:c0:65:
         d1:5a:f6:84:4b:bd:03:ad:0a:7d:ae:4c:f1:a8:67:15:43:9a:
         b2:fb:b1:2b:0d:36:c9:8c:b5:18:b7:11:b9:00:20:e7:e1:1e:
         10:96:e8:2d:53:7e:a7:9c:68:ba:48:db:30:13:f9:f1:bf:8d:
         03:27:6c:fc:55:a5:c9:5b:9f:a1:9f:8f:00:d7:8f:29:f7:5f:
         49:d2:1d:8b:a8:f0:ed:72:3c:6a:5c:8c:31:cc:a8:bf:e6:dc:
         45:33:46:41:3f:17:2b:d9:7f:11:5b:7b:11:0a:7a:29:98:7b:
         22:2d:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----