Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12cf2ba2-77ce-3baa-9f55-7f7b4bc3b3db.roa
File:                     12cf2ba2-77ce-3baa-9f55-7f7b4bc3b3db.roa (raw, json)
Hash identifier:          MULbOiJw5zU6tc7WO0dQzEmVxxZWbxEF1yVgV+0Pt9g=
Subject key identifier:   2C:B1:4D:CF:40:DD:EF:B0:3D:32:92:A3:5F:BA:0D:3C:C4:10:0D:CF
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E39653EB2
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12cf2ba2-77ce-3baa-9f55-7f7b4bc3b3db.roa
Signing time:             Tue 05 Nov 2019 02:29:26 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     20940
IP address blocks:        2001:418:8001::/48 maxlen: 64

Validation:               Failed, certificate revoked on Tue 17 Jan 2023 18:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:39:65:3e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=89901b24-e4da-41d2-ad86-d9c878871d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:f2:a0:fe:8f:53:1e:40:f8:54:fd:b9:63:
                    3a:8b:d0:1a:ed:61:e2:b3:ae:9e:da:78:2e:66:a8:
                    2a:f7:df:ec:4b:77:14:45:aa:8a:a7:2c:d5:24:9e:
                    2f:2e:ae:98:34:ac:e5:03:cc:09:74:a6:54:be:14:
                    e2:96:a3:47:42:da:c8:af:0e:35:b4:26:12:aa:15:
                    b7:72:dd:21:40:e1:b6:68:70:87:42:73:dd:33:8f:
                    b3:f0:74:3b:0f:48:35:b5:f7:2e:4f:df:5b:e2:8c:
                    cf:ca:a4:35:0c:ba:aa:aa:35:50:68:00:bc:14:e0:
                    a9:b6:8b:e2:11:38:67:ba:9a:f7:c6:b8:fc:93:37:
                    38:7a:c2:61:1d:66:88:c1:0d:a2:9d:4a:c4:e4:47:
                    4d:4b:a1:f1:74:a5:bb:11:7f:e7:51:9d:a2:37:aa:
                    72:46:3b:3e:7b:c3:a2:c0:ab:b1:79:0a:c3:4d:48:
                    83:4c:e9:39:e0:0d:9d:25:c5:7f:d4:21:fa:6f:b3:
                    62:d4:de:2d:5c:f3:00:c8:1c:01:e4:f9:7a:79:91:
                    63:5d:0a:12:1f:f5:01:3e:80:d2:e4:95:bb:96:86:
                    22:96:55:cc:85:ab:9b:b1:7a:75:ab:5f:4f:b0:73:
                    c9:89:cd:7f:50:d9:fc:e2:5d:8a:6c:aa:cf:55:f8:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B1:4D:CF:40:DD:EF:B0:3D:32:92:A3:5F:BA:0D:3C:C4:10:0D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12cf2ba2-77ce-3baa-9f55-7f7b4bc3b3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:8001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a4:df:75:c9:fc:5c:50:ae:f4:e5:6b:e0:6a:5b:3b:ab:0c:
         91:cb:dd:8a:52:54:8c:61:6f:ce:3d:11:af:18:a7:49:67:75:
         31:62:07:17:56:af:0c:bb:8d:e9:89:3d:67:89:b2:98:db:37:
         33:94:0f:f7:97:c5:a5:90:c4:d3:e6:c9:24:d9:ed:9d:0a:ec:
         29:e1:7f:2b:bb:7e:8c:9e:14:1e:0a:89:a0:a8:18:da:18:67:
         74:45:ff:0f:7a:2e:fb:d6:09:61:a7:13:b8:e9:0b:74:9f:cb:
         91:49:df:a8:6e:fb:a2:a7:f5:a7:8b:9a:de:eb:3c:cb:1c:37:
         7e:f8:f6:30:6f:fa:4e:d0:bc:c4:a2:00:e2:28:ea:28:82:d4:
         54:01:be:8f:ab:96:e9:e1:d4:ec:a3:1e:e7:3b:c1:f0:88:31:
         4a:bc:5a:92:ea:51:e6:d4:44:b9:32:d4:0a:1a:55:fa:f6:93:
         b9:2f:f8:bd:75:52:45:36:00:8c:bf:71:eb:b0:71:8e:11:53:
         da:21:53:1f:06:fd:48:54:18:7a:4a:c0:52:07:93:87:b3:13:
         f7:67:82:0b:a9:57:68:3d:62:04:47:ad:52:28:c6:cd:e2:00:
         9e:2c:fb:a5:08:33:0f:c6:9e:a1:14:4e:18:e5:69:ab:b3:58:
         fd:38:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----