Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2741f5a2-82be-39cd-9e77-f987da15d3bb.roa
File:                     2741f5a2-82be-39cd-9e77-f987da15d3bb.roa (raw, json)
Hash identifier:          A+exKn4Y9bSg+KkOZADa5cumEv7ZgRmEN8ij3unTiSk=
Subject key identifier:   C9:12:94:CF:A3:56:27:A0:40:6A:A0:89:61:15:78:52:70:14:AB:62
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583CB630C5E1DE5092A095D46280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2741f5a2-82be-39cd-9e77-f987da15d3bb.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 29 Apr 2024 04:00:00 +0000
asID:                     1225
IP address blocks:        128.241.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b6:30:c5:e1:de:50:92:a0:95:d4:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 29 04:00:00 2024 GMT
        Subject: CN=aaab0616-2c01-4764-9725-157e6ddb7655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:56:58:61:95:b6:d9:5f:27:f6:5b:19:66:
                    a8:d3:f4:b2:fc:dc:71:c9:2c:03:3a:b7:4d:00:1f:
                    f3:9b:64:6b:24:2c:8f:7e:37:64:38:2e:ea:05:ee:
                    33:21:b2:5c:e1:02:dc:5f:3d:b9:91:ea:4d:0a:5d:
                    9a:73:7c:dd:6f:56:62:80:74:28:8a:45:ba:27:cd:
                    ab:2d:29:56:fb:a8:38:7a:87:93:3e:68:bd:fc:cc:
                    02:49:05:16:42:a1:5c:ac:85:dd:3e:58:e2:c2:a9:
                    87:5c:5a:f7:77:ae:83:95:8a:d5:83:17:62:dd:74:
                    63:a3:7a:50:99:9c:ef:cf:e3:f1:84:da:56:7a:70:
                    30:cb:4e:68:41:13:b0:b3:08:b5:b0:dc:24:21:13:
                    72:57:75:8c:de:95:bb:ab:c1:48:9b:72:ea:8c:8a:
                    96:6a:54:e5:74:2c:d8:be:d6:dc:aa:56:7d:20:95:
                    3d:d2:96:12:66:68:f4:cf:bc:10:96:72:0f:29:fa:
                    1c:98:14:f2:7b:d9:ef:f7:fd:7b:95:20:20:ab:eb:
                    53:fb:d9:06:bf:57:60:ef:8f:4c:bf:b3:d5:cc:41:
                    9b:50:4f:9a:5d:e9:38:9d:1c:08:c4:90:9d:4c:ea:
                    7e:c8:c6:36:c1:15:23:f2:96:09:da:6c:b1:3c:de:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:12:94:CF:A3:56:27:A0:40:6A:A0:89:61:15:78:52:70:14:AB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2741f5a2-82be-39cd-9e77-f987da15d3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:61:2d:37:72:66:6a:94:1f:bc:4b:69:87:0f:a0:ed:90:
         1b:f6:24:70:d9:dd:5c:54:db:66:c3:ab:58:a6:c9:d2:75:b2:
         2e:cd:40:69:b6:f6:87:97:c9:8e:56:19:99:e1:45:40:ad:a9:
         02:8f:aa:b3:17:49:ed:a8:47:66:1b:63:6f:ae:1a:b9:bd:a9:
         be:78:a3:6a:e7:6a:62:5d:b1:72:03:ff:8d:3d:eb:03:a5:2b:
         09:58:de:56:cf:b8:9d:5b:f3:3d:19:41:ef:35:38:15:34:21:
         0f:1e:93:0a:98:9b:f4:0c:43:d0:da:b0:2c:81:7e:2b:e5:12:
         15:cb:88:51:7d:5a:9c:cb:27:00:f2:b9:ea:39:9a:04:53:5d:
         79:4d:0c:0d:17:9d:c7:cd:58:18:c9:51:a3:cb:80:70:2f:50:
         64:8b:61:0b:39:db:43:f9:77:91:ac:5e:1f:b4:fd:cf:3f:8c:
         ab:df:f4:12:96:6c:78:b3:4d:56:96:bc:c4:74:75:a8:24:2a:
         61:69:bf:11:d2:96:63:33:c5:95:3c:89:42:e1:42:da:ab:31:
         13:0a:a8:08:aa:b5:ea:4f:0c:f1:34:d5:b4:89:d2:41:6b:8c:
         b4:0a:f5:e8:29:84:0e:46:47:5e:39:0e:d1:11:b8:60:1a:2d:
         5b:bb:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----