Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cb77e44-df4d-31b6-b1ac-c3315d21cf83.roa
File:                     3cb77e44-df4d-31b6-b1ac-c3315d21cf83.roa (raw, json)
Hash identifier:          eIrlcjvQCIL5PUk5kgHX8vGDV9DqZAb3NsISl3TBdLc=
Subject key identifier:   38:9B:ED:A4:64:77:DE:DD:EF:D2:0D:FF:4B:52:BF:B3:E1:6C:84:B5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F88386CB2
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cb77e44-df4d-31b6-b1ac-c3315d21cf83.roa
Signing time:             Thu 09 Jan 2020 02:53:16 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        165.254.191.192/26 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:88:38:6c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=256aa5d7-21c5-4a66-af17-db82723aeb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:80:ef:64:ac:7a:d8:01:f0:05:60:a6:fa:
                    52:4f:73:b3:df:d1:e5:4b:32:df:6e:7e:11:7a:2c:
                    2b:29:d8:cf:a6:b5:8e:27:f2:be:65:71:55:0e:0d:
                    da:f9:2a:fa:1f:c7:a0:7d:dc:c8:eb:8e:36:10:9a:
                    13:51:35:da:16:bc:f7:01:88:cb:05:00:c4:72:84:
                    06:c2:cf:3d:94:23:9e:86:aa:d0:2f:b6:ec:d3:3d:
                    37:d7:a1:51:b7:05:32:0e:4a:08:ad:2c:39:8b:18:
                    56:4d:12:9a:21:bb:c2:d9:33:42:f1:ba:d1:5b:2d:
                    0c:d8:4f:fa:19:79:be:3d:74:28:d2:7f:f0:42:5a:
                    44:1d:1b:85:84:1e:be:54:3b:d1:be:1c:3a:b3:26:
                    43:a4:a8:a8:81:a5:41:a0:e4:67:fb:a8:77:93:da:
                    e8:ff:19:7d:e9:0e:4f:7a:2f:ba:0c:66:c3:e5:2d:
                    23:33:b6:0c:8c:72:77:0c:21:49:f7:73:d5:e1:46:
                    a6:d0:9e:f0:2c:20:c4:44:9d:5b:07:e9:f0:b1:77:
                    8d:4a:7f:01:75:b9:93:c8:49:41:2b:94:fa:ae:17:
                    4a:70:31:3a:4d:07:9e:ee:b8:b6:2f:d7:da:6a:6d:
                    af:6d:0f:95:49:48:0e:53:1a:e5:7c:3a:fe:a7:bc:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:ED:A4:64:77:DE:DD:EF:D2:0D:FF:4B:52:BF:B3:E1:6C:84:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cb77e44-df4d-31b6-b1ac-c3315d21cf83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.191.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:b1:8e:11:a7:74:63:9f:97:61:7c:12:93:52:d5:86:3f:
         4a:ff:9f:a4:c1:79:d6:d0:fe:05:f9:2e:a8:75:a0:23:40:21:
         3e:61:91:0c:03:44:78:c5:9a:d4:a1:c3:7e:32:f1:cf:fc:7e:
         8e:41:ea:f4:23:e7:aa:ed:dd:6f:95:e1:34:66:1a:f5:36:0b:
         bf:c9:07:dc:72:59:65:5f:b5:d1:e8:5f:32:1d:2b:05:6a:35:
         af:c5:86:87:ab:6e:33:e6:e5:27:3b:35:2c:92:84:f3:a4:fa:
         e0:32:dd:36:17:0b:20:d9:c5:b7:95:ee:28:ad:49:c7:43:05:
         fe:e0:08:4a:0b:4d:c7:75:93:8d:9f:cb:81:f4:f0:50:28:3e:
         b2:5e:b7:3a:4c:4e:06:7b:42:b0:d5:96:d9:47:c9:e3:5e:51:
         68:96:a3:7e:d4:27:4a:86:20:5f:7e:46:d3:77:81:52:6e:b8:
         8a:36:ee:b4:bc:8a:26:59:62:44:f8:14:f7:46:c9:f9:ae:35:
         70:e6:c8:9b:2f:7f:5d:eb:2d:a6:bb:25:36:64:b9:19:b5:b0:
         50:ff:52:4d:c1:4f:51:29:f0:d0:14:0e:ba:ff:cc:a4:99:9e:
         de:73:1a:37:81:55:67:16:82:e1:3c:f9:a1:a7:41:2e:06:a8:
         a2:e5:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----