Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/40a46389-802f-3314-b704-119b3e62747b.roa
File:                     40a46389-802f-3314-b704-119b3e62747b.roa (raw, json)
Hash identifier:          U3yJ9ChQzDDEHFbt92ov6deiMTlRDHl91EsplHJ//AQ=
Subject key identifier:   31:AB:59:5A:2C:97:8A:03:A2:2B:93:E2:2D:BC:0B:63:7D:BC:CB:43
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583D5B5EB65F9DD1C7151D4F3C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/40a46389-802f-3314-b704-119b3e62747b.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Jun 2024 04:00:00 +0000
asID:                     265269
IP address blocks:        200.15.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:5e:b6:5f:9d:d1:c7:15:1d:4f:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun 27 04:00:00 2024 GMT
        Subject: CN=f4183b81-9177-4386-9b12-de47ed9e12b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:39:10:f6:16:8d:05:a3:0d:bd:02:a5:9e:
                    50:bb:c3:2e:e8:d1:60:dd:65:8f:dc:3d:61:83:12:
                    87:f7:b1:c0:49:2c:55:f0:55:4e:97:25:ed:18:d1:
                    3a:82:0e:d9:e1:89:d3:39:b9:92:15:d8:9c:91:66:
                    f3:17:ad:18:39:be:b0:24:25:f3:a0:90:a8:6c:ea:
                    a2:7d:cf:15:cf:67:cb:34:09:43:11:73:73:12:f0:
                    af:ca:5b:4d:1b:63:50:fc:54:50:54:aa:51:a4:d3:
                    ac:b6:45:0f:ba:4e:9f:c2:e3:64:c2:b6:2a:2c:b9:
                    bb:6d:a6:10:73:45:80:52:2d:f5:56:b8:c6:84:78:
                    ce:f4:3b:5d:56:73:a3:d8:5a:9a:b8:63:b3:90:be:
                    92:14:29:99:9e:57:3c:8e:35:0a:03:37:2d:31:f6:
                    34:81:05:89:0f:d1:1b:3b:f4:73:6c:27:43:cd:b5:
                    1a:57:e1:61:ac:d4:ad:a0:e9:00:31:46:02:fb:79:
                    32:c8:20:da:d3:15:37:cd:9e:98:9a:db:57:d8:54:
                    66:56:18:16:71:ad:89:ef:00:59:fe:44:0b:df:39:
                    dd:71:1e:8e:3a:dc:22:6d:38:83:d9:f5:66:eb:dd:
                    97:8e:f1:39:ce:5a:42:7b:90:2f:f1:75:8e:0f:d1:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AB:59:5A:2C:97:8A:03:A2:2B:93:E2:2D:BC:0B:63:7D:BC:CB:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/40a46389-802f-3314-b704-119b3e62747b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.15.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:cd:c1:ef:63:5e:46:a2:38:7b:47:b5:4b:5e:c2:77:3d:
         c4:e9:72:62:1e:af:49:49:76:cd:33:10:c1:c3:3d:f0:0f:78:
         97:dd:23:88:48:2b:e0:97:46:ca:54:fa:82:06:dc:2d:f9:02:
         7f:2f:02:3e:6a:6a:d9:be:bc:32:20:44:54:b5:5c:ac:57:5f:
         d8:41:11:ed:aa:93:db:40:6e:a6:81:e5:44:15:9a:4c:d5:78:
         0c:34:24:87:ea:4a:9f:6d:fe:bc:14:8b:a5:bc:88:6d:db:12:
         de:30:22:a5:2e:73:fd:ee:c6:b8:70:53:15:9b:ff:da:6f:12:
         92:8c:29:8e:b2:2e:21:97:4b:6e:e1:17:9e:dc:28:8c:cd:e8:
         d7:8a:8e:fb:4a:84:98:59:2d:14:c1:de:c4:6b:db:f1:3d:73:
         01:77:50:04:f5:20:e0:6c:f6:52:18:cd:74:4d:3b:4d:28:4d:
         64:1d:9e:da:f3:8c:2b:2b:8b:6c:8a:6c:06:ff:dc:6b:38:20:
         55:b6:0e:97:9e:a8:cf:cb:cf:45:4f:41:53:3b:44:d9:f3:72:
         f1:e4:e1:a0:05:92:90:c4:d9:6e:ca:69:31:f5:63:69:36:63:
         86:42:8a:bf:b6:ee:03:d3:3d:f1:db:cc:85:57:85:c4:a6:53:
         6a:b6:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----