Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dad4553-4f73-3c0e-b5ca-fe44af9a6d29.roa
File:                     5dad4553-4f73-3c0e-b5ca-fe44af9a6d29.roa (raw, json)
Hash identifier:          lXsqY+wX+MiIsOy2AAYVdDBlxyUWl/H3WJpoiEDIpRE=
Subject key identifier:   DF:22:D9:74:BA:26:EA:39:74:5F:88:B9:90:8E:B1:2A:48:38:75:CD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583B326E83B38F7BAFBA7FBF63C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dad4553-4f73-3c0e-b5ca-fe44af9a6d29.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 12 Dec 2023 05:00:00 +0000
asID:                     16625
IP address blocks:        2001:418:1429::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:32:6e:83:b3:8f:7b:af:ba:7f:bf:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Dec 12 05:00:00 2023 GMT
        Subject: CN=7ee789be-0b97-4bf3-9aff-546355c9fff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:93:e1:98:f2:18:ac:77:6b:f7:77:92:83:
                    a5:2b:e1:da:34:ed:f7:d9:37:ec:59:0c:56:97:b6:
                    03:65:81:61:91:26:fd:7c:53:92:2b:08:95:66:a2:
                    85:31:c0:49:ad:3c:af:c2:81:65:60:01:29:96:a6:
                    3c:ff:f1:4f:8e:5c:4f:6a:ea:0b:be:01:38:8d:81:
                    23:b4:c0:1e:a6:4e:cb:b9:5f:2e:d5:ac:4c:d8:90:
                    15:72:1b:24:0a:f0:6b:26:fb:c6:e6:23:d8:66:f5:
                    56:15:1e:84:95:b7:a4:60:49:4d:61:70:49:58:d1:
                    f1:5a:e6:31:60:81:c2:1b:40:7d:a2:c0:f7:01:81:
                    af:6e:2d:2e:e9:ac:36:58:5e:64:c1:10:86:22:41:
                    de:23:62:2c:ac:92:73:4e:e2:83:43:c0:3f:9c:f8:
                    a6:40:fd:ff:2f:33:95:85:3a:41:e3:94:3a:85:8f:
                    67:53:b3:7f:55:ad:51:5c:dd:9b:f7:d7:c6:c3:75:
                    eb:ec:89:42:d3:95:4a:2a:04:82:cd:46:a8:e0:8a:
                    c9:18:64:a2:2b:09:93:83:cb:f9:36:04:93:1b:67:
                    14:18:59:fb:ff:25:3b:fa:30:5e:f8:86:81:eb:a3:
                    0f:81:bc:1f:8f:eb:4e:28:ba:c2:e9:7a:93:e8:73:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:22:D9:74:BA:26:EA:39:74:5F:88:B9:90:8E:B1:2A:48:38:75:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dad4553-4f73-3c0e-b5ca-fe44af9a6d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1429::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:db:cf:d7:27:58:f2:ed:92:97:fd:33:7f:4d:69:38:a0:ca:
         1a:7a:e3:6b:2a:6d:2e:6c:18:d0:18:7b:ef:14:5b:2a:96:ee:
         e3:24:2f:99:d4:c2:cc:32:fd:e2:af:f5:44:db:5e:09:18:38:
         b2:01:59:fe:e6:b5:6a:b8:00:2c:f1:f8:fe:f4:2b:f5:d2:51:
         cb:c4:97:27:0d:ae:87:74:79:b6:4d:74:c8:eb:16:93:b8:e3:
         56:f1:24:a9:fb:0c:ae:5d:0b:bf:a9:cc:5a:92:82:52:c5:cd:
         96:16:7f:f0:ff:3a:9c:26:0c:d7:62:3a:44:30:6d:d4:ee:42:
         71:ac:a3:5d:66:b0:d9:f3:c4:e8:a2:c3:8a:42:ba:7a:ce:86:
         0e:13:2e:05:6a:2c:a3:ae:1d:0c:85:f8:fe:f3:75:1d:95:bb:
         e9:ec:4e:66:63:70:51:e3:b6:12:a0:20:35:d0:31:f3:06:3b:
         f1:1d:3c:69:25:4a:29:7f:ba:cd:89:3a:b7:3a:c0:0a:f5:a6:
         e1:5c:be:5f:58:5d:ff:d3:f9:e0:d9:e5:dc:ba:89:b1:87:c0:
         ad:78:75:f2:d3:4a:86:53:6f:21:52:ef:98:6b:a1:ce:06:c1:
         f8:f3:76:66:aa:0e:dc:fb:06:f4:5d:ff:8a:c6:65:27:2d:4f:
         3f:79:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----