Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/694df5aa-892b-3e44-97f3-27d378b46db4.roa
File:                     694df5aa-892b-3e44-97f3-27d378b46db4.roa (raw, json)
Hash identifier:          +DN2TCrtZSopyBtMLIMC97RJCO6CkG9mFQXakRVOkFE=
Subject key identifier:   B1:D2:FA:B5:84:75:33:AA:08:0B:BA:96:CB:38:92:B0:A4:5C:01:C8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583BA6E898A72AB075AFAA94A880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/694df5aa-892b-3e44-97f3-27d378b46db4.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 23 Jan 2024 05:00:00 +0000
asID:                     400039
IP address blocks:        165.254.178.32/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:a6:e8:98:a7:2a:b0:75:af:aa:94:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jan 23 05:00:00 2024 GMT
        Subject: CN=bfbdd6fd-38f8-45d9-b441-72a6a63d2d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:78:5c:b9:30:bd:d0:d9:0c:01:8d:7a:a0:
                    82:ce:56:b9:6b:da:de:65:15:78:8a:8b:86:32:32:
                    99:b3:dc:04:85:45:10:4d:a5:42:4b:2e:a0:a9:bf:
                    65:a3:f0:70:26:8b:6e:66:29:7e:5b:48:58:33:9b:
                    8d:1f:ab:4d:87:44:9a:f2:37:47:e9:d1:df:c3:ba:
                    c4:bd:72:d2:d9:ab:fe:69:8a:87:7c:62:a8:83:dd:
                    ba:d8:92:a2:d1:b3:6d:24:69:e2:f8:6b:24:86:13:
                    b5:9d:7a:fc:a8:38:c2:8f:fe:31:16:eb:2e:18:ce:
                    fc:5e:fc:a5:22:75:8a:4e:83:77:9e:f4:37:f7:8c:
                    be:1e:bc:81:63:d9:2f:ef:f3:1d:de:d9:7f:71:64:
                    d9:e5:6b:d1:4d:c2:38:82:bb:3f:1c:0a:34:32:90:
                    63:42:99:fa:cb:dd:ed:f1:22:58:a1:50:26:c5:9c:
                    84:cd:54:59:93:99:87:16:e1:36:df:74:08:04:50:
                    d9:4e:f1:1f:75:bc:41:f0:fe:a0:07:8f:cd:56:b7:
                    2d:fe:a4:f4:ad:2a:13:7e:24:70:63:d3:da:53:e0:
                    ef:c8:54:36:6e:67:ba:b1:13:a7:63:a3:3f:70:f5:
                    a5:d6:59:e9:d6:d5:fc:79:07:70:6a:28:5d:09:ad:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:FA:B5:84:75:33:AA:08:0B:BA:96:CB:38:92:B0:A4:5C:01:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/694df5aa-892b-3e44-97f3-27d378b46db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.178.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:4d:2a:3f:32:46:5f:06:e5:55:f9:93:fc:a3:5e:e7:1d:
         f5:a1:c1:f7:f3:e2:4b:59:b9:af:35:d5:9d:49:1e:58:0c:9c:
         52:44:f5:d5:90:ef:11:3d:bf:05:7c:b8:da:cd:8a:bf:0a:c3:
         d9:f7:f0:77:e4:e2:92:4a:2a:84:dd:61:51:d2:27:c2:9e:b4:
         a5:eb:31:d3:f8:65:71:be:28:dc:ea:ae:4c:b7:4b:f7:87:ce:
         6d:cf:7d:16:63:d4:c9:ca:0d:2b:a2:8a:92:3f:dc:f6:dc:6e:
         04:e3:db:20:47:74:5b:f6:fe:38:f5:24:31:08:a5:bb:ca:55:
         3d:32:fe:02:a8:37:19:8f:e2:42:8e:e8:ce:b2:32:ec:aa:65:
         f7:02:15:5d:d6:ce:0f:b1:46:9b:67:44:a8:94:e1:03:85:89:
         3b:76:5e:91:c3:3a:b3:dc:d1:4a:cc:23:3c:5f:72:ee:04:9f:
         19:a9:7d:b7:6e:31:c2:40:d2:8b:07:62:2a:13:cb:4f:0b:1a:
         ce:c8:d6:9a:81:62:13:55:7d:48:5b:fd:ae:e4:c3:9c:e7:f2:
         64:6a:9f:e2:2c:81:09:9b:01:c7:06:7d:f9:3e:e4:cc:1f:65:
         ff:2f:a8:2c:c2:1f:ff:88:3f:d2:1d:a3:e0:b7:91:8b:f0:24:
         ef:ad:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----