Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b06d130f-afb1-3fd7-9c72-0232be949eb1.roa
File:                     b06d130f-afb1-3fd7-9c72-0232be949eb1.roa (raw, json)
Hash identifier:          H/SZTylc/RM40BLjQlUvQLKttvtZwg+DOGGnjz89MN4=
Subject key identifier:   1E:01:59:81:8B:20:2C:B9:97:6F:F3:38:B7:2D:05:0C:B5:16:0C:71
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583CB632CEBAA387EDDC5C5E8070
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b06d130f-afb1-3fd7-9c72-0232be949eb1.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 29 Apr 2024 04:00:00 +0000
asID:                     1225
IP address blocks:        129.250.53.96/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b6:32:ce:ba:a3:87:ed:dc:5c:5e:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 29 04:00:00 2024 GMT
        Subject: CN=ae825015-6ba8-43b7-9554-28c9e1c7b26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:c7:23:86:fe:9f:3a:51:2d:c7:a3:68:dc:
                    73:01:38:da:12:e6:4c:e6:95:31:4e:be:4c:75:c3:
                    5b:05:31:a3:54:c0:65:69:5d:cc:d3:7d:53:1c:ef:
                    b1:4e:60:99:5c:dd:55:06:f8:12:8b:15:a4:8f:0e:
                    46:a6:b9:f9:99:e3:38:f3:f7:6c:6f:eb:37:ae:ae:
                    a7:16:48:e2:c9:d5:88:4d:98:0a:a7:3e:7d:6f:0d:
                    8d:92:6e:33:65:ff:f6:46:19:c2:54:de:e6:65:cb:
                    30:a5:b9:92:46:0d:29:23:45:f7:f4:11:de:3e:61:
                    5a:3e:2c:dc:e6:e7:41:80:6e:3b:11:bc:05:55:03:
                    85:cb:fc:ac:55:7f:8a:87:42:2a:db:81:55:5d:ba:
                    53:38:f6:2c:c3:9a:33:46:21:72:e8:3e:64:e9:a6:
                    01:fa:af:1a:d6:ad:3d:f3:2f:aa:ae:18:dc:39:c2:
                    27:31:5c:7c:93:dd:4b:25:5e:88:d0:ed:75:a1:91:
                    37:20:4d:98:81:c5:e9:06:37:97:87:de:10:55:43:
                    6c:7a:55:5b:23:ed:a4:3a:92:46:ab:f2:5f:15:76:
                    5b:a8:6f:09:3a:1a:10:3e:55:f8:e1:ab:d9:01:b8:
                    35:bb:7c:f1:a7:92:92:2c:18:3d:47:74:66:bb:ba:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:01:59:81:8B:20:2C:B9:97:6F:F3:38:B7:2D:05:0C:B5:16:0C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b06d130f-afb1-3fd7-9c72-0232be949eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.53.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:3d:d7:8d:bc:22:85:2e:fe:e0:f1:f4:1e:45:1e:83:35:
         cb:bd:cf:a1:b5:25:30:9d:db:2f:2e:07:71:0e:f3:fd:31:88:
         6d:6d:77:0f:e5:1a:39:a5:b6:32:54:17:30:ba:1e:54:18:29:
         af:9b:97:79:05:65:d9:f7:c8:aa:51:50:8b:50:4e:d0:ba:20:
         63:f4:ed:85:2a:c5:18:cf:1f:71:44:f8:b4:07:09:dc:1b:0e:
         f1:81:b6:51:97:57:fe:33:2e:ff:e8:28:07:40:f7:41:c7:eb:
         b0:92:40:21:7a:cd:8a:f0:84:73:ff:c9:5b:4a:8b:8b:b2:df:
         28:93:bc:99:f1:ea:e6:ac:c3:ed:99:36:15:8b:57:f7:9d:5e:
         d3:d3:f8:b9:42:99:91:4f:6f:98:f8:c9:83:0f:e8:95:8b:f3:
         ce:89:68:39:19:73:4b:a0:d6:c7:4e:30:14:61:bd:74:a0:0e:
         24:9e:68:0b:7c:4a:9f:4c:5d:0f:7b:a4:24:c1:ff:4c:ce:c4:
         3b:15:e0:33:e7:99:d6:fe:fe:20:55:20:e5:16:cd:be:34:f6:
         07:c9:d6:fe:06:73:85:59:e3:26:5c:b1:8e:08:2c:d8:bb:55:
         38:f5:27:40:7b:ff:9f:72:e1:d7:28:2e:85:76:a9:28:5d:05:
         7a:e7:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----