Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c897ce29-dbbc-3d98-b7bc-53cb2121b1b7.roa
File:                     c897ce29-dbbc-3d98-b7bc-53cb2121b1b7.roa (raw, json)
Hash identifier:          rRn6Y+/7Fx3VrG8bCCbFxNRPKludJpioh/36iW+xlfQ=
Subject key identifier:   EC:E6:5C:B6:4E:58:73:9C:A9:45:02:17:F6:D5:BC:81:3B:3C:07:A3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583CB633214B2E66872996AF4A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c897ce29-dbbc-3d98-b7bc-53cb2121b1b7.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 29 Apr 2024 04:00:00 +0000
asID:                     1225
IP address blocks:        157.238.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b6:33:21:4b:2e:66:87:29:96:af:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 29 04:00:00 2024 GMT
        Subject: CN=42783404-3d48-4db6-b41e-e530e2eb437d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:01:5c:19:ac:b0:50:86:8b:4c:8b:53:06:
                    a8:84:99:49:9c:66:c3:db:18:fb:f2:5e:55:d3:bc:
                    92:46:97:56:98:c7:88:0f:2d:c0:16:69:35:87:63:
                    24:ff:97:00:26:5c:16:4a:7a:b5:16:a7:43:c3:87:
                    fa:0e:5b:12:9d:f4:b2:80:1e:e0:66:87:ab:23:d8:
                    bd:32:13:37:c8:d7:d9:5a:5b:aa:19:f0:94:4a:a8:
                    45:1b:f9:0b:0a:69:dd:fc:a1:d9:3d:00:7f:9a:7c:
                    c6:e4:bd:ab:11:74:74:b1:76:87:35:31:71:99:f0:
                    4c:68:76:c3:5d:bb:4c:ef:31:96:cc:58:77:6b:af:
                    91:9e:5d:f4:81:97:7f:ed:f6:e7:89:7e:06:a1:b0:
                    c9:6e:39:e4:03:5b:4b:fa:19:12:94:26:d2:28:e7:
                    df:0e:be:37:c9:33:89:20:6f:c5:8f:a9:d0:24:85:
                    b5:27:e7:28:1a:f1:85:64:f5:be:68:26:bc:72:25:
                    f0:bf:22:a1:8e:4b:96:23:09:f6:87:cb:2c:5d:fd:
                    d1:b6:a2:b3:8b:3c:34:2a:40:7b:e0:41:ec:e0:8f:
                    a6:a8:62:43:48:78:ab:0e:2b:b6:30:f3:79:81:5c:
                    c8:82:93:b6:d5:fa:89:6c:2d:4e:06:13:a0:d6:0d:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E6:5C:B6:4E:58:73:9C:A9:45:02:17:F6:D5:BC:81:3B:3C:07:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c897ce29-dbbc-3d98-b7bc-53cb2121b1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.238.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:70:51:c1:73:83:92:67:b7:98:01:be:3a:bb:37:07:76:
         08:e8:46:4a:3b:ad:7c:22:06:1d:dc:ab:bd:12:23:ea:59:3f:
         ee:66:d0:66:48:6b:4b:aa:6a:02:2a:7d:10:fa:75:62:06:7c:
         b7:50:32:40:91:8e:e9:5d:6f:91:68:cc:4b:01:82:32:dd:03:
         58:c6:c9:ce:dc:72:14:9d:ef:12:19:a9:82:25:b5:26:79:c8:
         9f:4f:4c:2b:72:72:63:f9:3f:a0:ce:45:03:51:84:cc:b6:50:
         cc:ad:a8:3a:60:94:5b:f1:8c:72:a8:b4:0c:cd:09:23:a9:47:
         b4:40:bc:40:b8:8e:c6:e2:b7:e9:4e:dc:16:cf:1c:c2:2a:ea:
         f9:ea:c0:de:78:c7:ef:b3:e9:a0:fe:10:93:b3:0d:9d:71:21:
         bc:a0:da:1c:5f:c4:f0:7e:1b:8f:6a:b7:e1:90:26:e6:0a:0c:
         26:ba:c2:94:25:78:77:af:9d:16:56:a8:c8:06:ca:f5:96:75:
         f7:3d:7a:fb:c6:cb:7a:f9:61:34:d1:fc:95:0b:3f:03:71:79:
         cc:e3:67:d7:45:4f:12:4c:a0:13:82:92:d7:ae:49:0e:63:77:
         8e:2a:48:0c:8b:96:fc:d0:27:c1:60:2a:a0:6f:d4:e7:fe:fe:
         82:d1:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----