Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4712ddd-bdeb-396a-adf2-c9a017546198.roa
File:                     d4712ddd-bdeb-396a-adf2-c9a017546198.roa (raw, json)
Hash identifier:          +8aFL2LHCST7Zc/A19DI13gkHY6wmDXWTw3gu/lCxSs=
Subject key identifier:   E9:25:1E:28:B9:63:0F:94:5C:F7:37:3A:C6:C7:AC:97:9D:53:D3:40
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F8625030D
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4712ddd-bdeb-396a-adf2-c9a017546198.roa
Signing time:             Wed 08 Jan 2020 17:12:50 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     53998
IP address blocks:        204.2.240.0/27 maxlen: 27

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:86:25:03:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=de39e072-f781-4830-9783-1eab42ac4cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:67:20:9a:36:cb:d4:0a:8a:95:f4:07:67:
                    55:68:7b:c4:12:3d:19:4d:48:23:ba:f0:89:40:79:
                    07:59:d7:4f:a7:f5:5a:b7:5c:77:39:2a:69:85:6b:
                    8c:cb:a6:f5:f9:23:4d:08:2a:e4:8b:f5:57:7a:d6:
                    db:4d:67:0f:0f:58:13:4d:50:2b:8d:4c:0c:5b:f5:
                    6f:f3:8c:dd:e0:de:1a:b5:00:d3:16:9b:76:78:4c:
                    0b:f8:d2:17:2e:df:9c:bb:41:e3:5d:62:b8:c6:d7:
                    22:96:0b:b8:e4:a3:dc:e1:8b:78:07:84:a8:e7:60:
                    b2:5f:1e:ac:85:f8:1c:53:2e:b8:7f:22:6d:8c:63:
                    fe:27:8d:dc:e5:f6:03:2f:b1:aa:fe:fe:87:6d:53:
                    cf:fb:66:55:d2:9b:ea:2d:4c:1e:d2:c0:b7:1b:fe:
                    a1:82:5b:4f:92:10:b4:3f:cc:4f:bb:cb:22:6a:70:
                    16:b4:aa:9a:40:f5:ea:67:b6:8c:2d:cb:41:9c:f5:
                    c0:49:f1:e8:60:82:64:c1:fa:59:1e:86:aa:31:52:
                    2a:7f:b2:4c:54:c7:b1:15:0b:c7:80:48:18:e5:ed:
                    02:b2:e0:16:6b:c0:c9:9d:b6:4d:ab:5e:48:14:ee:
                    22:7a:97:65:26:56:2d:50:e8:a0:1f:c9:0c:7a:7e:
                    0b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:25:1E:28:B9:63:0F:94:5C:F7:37:3A:C6:C7:AC:97:9D:53:D3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4712ddd-bdeb-396a-adf2-c9a017546198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.240.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e0:9d:40:d3:0b:11:55:68:f0:e6:34:df:a6:ce:2d:6c:0c:
         ec:9c:00:9a:97:15:90:bf:a9:49:ff:c7:ba:ef:d5:4a:c3:fe:
         22:61:b0:4b:00:a4:66:bd:60:f0:81:29:1e:2e:51:69:4e:f9:
         1e:2d:a4:02:e1:8b:3c:e9:df:8a:2f:06:4a:e1:3f:a1:aa:07:
         b8:46:6e:82:7d:17:13:9b:dc:95:b1:5e:cc:32:29:c4:87:bc:
         23:18:ab:2b:25:22:b7:77:95:be:24:03:8e:7e:4c:66:6f:4e:
         6e:29:a7:94:ca:67:8f:9f:44:f0:a5:0d:07:41:21:71:db:da:
         7c:06:af:5b:f3:4e:65:14:be:81:20:83:a9:27:b3:12:32:aa:
         dc:6c:ae:cd:8b:74:26:a2:6d:2c:b7:f2:e9:38:06:48:30:9c:
         2d:68:d6:07:1c:74:88:ea:bf:0a:30:54:33:09:80:bd:7e:57:
         1a:c5:17:f7:62:f4:36:ed:c8:dd:b1:fd:05:a6:8c:c1:ef:37:
         36:a9:49:b0:48:24:53:77:be:a1:53:89:52:ba:8d:37:38:35:
         3a:fc:59:f4:bd:b7:ff:60:d2:29:56:12:48:59:d6:19:57:fc:
         1a:03:9e:42:27:ec:1d:fe:89:84:42:a6:48:cd:29:67:e0:e1:
         e1:f5:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----