Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4d29d0c-c112-30f7-9913-441d1245910f.roa
File:                     f4d29d0c-c112-30f7-9913-441d1245910f.roa (raw, json)
Hash identifier:          4IE9wOR8MQX6CscJfD0aM8EKfS8ltZ+68hfbp0eX+Jc=
Subject key identifier:   DE:6E:A3:90:B1:72:37:43:72:96:88:35:E5:B8:9A:FD:A1:F1:7A:A0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583CBB7CC4E52CDABF2B44981380
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4d29d0c-c112-30f7-9913-441d1245910f.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Wed 01 May 2024 04:00:00 +0000
asID:                     20940
IP address blocks:        168.143.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bb:7c:c4:e5:2c:da:bf:2b:44:98:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : May  1 04:00:00 2024 GMT
        Subject: CN=b1d0bcf3-bcbe-4fd4-a651-05966fc2ce0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:b7:63:c6:d5:99:a6:ab:4c:50:9c:28:cc:
                    88:d1:d2:a5:c5:01:08:3a:ea:8b:46:2e:b6:a3:9a:
                    81:06:e1:9c:32:04:c6:70:62:d4:03:ba:b0:57:1d:
                    7a:79:e7:77:c4:2a:3b:eb:01:58:e8:bc:6b:02:fb:
                    41:07:10:24:ec:81:10:f8:14:3a:84:1c:ed:68:7d:
                    85:0f:a2:00:0f:56:64:e2:29:cd:09:67:42:17:a0:
                    a7:b5:51:d2:b1:00:27:fd:84:ea:14:c1:f6:b5:c1:
                    bb:02:7d:2c:2b:67:c7:84:2e:55:7e:c6:3a:9d:d1:
                    83:c5:e8:dd:0c:40:30:24:ca:2a:23:fd:fe:60:5b:
                    64:a2:b2:f4:e9:3e:9e:88:5e:dc:99:fb:81:be:20:
                    d3:81:e7:69:31:82:d0:29:c7:a6:86:19:46:66:76:
                    f8:49:ec:6f:39:0d:c0:a2:43:43:f1:5a:95:d9:97:
                    88:86:d9:84:2a:03:9b:13:ac:0b:fa:ee:7c:a2:2a:
                    45:b6:2a:a8:3b:c0:f2:b1:ef:54:38:85:99:3f:a2:
                    6d:d2:1f:19:55:99:7f:e2:56:a4:03:cb:0b:aa:2f:
                    18:fe:a7:e0:7d:31:14:24:cb:3b:18:94:87:84:40:
                    8d:6b:08:56:b8:2b:b9:cf:5f:0b:e7:f6:58:43:eb:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:A3:90:B1:72:37:43:72:96:88:35:E5:B8:9A:FD:A1:F1:7A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4d29d0c-c112-30f7-9913-441d1245910f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.143.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:20:55:44:fa:68:73:f6:f6:39:78:13:83:fa:1c:e4:24:03:
         cb:65:62:d5:49:f3:41:24:18:e2:6c:69:f4:ee:91:89:a6:77:
         0e:c6:1f:28:d2:a1:af:1a:f0:9a:b3:83:0d:ff:c5:20:17:cb:
         c7:89:b5:cd:31:72:4f:31:dd:e3:52:3a:bc:64:53:04:25:70:
         f6:8d:c9:57:a0:b3:8c:07:34:d0:a7:e2:22:37:47:fc:74:bd:
         91:84:7c:66:26:58:a7:ae:e6:bd:20:27:13:ce:55:37:9e:fd:
         df:3a:38:6d:e8:b9:dc:f4:95:8a:77:e0:d1:b8:e6:93:35:5a:
         48:f2:fb:fd:78:14:2a:08:db:84:c9:1c:b6:4c:2a:2c:56:7b:
         76:46:4a:dd:ab:ff:3f:09:4a:39:10:3c:7f:02:2d:26:32:19:
         0d:79:ab:4b:09:35:a6:47:ba:07:75:df:5f:98:96:5e:45:03:
         d2:2a:17:25:3f:2f:86:d3:88:ca:8d:e3:60:d6:43:c2:a1:d3:
         bc:5d:67:6d:3e:4a:1b:af:0e:7b:98:d5:ca:62:4b:44:80:fd:
         f7:ae:e2:e1:aa:be:5f:3c:62:a7:8a:9a:9a:31:00:ec:cd:4e:
         9c:41:50:ea:76:94:78:dc:b4:6f:b2:5d:42:05:a3:7b:bb:3b:
         24:9e:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----