Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d3a9969-1144-3521-9a96-92dd6fe6fa60.roa
File:                     5d3a9969-1144-3521-9a96-92dd6fe6fa60.roa (raw, json)
Hash identifier:          a2CFhld7cV9uVZiGyXmt3jUmKF/Xpkx8LUREhpzRUOw=
Subject key identifier:   B2:E1:71:17:23:8C:96:83:CD:DB:3B:1F:F1:33:72:3C:2E:E2:60:A7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A51BC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d3a9969-1144-3521-9a96-92dd6fe6fa60.roa
Signing time:             Fri 30 Nov 2018 01:09:59 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 00:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:51:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5f0cc1bc-7c2f-4908-81dc-cd1849fffba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:37:06:21:a5:7c:5d:9a:99:f4:67:48:a4:
                    b4:f0:9f:70:e1:51:d2:25:94:08:f1:f1:04:43:0d:
                    11:b3:cd:79:4e:55:32:3d:64:ef:66:d6:84:a7:7f:
                    f1:27:42:38:b1:e1:6a:a6:7d:76:1e:17:4a:b8:7a:
                    04:56:d2:4b:af:f8:5a:36:4b:f6:2f:4e:58:42:60:
                    55:33:fe:62:bf:e2:ce:a1:15:3b:78:f4:e4:80:61:
                    aa:83:bf:cc:0d:82:2a:cb:30:95:a0:cb:50:68:72:
                    3c:4e:bc:16:39:d8:5b:df:1f:2d:0f:44:78:22:37:
                    2e:2a:86:85:9d:59:0d:b2:bb:3e:4c:64:62:b3:0e:
                    d4:0f:12:7e:ac:3b:b9:14:74:0c:70:db:f5:72:36:
                    80:ef:c2:03:75:e2:85:bd:52:fc:00:73:26:ef:1b:
                    0a:dd:65:fa:8f:92:08:f7:10:d1:51:39:b6:e1:2a:
                    9e:0d:44:65:59:31:e9:ed:48:90:03:0c:90:68:42:
                    c1:22:42:6a:5a:4c:dc:56:2d:db:89:2f:6f:49:bc:
                    1b:b4:96:f6:29:c5:6f:b5:68:71:0f:7d:aa:92:66:
                    f0:66:5b:e9:81:f6:c6:2b:86:14:24:41:fe:87:35:
                    b2:d0:b8:e0:45:25:2b:97:9f:d4:00:f2:6c:3f:9c:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E1:71:17:23:8C:96:83:CD:DB:3B:1F:F1:33:72:3C:2E:E2:60:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d3a9969-1144-3521-9a96-92dd6fe6fa60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:c0:15:a1:2b:19:41:6c:16:8f:a2:0a:2c:01:ac:24:c2:
         83:9a:3c:df:8f:11:72:6f:2f:f2:e1:7a:d2:61:57:bd:8d:fd:
         24:3b:d3:c0:a0:94:05:27:c1:66:8d:48:00:47:12:ec:97:f8:
         3f:c2:ad:de:e7:7d:08:5f:62:bb:15:8f:62:41:7a:90:9c:f4:
         5b:75:48:3b:67:cb:df:03:0c:5f:e9:4e:9b:02:3f:9a:ac:af:
         f2:85:68:80:4a:11:b7:da:a2:f8:fd:0a:16:32:35:f7:1e:5f:
         47:df:1c:09:e3:a4:b5:3d:db:55:a1:2e:ee:a2:f8:6c:3f:e9:
         0c:bb:01:60:f9:2d:0d:8d:bf:ef:20:9d:c7:6b:32:91:a7:6a:
         f8:fc:20:a1:1d:2f:af:75:09:86:9d:06:e8:7f:25:30:15:7c:
         bc:c4:dc:29:31:1b:f1:da:6b:43:ce:48:71:b7:d9:7a:60:1e:
         fb:24:a6:ce:72:70:7b:27:b5:b7:e4:2a:0e:b2:6b:54:ff:7f:
         6b:08:f3:be:ed:fb:ea:a3:91:ab:17:46:e5:2b:91:6c:e7:ce:
         c0:56:d4:9e:75:5b:fd:fa:e4:41:07:32:ba:9b:17:8a:e2:b9:
         62:f1:d0:14:d7:6e:d9:b0:b9:b4:b0:b7:c9:9b:a1:7e:23:15:
         a3:10:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----