Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94344787-c2cc-34b1-8d48-4af560c88b03.roa
File:                     94344787-c2cc-34b1-8d48-4af560c88b03.roa (raw, json)
Hash identifier:          /S9tyeyAfdtTaQBHXgV0vh5Ba63fSBLlboiCbq4HJNE=
Subject key identifier:   01:31:8D:E3:39:6C:40:2B:C5:41:F3:94:3E:4F:4A:66:27:86:A6:6E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A561D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94344787-c2cc-34b1-8d48-4af560c88b03.roa
Signing time:             Fri 30 Nov 2018 01:10:01 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 00:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:56:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=f18c707d-8738-40cf-9183-d901a3e292d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:ce:f9:02:6d:ba:77:bc:44:12:4e:3b:b0:
                    fe:85:34:04:5a:e9:69:27:28:77:c7:0d:58:27:ce:
                    aa:35:f5:f6:c6:f7:45:65:38:75:19:3d:87:41:25:
                    a3:c9:a1:09:19:db:28:80:28:a9:f7:0e:8f:23:f9:
                    1d:6f:71:a7:cd:64:00:01:d0:8a:9c:1b:12:8d:4f:
                    06:2a:55:e1:fb:83:ad:90:36:ce:8c:75:53:61:a1:
                    ad:d3:ea:a2:df:d3:86:9e:aa:28:ec:90:a2:cb:ef:
                    d2:9b:3c:72:2a:71:af:07:e9:d1:10:ad:ed:cd:36:
                    4b:9b:f5:40:9b:bb:9a:52:09:2f:f0:ec:52:2e:a4:
                    6e:88:ba:7c:dc:0d:c3:18:85:ed:cf:f8:1b:c0:46:
                    5e:99:22:69:95:a0:f2:6d:cd:e1:ee:cd:09:e9:46:
                    1a:f6:55:f2:69:e2:79:ff:c3:ec:fa:a8:76:34:aa:
                    e0:f5:d8:01:b6:09:35:98:6e:f6:7a:22:48:68:04:
                    7c:94:e4:f2:b9:66:5b:35:67:41:b6:b9:1d:cb:20:
                    d3:78:c1:57:6f:22:d1:35:37:d0:d1:5e:9e:a4:e1:
                    cf:8d:e0:6f:de:a4:87:6b:da:67:64:54:18:f1:8e:
                    87:10:ae:8c:db:60:3d:e7:d2:bf:5c:9d:b8:75:ce:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:31:8D:E3:39:6C:40:2B:C5:41:F3:94:3E:4F:4A:66:27:86:A6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94344787-c2cc-34b1-8d48-4af560c88b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:f7:a0:b4:38:0a:2f:60:71:96:3d:3c:8b:92:c4:38:5f:
         e1:be:76:42:b9:b9:5d:b6:0c:eb:1e:63:f5:45:1b:c0:db:17:
         af:50:e3:d0:7e:29:4b:c0:34:2a:88:b0:c3:bc:23:37:91:36:
         00:67:0d:25:b6:7d:bf:07:16:20:5e:6c:2b:7b:b1:8d:5f:fc:
         8e:75:52:a7:0a:84:5f:f9:0c:b9:4d:a8:06:47:e9:d9:45:55:
         00:cf:b6:50:fc:47:22:7e:33:1a:73:ec:1a:ea:30:d3:b1:46:
         9d:b3:b1:7f:65:89:5e:9e:d6:57:86:eb:2a:32:da:5a:07:06:
         c1:75:89:88:97:c5:db:a6:a4:b5:e4:ab:8e:6c:3a:3d:af:53:
         11:c3:da:9a:33:38:cc:88:e3:47:17:04:85:ea:13:ba:5e:9c:
         e6:97:14:d9:87:f3:26:5a:25:27:1d:78:21:f2:08:9f:a7:68:
         e6:74:27:4a:4c:ab:be:d2:57:b5:71:68:30:a7:d7:48:8b:cb:
         4b:ab:1a:fc:75:d0:e4:9b:3d:3d:59:ac:33:07:76:1e:a2:13:
         57:24:be:25:df:22:84:09:1c:af:f8:bb:eb:bd:be:bd:c9:08:
         7a:41:29:c2:fd:f9:b3:00:93:c2:f7:27:7c:fb:f6:4f:21:de:
         c6:92:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----