Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da51a1b3-62cc-3e6b-9b45-1645d6c161e0.roa
File:                     da51a1b3-62cc-3e6b-9b45-1645d6c161e0.roa (raw, json)
Hash identifier:          uN7HeeqhaURkDIxpEY6DZTQtx3Tu38RMmdRz3io++Uw=
Subject key identifier:   90:19:62:02:FC:34:BD:A8:03:0E:BF:B2:58:3E:FB:F5:44:9C:A6:9D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A04DC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da51a1b3-62cc-3e6b-9b45-1645d6c161e0.roa
Signing time:             Fri 30 Nov 2018 01:09:40 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.200.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 22:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:04:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5d457563-bddd-4948-b032-6d7d1466fd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:2b:5d:e4:84:d9:36:37:f8:82:b1:1a:ce:
                    8e:16:68:7d:82:4a:72:73:48:89:73:a7:a4:37:dd:
                    34:ac:ee:77:59:a2:07:ea:11:c8:b2:a2:bd:d6:93:
                    70:35:99:3e:89:3c:de:be:e1:7e:81:50:11:56:ac:
                    d1:46:72:c7:80:02:56:ee:d9:20:1f:0b:76:b9:d5:
                    07:e9:0c:01:25:32:a8:df:7c:1c:c3:27:4e:cd:43:
                    85:54:1b:57:9e:46:c6:b5:82:f7:2e:b3:77:80:35:
                    3b:3f:ab:9a:29:b4:bf:57:82:e5:df:06:ac:46:98:
                    0d:0f:ff:30:30:17:b9:6b:5a:22:72:48:fd:4e:af:
                    33:e3:cd:e9:a4:ed:be:f2:ec:d4:6c:39:e5:b1:b7:
                    39:75:c1:77:14:87:cf:4e:b2:94:78:55:a6:77:5f:
                    1f:31:66:18:cc:eb:ea:72:e2:0d:03:7d:3f:0e:f7:
                    b6:21:a9:70:3b:bf:8a:65:2b:74:1c:68:9e:d0:e7:
                    f8:1d:67:ce:12:d5:3c:92:e2:eb:e7:0d:69:a2:bb:
                    14:9a:74:37:70:a4:3f:a9:a7:c1:62:a2:d1:e5:73:
                    84:d4:48:83:64:ed:f3:64:08:3f:a9:aa:d6:9a:1c:
                    00:2d:3a:7c:85:04:a7:63:7e:b6:1b:40:4e:32:4f:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:19:62:02:FC:34:BD:A8:03:0E:BF:B2:58:3E:FB:F5:44:9C:A6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da51a1b3-62cc-3e6b-9b45-1645d6c161e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0b:df:a9:21:b1:23:20:ac:ab:03:f7:8e:f5:27:b2:39:c0:
         00:65:4e:d5:32:4d:c2:ed:d2:72:2b:45:0d:28:65:17:8a:1a:
         64:0a:d7:17:ff:a2:97:87:1a:f5:58:93:e8:54:a9:12:37:03:
         c5:f7:2e:32:5f:02:0a:17:83:60:55:dc:95:1c:70:72:70:94:
         79:c2:61:c3:c0:32:3a:39:e7:d2:96:27:91:bc:06:25:32:07:
         1f:da:f2:65:cf:38:d9:26:6c:c8:87:f9:8c:95:fa:f3:f9:12:
         bd:9e:c1:e9:a6:a7:2a:99:71:29:a7:5e:08:88:fb:ed:96:8d:
         a5:76:d3:b1:8b:f2:be:26:e9:1d:7e:7b:38:ce:da:75:92:3a:
         75:35:08:fc:47:46:67:fc:0e:c1:0b:d6:91:fb:15:fc:2b:46:
         59:d9:01:1f:40:5a:4a:98:34:86:16:cc:d7:d8:0a:f3:4c:88:
         44:e7:d1:86:44:c8:0b:12:84:97:30:11:e5:d5:73:94:4f:38:
         3d:83:c8:aa:ec:7a:29:3b:7f:ea:b9:d9:c0:5e:87:b0:a9:db:
         96:07:7a:b7:3c:03:f0:d3:68:3f:12:fc:f5:d8:4b:4c:47:a7:
         c6:cd:2a:f8:d3:30:a8:71:56:7a:18:62:db:e7:34:a5:d2:a5:
         13:c1:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----