Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/386bfc57-c4a8-3a5e-b139-c3ddd47f88f4.roa
File:                     386bfc57-c4a8-3a5e-b139-c3ddd47f88f4.roa (raw, json)
Hash identifier:          RqmOJeWH49JgCJqecW/hu0EGoNKjYqgJGeq9ZpTv1z8=
Subject key identifier:   04:B8:3D:52:5A:0C:F2:B2:06:D3:FB:C2:E2:61:43:62:36:6E:8F:0B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858412458EBD67980B85C5667DD80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/386bfc57-c4a8-3a5e-b139-c3ddd47f88f4.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 09 Jun 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        104.165.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:24:58:eb:d6:79:80:b8:5c:56:67:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  9 04:00:00 2025 GMT
        Subject: CN=b425bd13-2f81-4009-baaa-58e344c9acdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:e1:8c:91:a7:5f:e4:1e:6c:f1:d7:4c:c0:
                    09:d2:b1:7c:11:fc:4c:8f:fb:a5:85:12:b9:11:bc:
                    25:80:54:fa:bd:b6:6a:38:2d:91:8b:fc:3d:a3:52:
                    fc:76:5c:e0:9d:c0:2b:49:1c:c1:2f:3e:38:eb:b4:
                    b6:77:cd:60:2d:b2:d6:80:ce:ba:58:fb:be:44:9f:
                    2c:88:83:f6:5d:79:d8:b7:15:56:7f:41:de:1f:0a:
                    61:97:6a:8c:95:21:c9:3b:31:3d:c9:d2:f2:a1:85:
                    f3:f4:95:ee:d8:54:8c:c1:60:4b:63:51:ff:1c:63:
                    9b:9f:de:c3:e3:f2:8f:bd:35:20:15:35:8e:59:8b:
                    00:df:88:ed:41:df:6c:6e:1f:41:08:97:1d:26:03:
                    53:67:12:46:b4:27:f4:8d:6b:47:9e:ba:0e:b9:61:
                    7d:70:48:6f:6f:a4:6a:c5:4e:13:20:65:cc:a3:eb:
                    fa:d1:32:82:53:f8:63:86:13:7e:28:de:2b:26:49:
                    f4:a8:c8:a7:46:55:fd:72:fd:d5:54:0e:ae:4e:2b:
                    75:bb:c3:94:d9:83:87:64:3f:28:fb:2f:f6:1c:15:
                    34:75:62:f5:f6:0e:ac:a3:62:03:39:cd:a7:70:ae:
                    b9:65:40:d1:5d:09:4b:19:9d:63:dc:21:7d:10:7d:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B8:3D:52:5A:0C:F2:B2:06:D3:FB:C2:E2:61:43:62:36:6E:8F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/386bfc57-c4a8-3a5e-b139-c3ddd47f88f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:25:3a:7a:c3:4e:61:ef:94:2f:e0:78:29:b4:8c:66:16:3f:
         75:0f:77:13:0e:82:1e:09:43:39:94:5c:0a:41:51:be:2e:3b:
         aa:68:d5:20:8f:e5:a1:2a:a9:fc:91:82:95:c6:57:3d:7a:02:
         f9:bd:96:c2:7f:8f:6c:e3:9f:c7:1e:4d:45:61:14:5b:c1:f2:
         02:59:e8:d5:33:81:20:29:3b:0b:5f:af:0e:ba:e8:b6:ef:43:
         4b:7c:60:37:c4:6e:69:12:46:02:e4:df:f8:b4:e5:b6:16:b0:
         f2:07:c1:69:a3:6c:eb:b9:9a:5d:9f:44:0d:b2:86:55:37:f5:
         4f:58:5e:0e:f4:6c:7d:6c:30:f8:59:73:b8:56:d7:fa:47:5d:
         3b:de:df:a7:50:15:67:b2:97:5f:bf:e3:82:ce:33:0c:db:6e:
         c5:ac:32:dd:c4:46:26:5f:bb:5c:83:6b:56:da:51:e6:a1:ae:
         96:3d:d2:4d:4b:97:ce:68:d7:e9:48:64:1c:a1:ce:db:67:92:
         02:aa:b4:fd:fb:68:13:25:90:c6:3f:22:f6:52:ac:7d:ff:20:
         d6:c7:42:c3:e6:4b:35:99:65:0f:b8:cf:7a:3c:65:48:4d:99:
         f4:e4:52:25:50:cc:c7:2b:e5:47:a3:b0:0d:e2:3d:84:7e:93:
         1a:8f:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----