Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45c9f42d-1744-38a5-a9c1-0049cce877eb.roa
File:                     45c9f42d-1744-38a5-a9c1-0049cce877eb.roa (raw, json)
Hash identifier:          c7SoSm9Q+NvlQjcXTOnDvX1fTuGY0qxRqh940uzR7cs=
Subject key identifier:   CE:0E:68:C5:FF:19:64:CE:11:E6:40:B6:4D:90:95:EF:01:D8:C0:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841163F78E446D013C26CD89320
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45c9f42d-1744-38a5-a9c1-0049cce877eb.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 04 Jun 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        136.0.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:16:3f:78:e4:46:d0:13:c2:6c:d8:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  4 04:00:00 2025 GMT
        Subject: CN=68a1c056-2abe-4112-993e-3f072e2524a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:da:87:c1:2e:98:91:14:57:bd:66:a2:c9:
                    42:97:49:cc:2a:0e:7b:db:f2:04:68:53:55:1e:b1:
                    fc:55:fd:96:5b:bb:bc:29:17:c0:11:2d:7e:20:96:
                    3e:44:fa:79:2e:8e:2c:ca:45:30:68:72:b2:58:7a:
                    34:00:aa:7a:fd:b7:d3:34:cc:4d:5d:6e:3f:ad:31:
                    a7:a2:9c:f0:ab:7f:b0:d9:1a:09:63:fc:6c:ff:dc:
                    18:1c:a8:b0:de:4b:6c:94:8d:93:d2:7e:95:b0:b8:
                    c4:bf:f6:07:26:1c:2f:ca:d6:ba:26:37:59:0b:d6:
                    c5:25:2b:e8:01:a8:0c:38:05:57:15:a8:10:65:c2:
                    c8:50:6f:2d:4c:72:99:4d:67:31:3e:59:ae:73:45:
                    17:52:c4:4f:38:6d:a1:81:5e:19:69:21:6b:51:c5:
                    7a:6f:e2:cd:8c:3a:27:2f:e3:89:1b:aa:8f:2c:11:
                    29:5e:b4:5c:97:64:ba:02:e0:2d:ee:4e:87:1e:ff:
                    73:53:4c:df:35:34:68:d3:3c:b9:9b:20:d7:5d:cb:
                    d3:c1:80:82:81:f6:e8:76:e6:4f:12:cc:45:cf:4e:
                    74:1b:1d:01:62:5e:51:57:57:39:69:d2:50:8f:ae:
                    1b:0c:54:53:1a:be:a6:51:07:df:93:f9:9b:be:d1:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:68:C5:FF:19:64:CE:11:E6:40:B6:4D:90:95:EF:01:D8:C0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45c9f42d-1744-38a5-a9c1-0049cce877eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:7a:20:57:a3:ff:4c:43:94:5d:14:93:1b:fa:9e:41:c4:
         fc:9d:79:95:67:10:70:df:1f:64:06:92:25:60:8c:91:db:ad:
         44:c3:c8:7e:f6:18:85:b3:d4:a0:35:85:95:ba:5e:d4:35:ce:
         65:2f:04:45:8d:42:3b:29:28:e0:56:1d:d4:b9:2c:5a:59:74:
         44:ad:07:9b:18:ed:3e:f5:93:5e:de:b5:b2:90:6d:d8:b3:a6:
         1a:3e:25:d0:13:41:35:e2:21:89:6e:c7:bd:ff:84:f9:19:49:
         73:2e:51:bc:52:ba:8d:5b:02:4e:17:3e:12:da:f2:15:e6:cf:
         0f:bd:82:54:9e:4f:76:6f:90:64:25:7b:f5:e6:cf:f4:de:46:
         71:43:b6:ff:07:6d:2f:6f:9c:bc:7b:ab:1b:db:19:a5:50:7c:
         72:d6:b1:46:20:28:5f:4d:95:5c:2d:05:4e:eb:f3:33:8f:cd:
         cd:ff:7b:63:67:60:5c:15:4a:b7:cd:91:31:e0:33:e7:75:31:
         9c:9b:7b:4e:70:9a:2c:ca:7b:64:0e:27:cc:6f:1c:59:7b:4b:
         be:3e:8d:26:70:c4:25:dc:12:6f:02:75:a2:f2:ee:79:3a:62:
         69:51:09:28:5d:a9:5a:0b:ba:74:75:3a:0f:65:30:02:3f:af:
         48:e2:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----