Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86a0a7e9-9568-3072-b80c-a6f973f9e24f.roa
File:                     86a0a7e9-9568-3072-b80c-a6f973f9e24f.roa (raw, json)
Hash identifier:          sP9lY9JJYuyPeBpjpP32Tg5YYfBU7uOB71GJSTzr1c8=
Subject key identifier:   B8:5C:A1:9D:EC:B9:30:EE:0A:FE:46:30:A2:8A:2A:EB:84:81:D1:18
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584076AC23984824DD6D76810510
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86a0a7e9-9568-3072-b80c-a6f973f9e24f.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Tue 08 Apr 2025 04:00:00 +0000
asID:                     7922
IP address blocks:        172.252.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:76:ac:23:98:48:24:dd:6d:76:81:05:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Apr  8 04:00:00 2025 GMT
        Subject: CN=1e5ea752-340a-48c4-9e73-e5085335fbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:5a:25:4f:af:ec:16:a2:dc:29:a8:24:e1:
                    5c:71:d3:6d:53:bd:98:33:8a:63:b7:3a:ea:d8:77:
                    60:c0:ba:f1:50:07:ab:5e:42:5e:7a:2e:76:06:31:
                    06:8d:af:b9:19:48:de:a1:e9:0d:0c:6b:cc:1b:28:
                    5e:8e:4c:24:38:1b:14:88:b6:30:41:4e:c3:a5:ba:
                    e8:82:64:45:b6:3e:44:cf:86:f0:d4:af:10:8e:49:
                    53:48:73:13:51:8e:a2:8e:8c:b4:6f:26:f5:62:96:
                    4b:6f:72:ad:6b:3b:f1:e3:40:5a:c3:e0:15:f4:50:
                    13:9d:0b:83:6c:80:8d:48:b3:5f:5c:b3:4e:cc:c8:
                    aa:96:b1:4c:ab:37:ba:16:74:54:92:02:46:20:12:
                    fd:e7:ce:00:9c:4f:59:2e:28:c5:0b:2a:d6:27:fe:
                    61:1a:c6:a5:5b:10:b3:c4:3d:a9:37:42:cb:b3:96:
                    36:b4:58:2f:48:15:01:bc:15:77:b7:ac:2c:5c:fa:
                    74:9a:60:eb:75:60:9d:5c:03:80:a8:79:49:7f:7f:
                    12:21:f3:ff:a7:c2:dd:9d:67:ee:91:78:7e:53:ec:
                    6f:1c:2d:13:d7:87:2d:59:a4:f3:8f:a9:13:dc:f3:
                    72:11:b5:e7:15:9d:53:4a:00:ec:29:80:e8:5c:53:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5C:A1:9D:EC:B9:30:EE:0A:FE:46:30:A2:8A:2A:EB:84:81:D1:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86a0a7e9-9568-3072-b80c-a6f973f9e24f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d1:a5:e3:6c:4a:54:4f:cf:48:2b:31:0c:a9:f2:86:57:01:
         27:8e:9d:12:88:75:87:e0:14:56:a5:cd:9f:55:c2:fd:c1:99:
         8e:ec:c3:cc:5d:09:9b:a8:f8:9a:7b:38:7c:95:66:cf:55:23:
         1b:4d:0d:d8:37:79:35:5d:91:ed:ad:e2:98:9f:7b:ef:d7:c1:
         ca:e5:b0:b4:1b:89:c5:32:88:19:4c:ca:d3:88:39:ae:7c:07:
         58:6c:af:61:b4:3d:30:fa:72:0b:f6:09:74:09:5d:d3:bb:4b:
         96:a5:84:f7:b0:05:4a:66:70:b1:9e:8c:8c:34:c3:fa:56:ee:
         35:c8:c1:a1:cf:c6:ca:52:a0:1f:6f:6d:e4:03:d6:d3:19:f9:
         6a:33:f2:5b:04:70:5a:4c:55:e3:97:83:f5:89:9c:2a:32:41:
         70:eb:65:c0:43:27:db:87:f4:23:7f:e8:f7:54:91:18:3d:f9:
         01:a3:14:61:8b:f7:e6:e2:f1:63:7a:23:d3:6d:db:42:a6:e5:
         4e:4d:2a:51:24:dd:6a:8e:8b:de:52:e8:5e:d6:d6:5c:0c:03:
         34:c8:23:8d:8e:ba:91:ef:a8:b0:f1:80:57:f5:f1:2f:55:56:
         94:a6:da:a1:5a:34:11:eb:92:61:08:48:80:c2:a1:c2:21:42:
         76:57:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----