Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/873343d1-2224-3a21-87de-e4ccdef32bb4.roa
File:                     873343d1-2224-3a21-87de-e4ccdef32bb4.roa (raw, json)
Hash identifier:          44gg9at9yfVMKC7D2VGu/hIVTYOtExP83xdt8XYNsow=
Subject key identifier:   A5:5A:15:85:9D:18:5C:8C:C1:B6:AA:9E:C1:CD:33:8E:33:A7:9D:7F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285837AF87BD080E997D25852DF5A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/873343d1-2224-3a21-87de-e4ccdef32bb4.roa
Signing time:             Wed 21 Oct 2020 04:00:00 +0000
ROA not before:           Wed 21 Oct 2020 04:00:00 +0000
ROA not after:            Sat 21 Oct 2023 04:00:00 +0000
asID:                     36231
IP address blocks:        142.252.252.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:af:87:bd:08:0e:99:7d:25:85:2d:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 21 04:00:00 2020 GMT
            Not After : Oct 21 04:00:00 2023 GMT
        Subject: CN=8bcb88fb-3eb3-4093-b94b-3c8703f2d7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:95:17:0a:d0:87:13:b9:81:92:cc:27:3e:
                    9f:46:99:df:f6:b6:4b:49:d6:93:4c:eb:d4:1b:2b:
                    21:0f:ea:ee:85:78:4f:de:3c:2c:cc:a3:1f:06:f8:
                    22:c6:25:dd:ef:c5:6c:e0:59:64:d3:3a:7d:87:6f:
                    6c:d0:76:0b:3e:2a:0d:ec:b6:73:df:66:4e:e2:24:
                    17:cf:e6:db:0e:ca:1d:c2:93:42:67:d5:dc:16:6d:
                    74:23:4c:fd:a1:d8:9a:fe:57:55:30:bb:2c:4f:d5:
                    19:40:c4:b7:3a:17:37:60:3e:6e:61:79:53:f9:d3:
                    04:3c:3d:10:31:c1:84:af:f5:4c:a2:0c:1d:45:24:
                    45:77:29:12:8a:55:bb:1f:16:a4:75:b7:47:d2:0a:
                    ce:a6:2f:69:2a:3d:e1:aa:1b:dd:74:a8:57:a2:79:
                    25:d3:b5:da:70:7c:7a:fc:7e:bf:bc:3e:25:0e:ef:
                    ff:11:ca:a0:34:78:16:71:ad:3e:f9:9f:e7:5f:14:
                    23:ae:4e:43:04:2c:43:ca:ea:7e:04:4d:0f:f7:2f:
                    65:09:3f:f2:8f:8d:26:b2:0c:29:f5:8d:10:eb:1a:
                    5f:a9:7e:4c:1d:11:d8:91:93:93:14:33:f8:e2:1c:
                    e7:fe:3f:12:94:29:1c:71:cd:a7:88:86:f9:e2:4e:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:15:85:9D:18:5C:8C:C1:B6:AA:9E:C1:CD:33:8E:33:A7:9D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/873343d1-2224-3a21-87de-e4ccdef32bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:1f:6a:24:94:67:a6:cd:a9:07:1a:82:20:b2:a6:da:d1:
         53:72:59:1c:1e:9b:42:ba:c9:1c:c5:b6:72:21:9a:17:d7:19:
         9a:c4:e8:fe:3e:c3:7d:be:3b:9a:f8:7e:42:d9:65:20:e4:ad:
         31:2b:f0:81:ad:7b:f2:7b:a6:ae:63:45:c3:99:3b:11:b9:49:
         fd:a0:9b:d0:fd:14:82:4c:04:7b:73:fe:18:b3:a0:54:9a:ec:
         88:dc:07:da:c7:0b:84:fb:65:26:4b:15:96:f3:84:ac:52:d1:
         26:87:ec:bb:c1:4e:43:f8:58:7f:37:1d:24:e9:45:72:df:61:
         5a:6f:b6:ac:91:e9:19:e1:48:b6:5e:73:2a:58:08:4d:29:9d:
         a5:85:36:5b:54:59:e6:14:c1:c4:6e:46:5f:03:c5:1c:15:c7:
         2b:4d:76:d0:a3:01:53:37:e4:a9:f3:52:1a:78:6e:9e:6f:14:
         37:29:69:ac:71:05:fb:00:8d:bd:5b:8a:5d:94:f7:d6:a3:bb:
         e6:fa:e2:7a:ad:fc:bd:27:af:26:14:74:1e:c3:3e:8f:56:b4:
         c3:4d:c4:a5:05:75:91:6d:03:85:ad:e5:e0:fd:14:0c:f4:29:
         f9:4e:fc:be:b8:0e:9a:89:cf:91:53:58:7b:2c:3a:05:ae:8f:
         50:db:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----