Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa
File:                     c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa (raw, json)
Hash identifier:          Ljk3EOoIHgL0bca8cOgW6AiZkd/wGda1Lz1fbp0bN1Q=
Subject key identifier:   11:34:DD:F2:3C:17:E7:76:9A:57:D9:5C:0C:D5:23:5D:FE:64:56:4C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583DF40D7E61CF816ECD76E9C500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     7922
IP address blocks:        166.88.173.0/24 maxlen: 24
                          166.88.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f4:0d:7e:61:cf:81:6e:cd:76:e9:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=2f527cf0-cac9-4610-9677-4e9fb746226e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:6e:9a:0a:d5:7b:f3:af:9f:a0:91:cf:86:
                    1d:40:52:e3:85:cc:49:d4:e4:bb:3b:1e:fd:ee:69:
                    aa:47:21:48:67:2e:79:4a:aa:a2:03:82:b5:6b:17:
                    f9:26:84:72:9a:f4:47:45:16:1a:f3:1c:c8:3f:b2:
                    e9:99:d7:c8:5d:47:09:fe:84:21:cb:09:a1:09:7d:
                    61:fd:83:fc:6a:a0:5c:39:22:fb:58:a9:4d:7d:13:
                    60:7e:9f:18:74:b1:0c:23:59:30:30:b5:e2:cc:0a:
                    f0:c1:88:a6:f1:8a:40:31:4a:e5:7e:4a:ff:6d:3c:
                    56:b6:97:15:db:fa:00:f7:49:f4:64:d9:5d:29:3b:
                    3d:a1:d6:ba:33:41:15:22:9e:7d:64:7a:1d:f1:1f:
                    b1:46:1f:25:c0:51:4d:60:2a:98:bc:5f:19:1d:5f:
                    4f:b5:0b:f7:9f:55:a2:1b:69:ea:c2:72:a8:95:0e:
                    0f:36:fb:45:6e:80:1d:8f:cc:ce:c1:3a:a8:ed:5d:
                    be:79:af:59:1b:ac:cd:b8:04:51:1f:1d:5a:35:7b:
                    3c:ee:ec:12:21:8d:aa:c8:0d:7f:32:7a:67:43:d3:
                    08:73:67:c0:72:d3:1d:c2:69:9b:bc:a7:de:cc:46:
                    cf:83:48:5b:73:b4:37:5d:01:86:f4:a8:b8:e0:ba:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:DD:F2:3C:17:E7:76:9A:57:D9:5C:0C:D5:23:5D:FE:64:56:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.173.0/24
                  166.88.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:95:0f:65:fa:da:ee:1b:13:9b:f7:78:cd:65:e7:91:c6:
         74:14:eb:9c:c0:da:db:5a:5f:8b:f3:e6:c3:0f:27:06:07:8f:
         76:14:c2:a8:af:56:f7:e5:47:d5:7f:7e:84:19:36:6e:f4:1a:
         4d:dd:17:47:89:29:9a:a3:c3:b1:26:a3:59:e0:19:29:c5:15:
         df:85:22:12:81:11:df:d8:f7:35:23:ae:d6:01:78:14:98:d7:
         a9:45:f8:d3:7f:d1:dc:e3:b9:c4:c5:11:42:6d:7b:a3:07:56:
         a5:74:6d:73:56:e8:75:0c:fd:2e:c3:5f:b7:76:60:62:06:c6:
         09:f0:61:5a:c0:65:0b:bf:53:b3:c6:54:9b:6b:41:d8:49:93:
         e2:dd:8b:f2:b4:a9:37:6e:97:30:c0:c6:80:e7:f7:25:21:3c:
         32:35:84:23:9c:94:ad:79:6f:81:c1:b5:7e:cb:db:4b:79:2c:
         fd:79:23:94:7a:bf:36:db:9e:8e:52:f6:a9:71:46:66:a4:33:
         01:83:c1:ac:1d:38:64:78:8d:8b:b9:ff:01:4d:2f:96:c5:1f:
         d6:97:d2:c9:66:36:59:59:96:5a:23:fe:47:fa:7a:60:e6:20:
         d9:cd:f1:e8:22:12:e8:63:af:b8:19:d3:1c:21:c8:08:9a:94:
         0f:78:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----