Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c69a2591-5395-323a-8964-2824812a604a.roa
File:                     c69a2591-5395-323a-8964-2824812a604a.roa (raw, json)
Hash identifier:          KrCbHHY5meSSGhCLvvmWGdYgXkPM8iNTmUJA3inWdZ8=
Subject key identifier:   25:8E:95:F6:E3:87:5B:81:BC:87:AD:77:D6:5E:98:2E:FB:F5:E0:1C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858416D087E001EDDD391045A8330
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c69a2591-5395-323a-8964-2824812a604a.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sat 05 Jul 2025 04:00:00 +0000
asID:                     54252
IP address blocks:        205.164.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:6d:08:7e:00:1e:dd:d3:91:04:5a:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul  5 04:00:00 2025 GMT
        Subject: CN=a9c9e9cf-2c23-402e-adb0-611a6f943817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:ae:03:23:92:5a:4b:77:bf:54:0a:50:6f:
                    62:d8:bc:33:9f:2c:a0:53:0c:36:83:0c:d7:4e:2e:
                    e4:5f:04:9f:1b:8d:8e:b0:79:86:8e:fa:de:cb:ac:
                    e8:d3:84:e2:1c:d8:eb:75:af:3f:e8:15:81:3a:e9:
                    12:5f:a1:12:fa:04:0b:c7:89:1e:85:44:ea:a4:00:
                    76:79:e2:47:ab:db:3a:8a:43:8e:07:89:51:31:dd:
                    09:2f:af:ba:b0:a5:15:aa:9d:f5:d1:d7:5c:03:6d:
                    74:70:ea:02:ec:4d:0b:60:b3:ee:f4:1e:c6:4c:8a:
                    b7:e4:61:6a:c9:40:cd:4c:c0:ef:6d:94:94:7b:88:
                    28:9c:fa:e3:ae:d6:c5:cb:e6:06:a6:72:68:f0:7c:
                    b9:db:8c:5b:fa:f8:27:2b:76:3c:6e:70:39:3c:84:
                    18:d7:31:53:a9:42:89:b0:09:59:49:65:53:4f:4e:
                    f0:37:7e:64:0c:81:73:40:4e:ba:45:3d:0a:9b:31:
                    a5:f9:a4:19:12:3a:05:06:5b:ee:a7:82:b8:f4:66:
                    24:c0:89:3d:be:56:bb:41:40:2d:2f:fc:f5:18:49:
                    e8:01:b2:b1:36:78:b1:03:52:18:33:ec:48:41:5e:
                    7e:a7:50:54:d9:2f:ef:23:63:2c:c4:b6:5d:80:63:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:95:F6:E3:87:5B:81:BC:87:AD:77:D6:5E:98:2E:FB:F5:E0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c69a2591-5395-323a-8964-2824812a604a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.164.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:6b:91:d3:d5:d0:67:06:b1:9d:bb:02:58:fd:0e:51:de:
         98:73:62:36:5d:97:c0:8d:3d:b3:07:0d:ed:d3:13:41:31:fc:
         b7:a3:d5:2e:4d:ac:ee:5f:b6:82:d3:90:24:1b:fe:d2:af:2e:
         66:f4:ee:7e:bf:21:6b:b7:3b:58:a9:b4:d4:4f:7d:03:0f:52:
         3e:3f:58:07:6b:1a:f1:7e:2d:f3:e0:dc:5c:0e:da:9e:fc:d0:
         aa:38:ca:8a:ee:a6:cd:74:22:79:5c:be:3c:4d:18:64:7f:dd:
         ff:02:94:0e:7d:c1:85:f6:c0:a3:97:45:5c:08:12:c6:85:85:
         94:db:57:51:f7:38:41:eb:22:74:06:7d:75:58:cf:ea:27:7d:
         fe:7e:3a:aa:69:f9:cb:dd:21:8b:01:60:14:ba:fb:95:1a:02:
         b6:bd:aa:4d:9d:84:d4:0a:76:c2:a6:0b:5d:4d:9b:dd:cc:1b:
         04:02:e9:76:ef:d2:ce:78:be:25:08:b3:29:14:ac:e3:a2:84:
         28:9b:a8:22:48:f6:d7:bb:f2:c9:45:7b:2a:60:1d:db:37:c5:
         47:7a:57:fa:c5:57:22:f8:24:44:e4:bc:e5:07:9a:b9:53:05:
         35:13:0e:78:39:62:62:2b:ae:b2:99:b2:d2:d3:a4:88:c3:b2:
         0a:ee:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----