Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd9050a2-6495-36c7-bda5-a6ad60bd98cb.roa
File:                     cd9050a2-6495-36c7-bda5-a6ad60bd98cb.roa (raw, json)
Hash identifier:          NJRc7gaaX/M/8jit+aoD7V/rMth3d8hwaZnRNWMbY8Q=
Subject key identifier:   B7:49:64:C4:64:48:7A:FA:88:03:A9:47:95:93:F8:F6:A2:65:86:F2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583EA4DBFE237E6AEDD85A677700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd9050a2-6495-36c7-bda5-a6ad60bd98cb.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 23 Oct 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        45.39.70.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a4:db:fe:23:7e:6a:ed:d8:5a:67:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Oct 23 04:00:00 2024 GMT
        Subject: CN=7aabd00b-7797-45a8-8738-bf7e19f27392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:1f:77:04:8c:5b:12:72:f6:fa:f8:fc:5f:
                    df:0c:55:4d:a3:41:77:ed:dd:ec:be:f4:8f:7f:73:
                    b6:36:d7:12:91:b1:e3:be:7b:72:c2:37:51:be:c8:
                    5c:ce:fe:9f:ab:a1:29:bc:49:8c:ea:bb:69:29:7c:
                    6e:f2:03:33:ca:3f:a5:e2:7c:53:b1:f1:f6:35:10:
                    bf:ea:ed:8b:c5:35:73:fc:a2:f3:83:0b:5c:4b:f5:
                    ab:69:9a:af:9e:d1:f4:8e:bf:1e:ac:8e:8d:61:fd:
                    6e:a1:c8:60:49:8a:cb:5f:f4:c0:f3:d5:9d:68:39:
                    9c:63:43:03:d8:fe:5b:a8:a9:7d:5b:34:3e:af:27:
                    d6:b4:f3:43:03:c5:18:cd:c0:05:59:53:c2:28:9c:
                    bb:e9:31:53:d0:6c:1c:6c:9b:63:11:98:f0:ac:98:
                    ef:7b:0e:84:ba:fc:23:e3:80:bf:c1:45:dc:1c:99:
                    f7:9f:91:26:b4:ce:e3:93:ab:c2:ab:90:e4:58:9e:
                    8a:a3:9b:d7:75:95:92:eb:59:82:21:79:16:78:6e:
                    09:1f:89:a0:80:05:68:26:68:5d:85:57:61:4a:63:
                    28:a9:b9:74:8d:f0:1e:93:e7:a2:94:ef:cc:11:ea:
                    64:a4:eb:9f:87:a1:77:d4:c6:94:d7:53:7c:a9:28:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:64:C4:64:48:7A:FA:88:03:A9:47:95:93:F8:F6:A2:65:86:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd9050a2-6495-36c7-bda5-a6ad60bd98cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:67:5c:29:5a:d2:b0:5e:c0:24:fa:1a:07:f5:c5:c3:76:
         d1:02:03:26:85:8a:72:04:9e:da:e6:54:b2:80:c6:99:30:6e:
         a3:fd:8e:94:14:9c:ea:0f:e2:66:23:8c:3b:ec:bd:49:55:2f:
         37:0a:2a:80:b5:b8:9e:33:26:4f:10:6d:e1:c2:d0:07:f4:0b:
         7b:e4:f0:f4:d7:b8:18:aa:b1:00:87:3a:a6:84:42:93:3b:13:
         af:44:52:8d:9a:67:2f:ab:85:12:fd:50:e5:48:68:49:5e:b4:
         69:27:1b:dd:3b:ee:20:2d:36:8f:d9:05:d5:57:5b:8a:3a:c8:
         e0:0d:03:09:3b:f5:45:b1:4c:2b:ae:0f:e3:76:1f:77:25:f5:
         b3:18:e0:33:02:c4:ae:b4:24:24:7c:28:6d:d8:8c:9d:0d:7c:
         1a:3d:10:ed:58:60:fb:56:62:00:37:d8:fa:5d:5d:32:35:52:
         c4:63:2d:62:46:62:7a:97:82:cf:57:2d:2f:02:45:1e:6a:1f:
         c0:5d:27:af:b7:ae:0d:7b:96:3b:9e:b4:8d:f0:5e:e0:47:bf:
         ac:13:75:8d:97:8f:d0:97:8d:73:cd:dd:f6:6c:b5:7f:be:a8:
         3e:11:1e:31:1c:d8:2e:55:f0:a1:10:14:21:47:60:3d:e8:e9:
         58:2d:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----