Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9c2d194-5a49-3f96-8a6d-fb053750e50b.roa
File:                     e9c2d194-5a49-3f96-8a6d-fb053750e50b.roa (raw, json)
Hash identifier:          qqrc0hPT9Ms6n18pq4g81wQLe2Cmb/qF/Zii6icdJwA=
Subject key identifier:   9C:4F:B2:B0:43:F0:DE:2C:8B:08:93:53:A8:3D:63:46:52:C3:34:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584009EE2115B90A0D1F6CC9B680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9c2d194-5a49-3f96-8a6d-fb053750e50b.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Fri 28 Feb 2025 05:00:00 +0000
asID:                     1239
IP address blocks:        107.164.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:09:ee:21:15:b9:0a:0d:1f:6c:c9:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Feb 28 05:00:00 2025 GMT
        Subject: CN=843af6df-8d97-43d2-a0c2-c68885b2de4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:32:9b:00:33:c4:49:4d:bf:e3:ee:51:37:
                    1f:64:28:76:10:38:e1:0a:c9:41:6d:0e:f7:51:99:
                    02:ba:28:07:b6:b1:91:1a:ef:9f:93:bf:db:8d:2b:
                    65:42:1d:6d:45:87:d8:26:87:b5:90:c8:9a:19:ce:
                    47:d3:fa:74:10:89:3a:13:a9:d3:94:a9:af:a0:9e:
                    f5:4d:d4:b6:60:fb:2c:56:3b:d1:9d:05:61:c2:91:
                    86:6c:51:c7:fc:ad:2b:3e:22:9e:88:67:a0:87:e7:
                    36:f3:d0:78:f2:fc:f3:f4:47:2a:d4:43:17:a6:51:
                    ce:8b:6a:cb:cd:af:8f:44:5a:dd:2d:c0:4f:9e:43:
                    b4:08:42:1f:32:ab:5d:36:e9:2c:d8:d9:d9:4b:c0:
                    7e:da:ed:74:97:ca:67:03:f3:9e:25:a4:9d:31:7f:
                    c1:fb:5b:5e:aa:16:c1:08:98:58:84:e9:a5:d7:16:
                    43:52:79:88:8d:b0:8a:1e:e2:a5:72:ae:de:5d:58:
                    99:07:a6:2d:ed:2b:ef:35:96:ec:7f:d8:b2:a1:32:
                    b5:1f:b6:cc:9a:3b:6b:46:fe:4d:47:28:46:e3:7a:
                    33:0d:91:80:bf:d4:40:75:3f:d4:4a:36:ef:02:ca:
                    d7:c0:ef:98:c4:63:a1:bb:62:e7:59:db:7f:2f:70:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4F:B2:B0:43:F0:DE:2C:8B:08:93:53:A8:3D:63:46:52:C3:34:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9c2d194-5a49-3f96-8a6d-fb053750e50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:3b:d7:19:a5:1c:45:90:e1:74:47:55:7b:af:04:c4:6b:
         2e:78:c3:36:80:d0:13:93:06:0f:bb:61:de:22:c4:66:a3:ea:
         0f:4e:7b:6c:41:6c:40:5f:20:88:3e:82:3a:2d:58:be:7f:63:
         51:cc:67:70:e5:fe:6a:28:fa:e4:f5:70:89:e4:0a:1d:c3:6a:
         e1:93:4f:69:ed:04:98:8e:a7:7e:72:0c:48:68:1a:86:1c:35:
         94:f9:9d:e9:d1:63:37:74:53:e7:72:d5:7a:27:4f:d9:ce:56:
         65:42:1b:54:2a:69:c5:1c:5a:cf:8d:d3:da:9c:a2:33:1c:3c:
         53:19:0e:19:83:e2:73:d6:c2:6d:e2:4e:b2:b2:27:f0:40:00:
         4b:ad:13:d3:b4:fa:c8:9c:71:24:ee:1e:d1:d2:c0:a1:ef:e8:
         7e:56:0d:a1:2a:4a:81:81:84:0a:a6:0c:12:d7:d2:ed:4e:9b:
         a7:ea:5e:b8:ff:95:0d:79:77:83:3e:2c:9e:5e:f3:17:5b:f7:
         9d:13:51:25:b5:1c:f1:30:e4:a2:74:8e:ed:bd:56:b6:d2:70:
         6e:28:64:b7:d7:b1:8b:0c:3c:12:14:33:ed:49:81:ae:6d:12:
         4f:63:f2:29:ca:b3:c2:2b:80:94:c3:4e:5f:7a:90:82:69:47:
         98:a2:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----