Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/2095745b-be24-3138-9ba5-91a0ea21f17d.roa
File:                     2095745b-be24-3138-9ba5-91a0ea21f17d.roa (raw, json)
Hash identifier:          5gysjirV882JUdw8X/GpfaZqVhM3nVXdv2kryBVVpUQ=
Subject key identifier:   99:06:45:C2:51:05:52:13:A3:30:AC:5F:F6:2E:15:06:66:2F:5E:9D
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328583DF275C0964ECF0C9900D9F280
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/2095745b-be24-3138-9ba5-91a0ea21f17d.roa
Signing time:             Fri 25 Sep 2020 18:17:59 +0000
ROA not before:           Fri 25 Sep 2020 18:17:59 +0000
ROA not after:            Wed 21 Aug 2030 04:00:00 +0000
asID:                     400384
IP address blocks:        173.249.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 28 May 2022 18:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:75:c0:96:4e:cf:0c:99:00:d9:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Sep 25 18:17:59 2020 GMT
            Not After : Aug 21 04:00:00 2030 GMT
        Subject: CN=3fa9276b-4fe6-4c58-91e8-c2647535a4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:1e:0c:cd:20:fa:8e:07:21:d2:f2:7c:c2:
                    bb:62:0f:f8:06:d5:2d:2a:aa:ff:2c:60:33:d5:28:
                    11:71:d9:ac:e8:4a:f6:87:40:22:09:31:ec:80:f5:
                    3d:c4:b5:ec:85:b5:d5:13:e8:e2:82:4a:35:26:cf:
                    74:45:2a:57:aa:b3:c3:35:7f:5a:cb:8d:54:e6:cb:
                    20:f1:68:aa:a8:6c:69:65:86:45:69:13:75:fb:ae:
                    ce:0d:c9:f9:65:9d:d3:96:3d:24:86:57:36:4c:df:
                    09:74:48:f7:19:3e:39:da:23:aa:1b:81:59:fd:99:
                    72:b6:d3:89:f3:79:29:22:38:9e:4a:c0:aa:00:24:
                    4b:c5:68:90:eb:57:2f:08:1b:c1:96:ec:8f:44:f5:
                    8f:92:da:ac:f1:95:3c:af:16:a5:0d:48:9e:14:7d:
                    06:d1:e2:1e:91:7e:b7:e7:2c:3e:b5:32:b7:6f:6d:
                    57:95:c8:0d:02:0b:ac:f4:9e:51:34:1e:cc:3c:2d:
                    0f:9c:d8:00:46:cc:7c:56:19:42:b4:f9:4f:10:19:
                    ce:dd:64:08:6a:38:39:03:c7:13:dd:5a:c7:d0:f2:
                    9b:42:46:93:15:c1:d1:49:e5:c9:ab:4b:e9:62:90:
                    ae:b7:0f:59:f9:b0:95:36:12:8f:ee:b8:8c:fe:d1:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:06:45:C2:51:05:52:13:A3:30:AC:5F:F6:2E:15:06:66:2F:5E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/2095745b-be24-3138-9ba5-91a0ea21f17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:95:f2:a8:54:f8:68:0e:f8:36:d1:db:74:b4:51:21:7f:
         e8:df:db:3d:46:cf:ab:2b:5c:33:97:f1:cc:90:70:d0:c8:45:
         8f:0c:f4:62:eb:49:25:3f:60:6f:77:75:8d:c7:07:d6:ab:e6:
         c9:1c:56:0c:c6:ad:ad:5f:0c:a5:73:ba:29:e9:3d:43:cb:61:
         14:a6:40:4b:38:5e:38:19:c4:03:d5:e0:4f:a6:d3:20:bd:cf:
         28:2e:b2:fe:8b:65:b4:72:84:d0:6a:f3:46:74:9f:19:32:b1:
         32:f7:1b:05:dc:09:2c:24:d7:9c:2d:e5:7f:6d:95:83:9c:da:
         9c:8d:7a:01:53:60:42:9d:fb:9a:0e:59:ad:e6:4e:cd:2f:8c:
         36:78:78:44:52:9c:29:66:e6:fb:2f:a3:c1:56:88:58:92:73:
         63:04:67:d2:ab:5b:1c:02:d7:dc:64:92:41:78:98:38:cd:2a:
         e9:1d:f0:77:78:b9:3c:c5:5d:5c:7b:c0:af:25:8a:94:07:c3:
         ae:94:78:33:b2:b3:fb:c9:de:ed:47:7f:b1:cb:3e:aa:a0:cd:
         be:d6:8f:ae:46:44:fc:42:7c:85:47:4d:ba:5b:e2:cd:a9:d9:
         da:34:e9:db:e6:57:95:53:6b:2d:a5:90:4f:86:e4:f1:62:f2:
         20:a3:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----