Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/0bd5bcbd-4dc6-3733-923e-86955c724e5a.roa
File:                     0bd5bcbd-4dc6-3733-923e-86955c724e5a.roa (raw, json)
Hash identifier:          i81S88cZNsN2RA78s2gmbtiAJpBFQjmL8BhlXcg5xK0=
Subject key identifier:   90:BF:79:36:AD:03:89:A9:E4:B3:0A:B8:CA:E0:A4:1B:03:88:0E:12
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858378405F1E02BC9490991301980
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/0bd5bcbd-4dc6-3733-923e-86955c724e5a.roa
Signing time:             Thu 01 Oct 2020 04:00:00 +0000
ROA not before:           Thu 01 Oct 2020 04:00:00 +0000
ROA not after:            Tue 23 Jul 2030 04:00:00 +0000
asID:                     62513
IP address blocks:        170.39.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:84:05:f1:e0:2b:c9:49:09:91:30:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Oct  1 04:00:00 2020 GMT
            Not After : Jul 23 04:00:00 2030 GMT
        Subject: CN=204ae961-f2f5-4d3c-9613-1b8bf3dbf568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:44:25:30:92:97:46:6e:9c:28:84:87:77:
                    8a:d3:d5:ca:51:85:a6:44:7d:5a:d4:c5:3e:94:eb:
                    a2:32:8d:8b:25:22:80:87:3f:23:b7:29:8e:30:c0:
                    91:c8:8e:b9:84:b7:30:62:3a:53:c5:4c:94:1e:6c:
                    46:f7:d0:75:72:db:ea:05:bd:44:d8:18:0d:d9:9f:
                    ae:ff:88:2e:f0:74:d0:5b:4e:57:15:8d:1a:b0:e0:
                    35:75:77:f5:fa:13:d2:e5:ce:19:2b:c9:eb:fa:c4:
                    86:45:ea:ca:81:af:06:fb:0b:7d:3b:1e:61:67:7a:
                    98:96:d7:67:93:37:14:c7:a1:48:ee:63:94:a1:57:
                    7b:4d:4b:d6:9d:de:88:d7:aa:5d:c8:19:a5:18:09:
                    57:64:7d:bb:22:77:67:21:d1:43:04:e7:e1:73:a9:
                    c2:31:a8:0c:83:9c:2f:80:55:72:80:c7:f7:f2:47:
                    a4:1d:a0:f4:12:5c:ee:2d:ef:35:77:0a:e2:6b:1a:
                    2c:6d:fe:6d:f6:53:c0:1a:bc:63:43:f9:27:12:e7:
                    05:35:4a:15:b0:ee:7b:60:84:3f:62:56:3a:83:31:
                    a1:de:ce:58:5e:de:9d:80:ab:b6:25:50:50:b2:69:
                    e0:4e:43:8c:5a:a3:04:b1:8f:ac:39:c6:d5:41:5e:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BF:79:36:AD:03:89:A9:E4:B3:0A:B8:CA:E0:A4:1B:03:88:0E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/0bd5bcbd-4dc6-3733-923e-86955c724e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:76:15:4d:3c:cf:dc:54:c0:c4:df:a4:d7:ab:ad:9e:e2:0a:
         06:0a:77:04:f4:7c:6f:17:fa:76:3c:19:e3:fa:3a:ab:a3:a4:
         fd:35:ce:be:ad:0b:7c:2c:28:c6:6b:4b:09:1d:23:3c:5d:5c:
         a8:4b:a5:74:63:9f:17:77:19:1d:96:98:97:76:22:db:f8:0d:
         eb:30:fe:3c:d3:d5:c7:7a:a3:81:cf:c4:10:b2:d2:29:f8:18:
         d5:f3:d1:ca:54:95:cd:3c:23:c5:0c:60:5c:94:8a:21:83:b6:
         50:13:29:51:4f:ce:01:7a:69:d8:9d:08:23:1a:9b:8c:72:2b:
         78:9a:d1:66:df:4f:84:07:e5:08:73:e7:e5:df:e8:23:2e:ae:
         bf:50:47:90:22:8f:96:9d:c5:03:2f:7f:ea:ea:08:50:e4:00:
         95:ac:ac:1c:c0:45:20:27:a4:a0:41:aa:7d:4b:77:a9:5a:ce:
         89:cf:ec:47:5a:39:1b:b9:86:51:cb:9d:7c:18:fc:a1:0c:dc:
         a3:97:8c:df:1c:c5:fe:3a:9e:7c:2e:9a:d8:dc:57:12:c4:89:
         8c:e0:5d:8e:87:62:83:0e:b7:ce:b3:4e:88:4a:f9:44:2c:99:
         bb:74:b3:f0:a8:dc:57:89:d3:89:3d:17:49:b0:e9:dc:c4:fd:
         50:9d:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----