Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/305153bf-a1b4-3277-8ae1-670277e92695.roa
File:                     305153bf-a1b4-3277-8ae1-670277e92695.roa (raw, json)
Hash identifier:          QQWyn9q7g7b3qhfiGYElWd4Bf4d145cNoRUpjDfdH84=
Subject key identifier:   DC:30:8E:67:4E:00:3F:46:8E:D8:C9:3C:D9:1E:32:BA:4C:3D:E9:F2
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328583FCB86D074123E0C1B1CDD0080
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/305153bf-a1b4-3277-8ae1-670277e92695.roa
Signing time:             Mon 16 Nov 2020 14:57:09 +0000
ROA not before:           Mon 16 Nov 2020 14:57:09 +0000
ROA not after:            Thu 06 Feb 2025 05:00:00 +0000
asID:                     61138
IP address blocks:        216.185.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:86:d0:74:12:3e:0c:1b:1c:dd:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 14:57:09 2020 GMT
            Not After : Feb  6 05:00:00 2025 GMT
        Subject: CN=11da209d-1893-4cf9-b6c7-3694674687ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:99:26:e1:6a:ee:b7:cb:6b:6c:1f:40:15:
                    b2:7c:ab:60:80:5e:e1:4c:ec:d9:2b:bf:60:77:1c:
                    1a:87:1d:63:bf:75:8c:8b:56:57:cf:fa:9a:25:4b:
                    02:61:9f:9b:05:e9:82:c4:99:ba:27:a5:28:fa:2c:
                    b7:cc:03:e0:b7:07:e3:02:98:ec:f5:0d:24:82:86:
                    64:db:98:7f:f9:a7:9c:04:85:14:82:39:53:7d:02:
                    74:05:ab:7e:ed:af:12:a1:f9:1e:5e:11:e9:af:49:
                    38:a3:96:15:a2:7d:f4:13:5e:96:b8:c6:19:01:94:
                    5d:c0:41:fa:95:87:f1:d5:4c:d1:da:23:4f:04:96:
                    2b:06:18:92:2a:63:eb:81:60:b3:86:43:71:04:24:
                    2e:bd:9c:cc:f1:f3:4e:51:7e:73:e1:78:07:58:37:
                    84:cc:ec:0b:e0:63:e1:58:b1:15:c2:93:6d:0e:fa:
                    5f:3b:08:75:6b:f0:38:30:f3:4f:18:76:0a:c1:0b:
                    45:b9:6c:4d:e5:5d:5d:88:38:e9:70:10:69:1b:ac:
                    78:39:25:da:92:33:bc:9a:2b:a7:03:92:08:e7:40:
                    b4:5a:0e:ca:5a:73:da:75:1b:10:84:f4:42:df:86:
                    86:b3:ce:df:09:14:4f:2a:3f:c3:1e:b8:1d:71:6f:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:30:8E:67:4E:00:3F:46:8E:D8:C9:3C:D9:1E:32:BA:4C:3D:E9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/305153bf-a1b4-3277-8ae1-670277e92695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:18:8d:d4:fd:75:1b:8c:c0:8e:8b:fc:b5:73:80:4d:39:
         18:c0:3f:0f:62:e4:86:fa:39:10:da:50:89:33:7d:bf:61:29:
         df:2e:96:4a:f4:1e:4f:77:e8:23:07:cc:c4:ef:49:5b:bb:b3:
         44:b8:32:04:cf:36:05:d6:4d:29:52:bb:b6:bf:f0:67:bb:e0:
         74:c3:cb:2e:89:79:cd:03:22:a2:e1:10:77:25:46:34:87:2a:
         0c:88:5c:89:a4:a8:0e:94:51:ae:80:d4:24:0a:e3:bb:05:2c:
         9d:b8:bc:30:d4:b8:50:e1:54:75:7a:cc:10:08:6e:88:6e:86:
         2a:fa:9f:9c:c2:7a:ca:f8:d1:eb:6f:0f:04:3e:2d:d1:62:61:
         7b:17:17:02:c6:2a:0e:54:71:a1:95:9b:2a:2f:77:6a:c3:93:
         f5:31:e2:ae:79:35:5d:2d:71:eb:67:d3:b6:bf:c7:ec:47:8d:
         1f:0e:31:74:0a:fc:87:a6:e8:a6:04:0e:0d:e9:59:df:c1:10:
         e1:14:a0:c6:3c:ad:a0:af:64:52:c6:a1:7c:f7:e3:04:c7:d8:
         1d:f4:4f:08:6d:8c:e2:d8:51:61:69:7b:aa:40:c1:21:ff:ad:
         30:34:dd:ec:eb:ca:16:2f:eb:45:1f:56:53:23:d6:09:ae:3b:
         5a:b5:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----