Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4239c069-124f-368c-96e3-9958c6cdad65.roa
File:                     4239c069-124f-368c-96e3-9958c6cdad65.roa (raw, json)
Hash identifier:          VY6aqV+o4paycpZacunGpz6qs6tg3GAVkpiQNy2A0/w=
Subject key identifier:   5C:6C:3E:01:3A:00:EE:4D:F2:C8:84:9D:27:C3:04:B8:FA:26:CF:92
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328583D43B3F626AEE7781B8192DF00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4239c069-124f-368c-96e3-9958c6cdad65.roa
Signing time:             Mon 16 Nov 2020 05:00:00 +0000
ROA not before:           Mon 16 Nov 2020 05:00:00 +0000
ROA not after:            Wed 19 Jun 2024 04:00:00 +0000
asID:                     211112
IP address blocks:        216.177.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:43:b3:f6:26:ae:e7:78:1b:81:92:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 05:00:00 2020 GMT
            Not After : Jun 19 04:00:00 2024 GMT
        Subject: CN=d8e58e07-8092-49ff-863e-09aca74bd130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:e8:9a:33:43:33:68:34:a1:4b:bc:b2:09:
                    b1:78:77:c5:79:47:c9:dd:62:47:31:1c:c6:bc:cb:
                    ab:21:01:0c:c5:16:85:f4:ce:7c:48:87:fa:5a:f8:
                    ec:b7:b1:f6:18:cf:90:c5:02:18:d4:5d:f0:ab:db:
                    74:cc:ba:b8:c6:36:ad:40:38:93:44:10:58:50:18:
                    1b:04:73:86:ee:46:14:ae:7e:0b:2c:ff:ff:88:2f:
                    ad:19:85:6c:3f:54:f4:6b:b8:85:e2:93:8c:84:9a:
                    75:1b:b2:5d:d0:b9:57:b5:5e:dd:3f:cb:d9:f1:9c:
                    6c:08:9a:82:c4:48:4d:52:8d:c1:9f:4c:a7:47:57:
                    e6:ad:a5:3f:fe:b6:71:95:ca:b2:18:1e:0e:47:c5:
                    e0:a6:0e:6b:dd:bb:e5:b0:a1:f2:e3:b1:db:c6:da:
                    69:14:58:08:ff:44:bf:da:ba:2c:aa:be:44:4f:87:
                    3b:9e:e6:53:43:55:79:d1:62:4e:5a:28:f6:f5:a1:
                    a9:2f:77:65:e4:36:26:f8:7e:f9:74:48:5d:d9:a9:
                    40:61:46:77:af:8d:02:58:32:33:cc:de:50:c0:73:
                    b5:83:bb:d9:33:24:d6:bf:35:8b:d8:7e:49:b0:e0:
                    47:85:97:de:15:8f:0e:d7:f6:2d:dd:06:63:71:47:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6C:3E:01:3A:00:EE:4D:F2:C8:84:9D:27:C3:04:B8:FA:26:CF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4239c069-124f-368c-96e3-9958c6cdad65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:e1:51:ec:cc:a6:fd:e1:ea:4a:44:7c:53:aa:05:28:59:
         cc:09:e6:28:8c:20:fb:52:a2:c2:f2:15:73:8e:dd:78:15:cf:
         de:95:e6:c2:b9:af:46:b4:11:65:56:d4:07:d9:da:89:31:bd:
         73:f7:90:00:2d:cc:df:3d:0a:f6:d4:a6:07:19:6a:0f:46:d1:
         0c:9b:22:ba:22:be:ec:f6:47:3c:4c:e5:23:b9:7e:c9:62:7c:
         08:2a:5b:83:37:a3:f9:bc:35:27:c3:d5:bd:2a:a2:38:77:94:
         72:08:3f:e1:16:5e:73:a3:8b:9a:09:0b:a1:84:02:24:e6:85:
         52:9d:3d:aa:7d:ab:af:ce:27:c0:34:72:9a:cc:30:e2:86:50:
         9b:9a:31:ae:02:ec:56:63:44:bd:d5:e1:4b:ed:3d:c0:f8:01:
         75:3b:c4:64:21:85:c5:1d:7d:82:8b:58:4c:7d:44:05:f5:46:
         08:7d:2f:0f:8a:ca:7e:2a:5a:4b:5b:f8:9d:2f:f7:49:ef:01:
         98:cd:f4:97:9a:31:2a:2f:a1:ec:e3:07:76:ae:51:b2:80:5a:
         0b:cd:a4:72:e9:25:bf:c6:83:26:fd:2c:4f:26:c8:80:28:a1:
         6a:2b:7c:9b:47:41:be:e6:42:1c:38:5b:f8:81:f2:b1:b2:f3:
         a0:4d:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----