Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/19c231f2-1764-3d09-be1a-6d744cdf1a3b.roa
File:                     19c231f2-1764-3d09-be1a-6d744cdf1a3b.roa (raw, json)
Hash identifier:          waUjJU4WgH0Vcx0Hi7g5ABvYalDapC5pN9hcj3/ItbQ=
Subject key identifier:   93:C0:CC:58:8F:A0:48:D6:8D:CD:68:52:98:6F:E0:67:27:05:0A:C3
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328583C2C98AC1094F35D525F95EC80
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/19c231f2-1764-3d09-be1a-6d744cdf1a3b.roa
Signing time:             Mon 18 May 2020 04:00:00 +0000
ROA not before:           Mon 18 May 2020 04:00:00 +0000
ROA not after:            Mon 11 Mar 2024 04:00:00 +0000
asID:                     19905
IP address blocks:        66.180.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:2c:98:ac:10:94:f3:5d:52:5f:95:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: May 18 04:00:00 2020 GMT
            Not After : Mar 11 04:00:00 2024 GMT
        Subject: CN=7c187ed6-14a3-476e-91fb-3550cb47a6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:35:85:88:90:1d:c1:ea:c0:80:43:92:5b:
                    cc:83:79:a5:f2:07:43:2d:0f:fe:15:5b:12:8e:8e:
                    86:99:b8:f9:b5:85:1c:52:8e:28:7e:f5:b7:80:33:
                    c2:a7:fe:32:2f:96:06:23:cc:41:14:e8:09:ae:7c:
                    a7:1d:89:42:cf:59:73:61:29:6d:ba:37:1b:0f:61:
                    2f:28:84:87:99:e8:64:83:e6:e5:d5:d5:98:76:1c:
                    24:1a:17:75:e6:dd:08:cd:ac:96:27:86:90:e3:57:
                    12:b0:20:77:5f:db:34:ea:f6:49:3d:c7:ad:75:de:
                    0b:55:f4:ce:14:18:b4:b0:95:b7:74:cb:89:0e:9c:
                    a1:11:46:31:ad:e3:df:76:25:d6:b0:44:87:2a:4b:
                    9b:44:3a:a7:6d:37:fd:8d:19:d2:36:84:fc:4d:9c:
                    1f:b7:85:d9:fa:61:40:7d:04:ac:97:57:fc:bc:4c:
                    6c:55:e5:c3:1b:d2:74:7d:72:25:f6:22:1d:88:fe:
                    e2:60:6a:34:79:20:04:35:cf:ad:2f:64:f2:4d:62:
                    2f:49:a0:de:ca:bd:66:bc:59:98:43:c3:b3:7d:c8:
                    59:ac:99:1c:44:70:98:cd:e2:ff:a7:f5:00:2e:34:
                    81:16:ed:fc:0b:4a:02:0a:3d:1b:ca:66:80:cf:08:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C0:CC:58:8F:A0:48:D6:8D:CD:68:52:98:6F:E0:67:27:05:0A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/19c231f2-1764-3d09-be1a-6d744cdf1a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:58:61:6d:1d:43:97:aa:e2:4a:a3:c6:ff:57:ce:d8:eb:
         b8:53:7b:1a:42:2e:83:61:a6:44:12:ac:1b:ac:2f:96:bf:a4:
         67:b4:6d:d2:35:a9:d2:fe:a1:23:78:aa:b3:1c:e6:d2:76:75:
         40:73:5e:28:86:4b:66:58:4c:ad:9b:3d:16:c8:8e:8a:8d:ea:
         ae:15:5c:8d:bc:e8:a0:dc:a2:95:c4:c7:a1:9a:d7:d0:97:57:
         1b:78:70:30:f2:e9:a6:74:bf:a4:a3:14:c6:fe:e9:99:19:d0:
         1d:ac:08:f2:16:30:c2:6d:8c:73:a6:54:0a:0b:a4:26:d1:b7:
         b6:3c:52:01:95:84:3f:31:d9:55:36:8c:df:22:b9:e2:48:15:
         b8:9e:22:9d:bd:0e:9c:40:b4:5a:df:6f:45:59:41:a1:92:29:
         55:f9:63:5b:43:18:39:1e:34:06:12:4a:da:71:85:3d:5e:5c:
         2d:d6:67:ec:2f:e5:f0:c2:b4:28:41:2b:d6:12:ee:f6:20:ca:
         27:d4:7b:82:6f:14:cf:b9:67:cb:b4:bd:1b:52:d6:07:1c:89:
         b9:db:5f:2e:f8:8a:9a:40:c6:df:da:71:0e:de:a5:c4:a6:cd:
         af:78:c2:84:c8:fe:1d:ef:cb:4a:fe:36:ca:53:5a:be:6a:fe:
         31:bf:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----