Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/0dc562bc-f16c-37e8-8cfc-e8aaddec7733.roa
File:                     0dc562bc-f16c-37e8-8cfc-e8aaddec7733.roa (raw, json)
Hash identifier:          JBw2bepl45QlRPNCsgvX8+ftsRkobGzC3AwF8rjAxMg=
Subject key identifier:   15:6B:D5:02:A2:56:26:53:B8:A9:4C:CF:6E:B4:68:68:2C:51:C4:41
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328583C84485F3C1F1F001798A8B180
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/0dc562bc-f16c-37e8-8cfc-e8aaddec7733.roa
Signing time:             Thu 20 Aug 2020 04:00:00 +0000
ROA not before:           Thu 20 Aug 2020 04:00:00 +0000
ROA not after:            Thu 11 Apr 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        165.140.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:84:48:5f:3c:1f:1f:00:17:98:a8:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Aug 20 04:00:00 2020 GMT
            Not After : Apr 11 04:00:00 2024 GMT
        Subject: CN=21b34723-165b-492b-86b8-29dcf62980ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:c6:10:fd:a1:a0:e2:ac:cc:e3:ce:59:7d:
                    38:fe:1a:0e:37:0e:07:68:0e:66:3a:36:bb:ed:f0:
                    04:19:ea:2e:b6:06:38:33:18:b1:0a:b6:7a:37:95:
                    12:cf:5c:03:81:f8:30:4c:74:1c:a9:4f:e4:f8:56:
                    87:16:83:8f:49:04:58:d2:30:97:bb:18:25:b3:be:
                    fe:a2:20:4f:46:2d:b0:48:74:40:2a:9f:9c:09:7c:
                    4e:d0:5b:68:77:c9:06:fc:47:e2:04:72:fd:c7:79:
                    30:ce:9e:42:5d:f9:2a:a8:bc:f1:b4:a2:f1:20:83:
                    dd:6f:0a:b1:f2:2b:7b:23:60:a7:8d:1f:2f:69:3d:
                    02:bd:dc:22:66:2b:f1:cc:98:0a:64:55:9e:94:02:
                    09:c3:f8:8b:d6:45:96:12:5c:10:f0:78:2e:ad:70:
                    1f:38:8e:17:67:df:7e:28:0a:17:e6:82:d0:f5:5a:
                    90:0e:93:49:d2:0a:7f:70:5d:75:a3:82:ae:f3:f0:
                    4d:dc:0d:45:d4:48:3e:40:4b:5e:7d:0c:87:49:39:
                    8d:56:12:27:c4:d2:50:3a:e1:cc:f5:4a:2b:3f:8b:
                    8f:30:b4:cd:8f:07:44:4b:03:43:48:92:56:3f:b5:
                    7d:89:56:59:eb:7b:93:0b:76:c2:0a:64:e6:b7:df:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6B:D5:02:A2:56:26:53:B8:A9:4C:CF:6E:B4:68:68:2C:51:C4:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/0dc562bc-f16c-37e8-8cfc-e8aaddec7733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:b3:95:cd:ed:9f:e1:61:11:b7:0b:74:b2:5f:31:c0:1d:
         bd:77:35:e6:f4:44:48:b5:45:03:a3:97:53:3e:bd:d3:eb:83:
         db:ce:b2:79:8c:3e:1f:20:c4:e1:49:b5:8c:8f:97:65:79:29:
         75:51:20:4f:e8:cd:8d:a7:9c:4a:d0:ce:d9:1e:8f:0a:02:19:
         73:58:68:51:da:e1:3f:da:8e:4e:db:03:be:c3:4d:8c:db:b0:
         05:87:de:3a:7b:ce:5e:ac:5c:c1:2e:4c:61:60:c7:1b:dc:39:
         96:04:da:06:27:9c:e9:ba:ea:a0:19:d7:95:31:a3:66:c2:d3:
         6f:9e:3a:5a:45:9a:3c:e3:f1:dc:4f:ec:ab:b4:d9:7a:48:c9:
         7f:60:a8:00:86:33:06:c3:75:87:d5:ee:f6:7c:a3:d8:70:ef:
         8b:e2:cc:c0:ae:99:96:34:66:f3:e7:23:8d:a2:9a:9b:90:e3:
         67:ce:17:38:d9:49:2d:f5:27:f8:d9:4c:30:a1:f0:83:a7:c2:
         f6:f0:0f:28:7e:d1:64:9c:17:f7:fe:01:0a:95:a2:1e:d1:6c:
         12:79:1d:a6:6f:9e:7c:b9:58:78:e7:f5:1a:9a:9d:d5:2a:e9:
         f3:0b:ef:9d:b0:79:cc:a8:ac:64:20:83:6d:cb:44:d4:39:96:
         7f:5c:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----