Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/3e505d7f-7226-3a41-86e8-01c30586a3b9.roa
File:                     3e505d7f-7226-3a41-86e8-01c30586a3b9.roa (raw, json)
Hash identifier:          35OsRc/nZnrNcsAAW8vPIlMT3L7bcL8ZzmkzN6J8DEA=
Subject key identifier:   55:CB:5F:28:EE:A4:C5:FE:3A:76:17:DD:1C:FF:09:B8:2A:DB:27:A0
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328583A8250AAA3DD761A773C25FC60
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/3e505d7f-7226-3a41-86e8-01c30586a3b9.roa
Signing time:             Thu 20 Aug 2020 04:00:00 +0000
ROA not before:           Thu 20 Aug 2020 04:00:00 +0000
ROA not after:            Tue 10 Oct 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        64.112.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:82:50:aa:a3:dd:76:1a:77:3c:25:fc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Aug 20 04:00:00 2020 GMT
            Not After : Oct 10 04:00:00 2023 GMT
        Subject: CN=2e634984-1774-4e5c-9545-cd38b0fe7290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:dc:bb:ff:4e:29:40:ca:0a:e5:64:31:bb:
                    e6:eb:dc:fb:12:5a:46:6a:02:9c:02:f3:ee:0a:41:
                    ee:70:a9:c7:ef:06:83:c3:80:f7:39:9f:2e:28:3a:
                    18:44:0f:b3:06:05:3f:d5:a9:41:a5:80:93:c5:da:
                    44:4f:bb:45:31:aa:7b:a8:47:ee:00:df:f7:67:29:
                    eb:8a:72:ba:82:3e:0a:2d:a5:0a:9c:96:19:1a:1d:
                    21:10:1a:d3:f9:ad:b8:94:fc:cb:73:1b:ae:01:c4:
                    49:fd:87:54:c0:90:17:eb:44:d8:13:2d:39:6a:15:
                    0a:2e:1d:b5:a1:78:ab:81:5c:52:e8:8b:c4:ba:0d:
                    fb:ea:ff:23:ae:44:94:ca:7c:f9:04:0e:8c:50:b5:
                    73:ca:16:ea:62:97:0a:b2:30:d5:93:34:82:53:2e:
                    4f:ee:9f:ff:cd:7f:34:27:ea:26:89:42:13:f6:b0:
                    8d:17:c4:8a:3f:2b:70:34:19:6a:be:f7:02:b0:cf:
                    64:6f:eb:7e:ec:04:a6:ad:b0:09:32:0f:06:03:b6:
                    70:79:d8:59:60:25:2f:33:29:1e:bc:23:df:6b:43:
                    81:9b:bf:b0:03:6b:d8:d8:10:f3:b4:f2:00:44:be:
                    52:0d:25:71:37:c2:c5:30:3d:47:89:30:1b:73:60:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:5F:28:EE:A4:C5:FE:3A:76:17:DD:1C:FF:09:B8:2A:DB:27:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/3e505d7f-7226-3a41-86e8-01c30586a3b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:08:c7:5f:eb:46:51:d6:53:6d:5d:05:53:84:70:1a:4e:
         b4:64:62:f5:a5:2d:88:76:dd:e5:d1:e8:2d:d6:9a:e8:29:7f:
         75:00:4a:b3:b1:7b:0e:51:8d:7c:20:7b:97:04:29:83:a5:1a:
         06:a6:d9:6b:88:38:e4:18:19:25:79:e7:57:5c:30:f9:51:b9:
         2f:3b:6b:89:3a:f8:78:64:1b:86:5c:cb:2d:80:34:6f:63:1f:
         56:71:7f:3e:fe:39:15:6e:4e:69:2c:e9:3c:30:4e:4a:be:8b:
         6d:14:10:3d:98:a6:aa:db:29:f4:91:66:99:dc:5c:13:ce:b9:
         fa:2e:c6:44:dc:fc:60:8d:89:38:22:6d:83:34:42:5a:9d:08:
         10:c8:7e:dc:32:12:a5:98:0a:75:be:08:31:67:72:03:11:ad:
         27:2e:56:1e:1b:ba:f1:86:be:4e:0a:a0:6f:0e:19:06:e1:0f:
         8f:85:7b:4c:ab:18:60:50:fb:eb:c4:d5:95:74:db:75:65:4b:
         1d:0d:7a:2e:5b:f4:87:06:fe:c5:ec:98:71:aa:41:7f:ce:28:
         bb:ad:2e:a2:30:73:d8:e2:a6:3f:73:cb:77:1a:d5:6f:03:f1:
         f5:7c:d2:db:e3:d2:17:fa:3a:4d:f7:0c:4e:20:63:98:95:d1:
         99:24:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----