Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/9aabaf1e-d4c7-31dd-b656-d5ae6371feac.roa
File:                     9aabaf1e-d4c7-31dd-b656-d5ae6371feac.roa (raw, json)
Hash identifier:          bOFuTAbl2tuu7Y6yIpc1WEX9sW5Z86j4UqLRR+bK3iw=
Subject key identifier:   B6:64:E2:35:2F:91:63:A2:30:2D:1D:23:E7:D4:B2:08:B8:AC:DC:F9
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328583ED83F53EEE2125EAA1ABAE800
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/9aabaf1e-d4c7-31dd-b656-d5ae6371feac.roa
Signing time:             Thu 20 Aug 2020 16:04:58 +0000
ROA not before:           Thu 20 Aug 2020 16:04:58 +0000
ROA not after:            Mon 11 Nov 2024 05:00:00 +0000
asID:                     43350
IP address blocks:        204.11.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d8:3f:53:ee:e2:12:5e:aa:1a:ba:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Aug 20 16:04:58 2020 GMT
            Not After : Nov 11 05:00:00 2024 GMT
        Subject: CN=c417a555-dfde-498b-aea4-2b8de038d553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:da:83:a3:94:83:e3:9d:82:e4:76:4e:1c:
                    20:e1:f6:5b:e0:70:48:5c:15:28:cf:e0:62:00:66:
                    1b:96:c1:9e:7c:4f:d0:1a:87:44:81:61:8e:48:e5:
                    9e:d3:99:df:b3:8c:67:e0:37:9f:43:0d:7c:fc:1d:
                    aa:ad:fc:42:cb:2f:7c:00:ac:f1:69:a9:6f:67:d1:
                    04:01:67:0e:25:82:73:66:39:34:6c:56:c5:2f:56:
                    8f:5b:49:9d:68:71:34:96:45:1c:1c:4b:cb:31:9d:
                    9c:6f:1b:e4:f8:70:33:94:c5:92:e9:3c:83:bb:ba:
                    f9:34:1e:cc:fd:3b:ba:55:78:3f:5e:0c:88:2a:c9:
                    6a:bf:e8:fe:51:f3:79:18:d2:b1:6c:f2:5c:c2:09:
                    a3:7b:79:79:87:b3:b7:83:4f:b1:e0:f6:be:d1:fc:
                    19:95:68:af:75:6d:d3:ba:9b:c7:eb:d7:14:61:8f:
                    5d:2a:64:1d:76:e9:fb:3a:2d:39:75:5b:63:f3:9c:
                    a2:d8:22:e3:d6:32:42:96:4d:07:32:24:9f:f1:d9:
                    cc:36:54:b4:05:4c:5f:0e:96:c3:48:83:97:0f:8a:
                    c8:69:de:bc:58:c4:cd:94:93:f3:0a:a9:e7:fa:72:
                    49:db:47:04:b1:15:8a:87:f6:73:a0:1e:12:f8:e6:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:64:E2:35:2F:91:63:A2:30:2D:1D:23:E7:D4:B2:08:B8:AC:DC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/9aabaf1e-d4c7-31dd-b656-d5ae6371feac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:11:94:52:9c:95:9f:e7:b5:10:e6:85:e7:1b:30:cc:51:b0:
         7d:3e:2d:42:21:e1:91:2a:74:f4:05:aa:86:c8:6d:c0:5a:75:
         1e:6d:22:2e:b5:aa:81:2b:44:b3:d4:f9:3c:3d:5f:a0:3b:90:
         99:11:0b:51:10:6b:75:69:30:1b:c5:bc:06:95:88:4f:5f:44:
         ee:93:18:51:ef:ca:dd:c9:b0:95:ba:f0:a9:51:46:64:28:3b:
         43:96:28:b0:fd:8a:92:17:9a:35:54:20:09:d4:dc:4d:9c:44:
         85:5f:d3:56:93:41:9d:75:47:5a:8b:a8:35:6d:39:16:e1:b2:
         93:dc:97:c1:32:2b:d0:c9:48:80:d3:67:6d:e1:ae:40:67:29:
         56:5d:ef:0f:b6:9c:5b:70:93:63:62:e2:a9:0f:cf:ec:f6:34:
         fc:0f:61:2c:c4:f9:c0:15:25:8e:16:0f:9a:d5:7e:6b:f7:25:
         71:0d:7a:25:6f:11:e4:dc:77:77:59:41:c5:b8:9b:92:b1:f1:
         77:fa:c1:02:60:61:70:f2:f0:5b:7a:2d:d0:96:14:09:1d:c7:
         39:c3:16:1a:8a:63:5c:de:b7:4e:95:32:db:6a:2a:13:32:21:
         95:6b:3d:38:30:da:77:7b:72:d2:3f:bf:db:ca:ee:83:a0:d2:
         aa:23:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----