Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8652df31-907b-390a-9ca1-7644e647239f.roa
File:                     8652df31-907b-390a-9ca1-7644e647239f.roa (raw, json)
Hash identifier:          9v4ftR8uO2NUOipUEAaRe71VZNbq3ZIdN6Y0i/DpWbE=
Subject key identifier:   A9:21:41:B7:90:01:1E:75:04:9E:96:94:8E:0C:C6:38:1D:04:EE:E2
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1949D0C988FDA944A1D774E0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8652df31-907b-390a-9ca1-7644e647239f.roa
Signing time:             Wed 14 Apr 2021 18:57:06 +0000
ROA not before:           Wed 14 Apr 2021 18:57:06 +0000
ROA not after:            Tue 03 Sep 2030 04:00:00 +0000
asID:                     11404
IP address blocks:        208.52.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:49:d0:c9:88:fd:a9:44:a1:d7:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 14 18:57:06 2021 GMT
            Not After : Sep  3 04:00:00 2030 GMT
        Subject: CN=47c78508-e419-4522-ae3d-6b4d1ea4b63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:2e:3f:b1:e6:d5:21:4a:57:f4:87:0b:39:
                    3d:9c:64:5d:d1:99:93:ce:48:5c:ad:5f:64:69:73:
                    27:07:50:e3:62:3b:f0:6e:b5:b4:e1:a5:f4:93:dc:
                    05:68:d9:58:01:2e:e5:e8:c6:c7:19:cd:28:30:74:
                    83:a5:3e:88:33:13:55:f4:42:a5:77:1d:e7:0e:f8:
                    d6:da:2b:d9:64:2a:0c:bb:7a:4b:f7:8f:78:0e:e9:
                    37:61:69:e4:cc:0c:0a:ec:48:93:0b:ef:79:69:39:
                    af:ea:85:93:ca:21:3c:a5:01:d7:13:70:c7:9f:e8:
                    93:6d:e3:0e:4c:69:3c:d6:00:5e:b9:b8:b7:74:c1:
                    85:df:20:04:ef:68:2d:e4:eb:3f:db:76:b0:18:e0:
                    35:c7:7a:a9:bf:af:7a:ff:d7:04:c1:a6:f3:1c:fe:
                    e4:05:eb:c3:28:2c:9f:6c:cf:f3:67:d6:95:80:01:
                    ab:ce:53:bb:b9:2a:f3:a4:cd:e6:1d:5b:d7:b0:40:
                    f5:53:11:31:a9:84:e6:16:47:a5:23:0c:6c:28:43:
                    70:c1:0a:17:7e:da:ce:b3:46:a1:2b:bb:17:c8:8a:
                    ff:3b:1d:99:a7:d8:9a:26:1f:43:bf:75:ed:5a:ac:
                    69:4e:c9:62:e5:fe:56:5d:0e:d4:d7:73:83:18:1b:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:41:B7:90:01:1E:75:04:9E:96:94:8E:0C:C6:38:1D:04:EE:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8652df31-907b-390a-9ca1-7644e647239f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:45:f3:fd:3d:35:1d:5b:fd:75:aa:50:58:d9:fc:3a:0c:
         66:21:18:b1:1f:d4:3d:01:c1:d3:09:dd:6a:5e:5b:56:60:d4:
         da:c2:fb:78:b2:d9:49:c4:f4:a6:3f:a0:72:93:fc:5a:aa:3a:
         fe:3a:10:9a:f6:ce:fb:60:4f:31:d3:e1:26:d8:3c:41:7d:6f:
         d6:bb:c0:51:da:e0:9a:3f:03:5a:ad:c2:7a:f7:0f:49:47:74:
         4f:0d:c1:16:15:93:d4:86:c7:2b:69:92:32:ad:97:82:8c:54:
         f1:e2:76:a8:e3:f6:e9:c1:eb:df:fb:69:42:3e:6e:19:59:0e:
         1e:59:28:b3:25:c2:34:84:d2:f6:5d:cc:1f:f4:de:86:2a:3b:
         d2:d2:41:65:37:40:f4:e2:f5:84:73:f1:85:45:51:c5:24:3b:
         8c:64:c3:5b:58:70:7d:a9:0f:6a:ee:71:36:79:ec:19:76:8b:
         ea:b3:15:5b:2f:e2:f8:78:2b:dd:0e:00:c3:d9:24:c8:22:ab:
         e8:fb:18:76:46:34:1a:cf:a2:70:e4:47:b1:ab:36:92:dc:bd:
         6e:6a:1c:70:b2:ca:a0:fd:01:01:bd:85:0b:21:3a:bc:ab:1d:
         be:8c:c7:71:e5:3f:84:09:56:c0:a2:ce:97:b2:ff:71:5d:83:
         0e:d2:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----