Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cdffd1cd-f090-3be5-a6eb-cc8d937ed9c4.roa
File:                     cdffd1cd-f090-3be5-a6eb-cc8d937ed9c4.roa (raw, json)
Hash identifier:          R+A5GzW/pL9l2H/ddMGSuLBlV6xsOtTwQTb4+WDSQBk=
Subject key identifier:   EE:F6:6A:1B:7E:C7:EC:43:45:77:DB:51:3A:07:56:01:42:B5:4F:0C
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E191D3A256171C21A898C7F80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cdffd1cd-f090-3be5-a6eb-cc8d937ed9c4.roa
Signing time:             Wed 14 Apr 2021 18:57:06 +0000
ROA not before:           Wed 14 Apr 2021 18:57:06 +0000
ROA not after:            Tue 03 Sep 2030 04:00:00 +0000
asID:                     11404
IP address blocks:        66.109.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:1d:3a:25:61:71:c2:1a:89:8c:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 14 18:57:06 2021 GMT
            Not After : Sep  3 04:00:00 2030 GMT
        Subject: CN=37308800-2c6d-4a09-89fc-520eb6545512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:ba:e9:f4:5a:2f:e0:b3:b0:10:18:08:07:
                    11:cc:f2:56:17:8c:69:63:f8:28:6b:b6:41:f1:3d:
                    eb:a4:b6:ff:11:ad:ae:37:05:92:1f:bb:97:ee:e9:
                    99:f9:21:4b:57:97:82:72:65:f5:63:33:b7:fb:94:
                    8f:cb:9a:8c:3f:53:05:78:64:f4:68:98:3a:c0:bb:
                    d4:15:c4:b7:61:77:c7:72:12:f6:27:03:73:e1:29:
                    06:5e:7a:e3:df:83:08:85:e9:e7:3a:79:d8:a1:00:
                    87:ef:ba:c3:35:93:71:b8:35:cd:4f:1f:f1:fb:74:
                    2d:b6:2a:39:53:b9:63:81:67:8a:f2:76:5d:fd:38:
                    08:f4:5e:6a:e1:df:61:68:62:a8:b7:c4:d9:0d:05:
                    b8:c0:fc:64:b4:a6:c8:b3:25:6c:5f:7a:5b:42:07:
                    62:a7:e8:85:4a:a5:6a:35:2c:e5:d5:0c:f9:18:50:
                    87:00:7a:b0:c6:76:fa:57:18:83:54:30:83:1d:33:
                    d2:36:ad:d6:a2:26:af:b9:1d:6f:54:95:47:9c:82:
                    86:86:ae:2d:fb:1f:3d:40:c8:92:4c:2b:d9:d5:da:
                    df:8e:e0:e3:51:e0:cb:50:4a:d8:06:8c:17:d7:a7:
                    f1:bc:70:8f:98:14:2a:4b:b4:a7:05:81:25:55:77:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F6:6A:1B:7E:C7:EC:43:45:77:DB:51:3A:07:56:01:42:B5:4F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cdffd1cd-f090-3be5-a6eb-cc8d937ed9c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.109.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:0c:15:67:5d:74:6f:48:6f:fb:18:44:c4:0c:c3:fb:e4:
         32:b1:9e:79:45:04:2a:d7:6e:3f:fe:f8:a1:7d:81:79:bb:c9:
         50:9d:38:df:e9:23:78:c5:6c:c2:89:72:5c:cc:d7:e3:b4:a7:
         a6:a5:b0:2a:23:e2:bc:ee:74:e1:08:c1:a7:6b:e1:37:1f:81:
         6a:5e:4f:5f:fe:2d:7e:b4:26:a7:b3:77:da:bd:3e:28:5e:bc:
         5c:c0:37:bd:f3:8f:5b:77:70:77:9c:51:d6:81:b6:7a:33:b9:
         35:c0:63:3d:a9:ab:44:8f:b7:38:a7:88:48:b0:55:cf:7b:de:
         8d:23:80:68:52:78:98:cd:ee:94:46:e4:9a:0f:87:35:39:d4:
         d6:9b:4d:1c:86:79:f9:b9:ed:7e:11:63:91:30:a6:22:54:1a:
         59:37:d6:7c:96:ce:e7:69:2d:e5:55:13:f4:47:93:d6:c5:f3:
         e7:90:2e:f7:f2:03:77:b6:b6:d9:2b:74:f1:7b:f8:9d:51:47:
         18:b4:90:31:ca:a9:bf:9b:18:c5:f5:2b:8c:97:76:e5:a8:c5:
         a8:68:d2:35:cc:77:82:89:93:33:d1:76:9b:40:7d:06:1f:f2:
         fe:16:df:31:39:41:90:39:83:e6:fe:2c:65:3a:08:91:34:1e:
         e7:12:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----