Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/700ad9c9-e84c-3f52-b2ad-907382caa7df.roa
File:                     700ad9c9-e84c-3f52-b2ad-907382caa7df.roa (raw, json)
Hash identifier:          LhcsU0e2ZYFraExEFxLovKwZYicAwR/zlVq+iDF14MU=
Subject key identifier:   C1:59:1B:11:E7:E4:32:52:E8:76:C2:A2:77:32:54:82:DF:71:82:FB
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328576D51CC73C042CFC16AB202B11C
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/700ad9c9-e84c-3f52-b2ad-907382caa7df.roa
Signing time:             Mon 13 May 2019 16:24:42 +0000
ROA not before:           Mon 13 May 2019 04:00:00 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     397186
IP address blocks:        216.164.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:b2:02:b1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: May 13 04:00:00 2019 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=ea6940eb-b191-4973-9fe5-4576709dab46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:e0:02:a7:88:bb:9a:2b:50:ad:bb:96:9e:
                    02:b3:97:1f:e8:01:7d:2b:39:7b:80:f5:f0:73:66:
                    b5:fe:e9:7b:01:87:00:7a:48:7a:c4:a4:35:62:26:
                    4c:f7:7f:5b:16:e0:7f:9f:ae:87:bd:f1:18:97:b5:
                    24:9c:d1:f6:30:d6:53:a9:36:62:c1:23:ed:0f:38:
                    76:55:da:0e:a2:b3:a3:8a:53:a4:93:be:ea:ac:37:
                    11:dc:17:1e:1a:d9:f2:a6:80:7f:e7:d7:f7:f1:8e:
                    b1:ce:bd:c0:88:bf:07:37:6b:79:6a:e9:ae:7c:c7:
                    73:4c:4a:36:c1:6e:28:1f:5a:98:ae:0d:27:4c:bb:
                    f0:c3:f2:2d:29:4f:77:0a:af:73:95:98:55:55:ac:
                    69:67:e7:56:98:72:b3:67:8c:48:58:5c:5b:01:59:
                    07:69:f1:af:38:f4:cf:3e:59:34:8d:b0:25:a1:23:
                    90:4f:33:05:64:3d:66:8d:7e:b1:b1:dd:5d:ca:c8:
                    29:e8:bb:05:36:c1:0e:69:6f:c1:17:f8:76:49:e3:
                    50:0a:c7:36:d0:fd:92:4f:66:22:38:ea:11:ba:7e:
                    71:80:24:06:35:5b:fa:15:97:4c:9d:9a:61:50:ac:
                    fb:e9:3c:f4:f1:86:5b:73:15:ae:40:2a:88:db:9c:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:59:1B:11:E7:E4:32:52:E8:76:C2:A2:77:32:54:82:DF:71:82:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/700ad9c9-e84c-3f52-b2ad-907382caa7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.164.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d1:f9:cb:21:fd:43:81:77:f7:19:da:93:85:79:a9:73:dc:
         b5:78:3d:c4:a9:07:8a:33:50:79:74:b0:f5:9c:c6:1e:79:84:
         5b:de:8e:a9:0b:d5:c6:ff:a4:56:c5:3e:f9:33:3f:fe:0e:71:
         06:a6:a4:66:d1:cd:ac:38:ee:07:60:a6:57:69:ad:4f:ea:75:
         81:93:9a:be:80:41:3c:c5:be:c7:4e:6d:2a:e5:5c:95:11:12:
         b8:41:af:de:3a:0f:65:90:7d:cf:8b:19:d6:28:93:fa:f3:9e:
         bb:75:05:62:d3:8c:5c:03:ea:dc:b7:94:eb:df:6d:d1:6c:3e:
         9d:6f:7a:94:32:d6:67:02:fa:cf:50:7d:38:ac:ce:28:5c:e3:
         2f:aa:6b:8d:e9:10:02:d9:08:c5:3d:86:78:0d:c8:e1:e1:74:
         07:0d:07:23:c8:47:fa:fa:3f:a3:ba:7f:f7:87:60:d3:60:7d:
         65:77:49:cc:7c:13:06:4f:be:33:3b:69:f4:c3:06:af:cd:dc:
         6d:29:f9:ec:df:0d:6b:7a:6f:48:b7:d0:64:4d:35:53:3e:02:
         91:1a:24:13:b2:82:35:70:bc:42:65:27:8f:36:18:d6:15:49:
         2e:9b:ad:5c:3e:4b:d9:e8:b0:89:6d:d5:4d:7b:c3:17:a2:34:
         4e:b3:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----