Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/96ac9f49-dafc-3486-9abb-1465e5520f5f.roa
File:                     96ac9f49-dafc-3486-9abb-1465e5520f5f.roa (raw, json)
Hash identifier:          bnBHrj5CglQRNoPk1vZkuZgRrtLepNpzS6GdpM13ZGM=
Subject key identifier:   49:11:EA:36:C6:91:D0:86:EB:36:A5:69:69:8E:02:E4:1A:D7:61:29
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328576D51CC73C042CFC16AB200E7E1
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/96ac9f49-dafc-3486-9abb-1465e5520f5f.roa
Signing time:             Mon 13 May 2019 16:22:44 +0000
ROA not before:           Mon 13 May 2019 04:00:00 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     394966
IP address blocks:        207.172.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:b2:00:e7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: May 13 04:00:00 2019 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=5ec3daf3-e707-4018-b284-4a45f21d8d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:fd:14:27:4a:89:78:4b:7c:2a:b7:9b:d3:
                    55:4c:ac:87:d3:44:30:5d:aa:48:5e:cc:4d:a0:30:
                    bc:06:8c:b0:f7:f8:a3:8d:cb:58:69:66:5b:48:1d:
                    35:79:33:df:9e:4b:3d:aa:2e:1f:1e:fe:73:ed:28:
                    09:98:63:6a:5e:03:5f:f2:07:3d:a8:0d:3f:23:44:
                    39:67:82:ce:78:5d:5e:85:1c:71:37:4e:ac:65:ba:
                    73:a0:57:63:61:dd:ab:c7:fd:ea:e5:55:95:c9:dd:
                    a2:6f:e0:ca:22:55:06:8f:c8:be:7e:3b:0b:ab:ba:
                    f5:23:45:bc:f4:7c:ed:a4:7d:de:4a:ef:72:ef:35:
                    b0:05:5d:97:e3:06:ad:6e:ab:f6:2d:ad:a6:ea:90:
                    e7:19:e3:ce:47:c3:c9:56:bb:bb:89:b9:d7:21:1d:
                    a3:53:0c:71:6b:cf:1a:61:60:f5:f4:2e:b2:d6:8c:
                    91:3c:36:ab:c7:fb:a8:b8:d0:d5:d4:20:df:57:84:
                    f1:fc:30:fd:74:35:fd:fa:9f:5b:a8:90:f1:64:76:
                    3d:14:c7:40:08:71:48:4d:de:a1:1e:5c:1f:4a:24:
                    2e:89:df:d8:7b:9d:29:18:c0:a6:49:37:69:11:02:
                    1d:35:c4:da:8e:b7:d5:7e:60:94:4b:76:5f:f2:5d:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:EA:36:C6:91:D0:86:EB:36:A5:69:69:8E:02:E4:1A:D7:61:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/96ac9f49-dafc-3486-9abb-1465e5520f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.172.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:81:d8:25:28:f5:55:df:fa:1e:b0:5e:8e:bb:e7:36:44:
         c9:f0:af:a5:0d:eb:01:94:2c:7c:8e:e5:6c:9f:6c:da:95:4a:
         0d:4d:ce:35:3b:ee:23:55:58:79:e2:43:f2:8e:72:e3:39:4a:
         6a:67:9b:72:9a:ba:2d:5b:07:52:db:88:b0:55:0e:d4:89:c4:
         42:7b:4e:88:90:ba:d4:8c:66:8b:40:37:9b:d0:72:1f:e7:89:
         e6:66:4c:03:9d:29:84:7e:7b:b8:8e:ef:4d:83:d0:b2:e4:cc:
         ea:a7:a3:63:e4:18:70:51:0e:26:2a:84:62:7d:bb:c2:5a:e4:
         32:78:af:45:04:91:84:c9:11:f6:ff:05:9e:f2:6b:2f:b0:76:
         21:2a:c1:dd:21:f9:05:c0:97:10:19:63:65:01:57:5f:a6:6b:
         fa:cc:1d:29:54:f4:4d:53:bd:af:5a:d4:99:a3:f1:35:6a:b2:
         0b:a3:df:32:a2:49:95:7e:f7:7b:7b:8e:91:68:60:8c:04:75:
         78:e8:80:87:de:c5:42:e0:1a:7a:39:a3:cc:e8:ca:fd:8b:a8:
         47:f2:12:d8:ca:19:ae:16:0b:49:b7:27:dc:7a:af:a7:20:9d:
         b4:f8:7b:f8:2a:61:75:16:28:8c:15:f8:7e:83:d1:4d:3d:d1:
         fe:b0:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----