Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/45eaf858-f8f7-3dff-b1bc-7a14e5993f33.roa
File:                     45eaf858-f8f7-3dff-b1bc-7a14e5993f33.roa (raw, json)
Hash identifier:          nTuTs/ZWDt1ahyM8t9Spndwt8YIkTXhxGHrHOv1Gqgc=
Subject key identifier:   85:32:6E:AC:74:55:FA:E0:78:15:10:26:BC:04:62:DA:D4:37:71:91
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328583F3E688802C1FEE85C541E4F00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/45eaf858-f8f7-3dff-b1bc-7a14e5993f33.roa
Signing time:             Mon 24 Feb 2020 17:38:47 +0000
ROA not before:           Mon 24 Feb 2020 17:38:47 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     13760
IP address blocks:        216.170.85.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:68:88:02:c1:fe:e8:5c:54:1e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 17:38:47 2020 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=bf32d5df-870e-4461-85ba-c3a78928bce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:34:89:1f:91:8c:a9:7b:a7:8c:9a:5e:ae:
                    51:10:b4:96:89:fe:f7:da:c0:42:e8:63:73:5b:f4:
                    89:67:b4:9b:8b:8f:26:f4:bb:d6:59:b9:2b:12:0f:
                    1e:07:9f:3b:0c:fe:b9:8f:8e:ce:d8:e3:27:42:25:
                    5c:84:6c:6a:ed:04:22:85:3d:4b:de:2b:ea:14:75:
                    fd:c7:c7:57:66:2c:38:2b:40:89:fd:5d:1c:c2:79:
                    18:bb:01:5a:47:1d:2a:24:2b:28:d3:7d:5c:4a:39:
                    ef:d2:08:05:ef:15:4e:8b:79:f5:51:0c:49:dc:7b:
                    95:c7:bb:a3:e2:67:70:f4:87:1e:17:1a:93:df:5b:
                    22:df:8d:27:48:ee:dc:45:e2:5d:8c:2a:d4:7b:ec:
                    1c:71:3e:a4:4b:2f:ae:ff:32:f2:27:fa:13:dc:b0:
                    43:fb:71:de:b4:b5:71:94:8a:4c:00:8f:2f:c0:6a:
                    3a:16:72:01:12:87:c1:e0:f8:4d:70:fe:8c:e1:d7:
                    6e:0f:cf:05:19:93:79:32:4a:9a:3a:af:89:b0:d5:
                    40:ab:65:65:90:54:8e:4d:77:db:0b:0b:b8:09:c4:
                    04:64:63:af:13:7a:e5:be:9b:a9:4e:1b:81:49:93:
                    38:83:d7:ed:34:61:2f:97:ef:fa:cb:ab:81:47:57:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:6E:AC:74:55:FA:E0:78:15:10:26:BC:04:62:DA:D4:37:71:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/45eaf858-f8f7-3dff-b1bc-7a14e5993f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:c3:5e:56:c2:b4:8b:34:dc:37:d3:04:6f:8c:1e:69:c2:
         21:df:b6:78:0a:08:f2:f5:84:0e:f0:97:ba:81:ae:37:53:6c:
         b2:73:ca:28:17:28:e1:b8:5e:6c:3b:cf:02:ae:14:39:78:1e:
         7d:20:cc:60:66:f5:80:f4:2c:79:65:13:f5:4b:fc:d5:2b:5b:
         24:d6:6e:73:8c:41:6f:4e:2c:b8:fd:01:ad:b5:8b:a1:34:5c:
         97:1d:11:2c:2b:75:a5:81:42:01:f4:bd:d2:be:72:74:af:20:
         58:e8:93:e7:49:8e:d8:3a:fe:d7:08:65:24:60:8e:e0:2d:39:
         6b:cb:3e:1b:cf:7b:8b:49:c3:42:f6:9f:c9:ee:d8:83:f3:28:
         b7:3c:ff:b6:d2:c4:7e:06:a4:dc:2b:53:13:ca:84:ee:3e:38:
         dc:98:ac:39:e3:6f:50:de:93:42:11:07:16:24:62:2a:3a:0a:
         c3:cd:f6:f6:62:08:e1:cf:4a:c8:65:da:a5:ef:93:81:eb:28:
         44:fa:79:e5:96:43:1c:b3:27:82:cb:d4:29:ea:8d:36:5c:e1:
         48:c1:e3:3a:99:c4:25:39:32:b6:f1:e5:33:98:3f:95:48:c6:
         dd:52:56:fc:f5:e6:2f:24:a3:3c:f0:6e:ef:ed:e7:11:bf:e5:
         95:d5:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----