Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/e03325c3-0850-3ada-8976-8e7d84d95452.roa
File:                     e03325c3-0850-3ada-8976-8e7d84d95452.roa (raw, json)
Hash identifier:          uMcgp+sr9Alx73xywDPbrhUBdEwCOsi1uh3+GnbJ3tI=
Subject key identifier:   2B:66:B2:E0:B3:24:4F:78:A3:CB:60:40:71:14:DE:BB:1B:46:13:56
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E84E8A16
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/e03325c3-0850-3ada-8976-8e7d84d95452.roa
Signing time:             Wed 24 Jun 2020 21:49:20 +0000
ROA not before:           Mon 11 Mar 2019 04:00:00 +0000
ROA not after:            Sat 10 Mar 2029 05:00:00 +0000
asID:                     394574
IP address blocks:        199.27.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Mar 2022 17:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:4e:8a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Mar 11 04:00:00 2019 GMT
            Not After : Mar 10 05:00:00 2029 GMT
        Subject: CN=f62c52d6-2d27-4366-a2a2-8b8a23a18364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:15:8a:2b:91:2d:8f:70:75:2e:d4:02:fe:88:
                    8e:c8:20:4e:80:eb:94:27:ce:99:06:e6:71:71:bd:
                    2d:be:29:94:3f:d0:69:9c:95:6f:ef:4b:7c:84:47:
                    05:d9:1d:e2:92:20:4c:88:fb:db:b5:63:48:93:ae:
                    8b:dc:d8:16:00:85:c3:f6:f4:61:2d:41:28:18:19:
                    dd:07:b4:2a:c0:c5:61:f4:ce:c4:07:15:4f:1a:6e:
                    67:15:3e:f4:39:92:42:f7:0d:60:2f:5e:9f:44:94:
                    fc:e9:df:12:5d:c7:1c:bd:f3:23:c7:c8:7e:60:a4:
                    f5:b4:76:3f:e1:b4:7d:4f:c4:9e:15:75:1c:91:57:
                    a6:3b:54:93:55:03:80:ff:45:2e:b8:bb:16:96:2d:
                    0e:40:74:36:34:33:9b:c3:6a:1e:2e:91:60:1a:8f:
                    fa:ee:28:14:93:f8:a6:ce:ee:a4:fd:04:b4:33:3b:
                    c7:63:5c:19:59:69:1b:95:de:a2:23:6d:75:c2:ae:
                    fb:01:0b:ce:2e:81:c7:c1:c3:00:44:1f:e5:56:3e:
                    b5:37:ae:71:6d:29:45:2e:14:68:9a:2c:5e:ea:41:
                    31:ee:74:2f:21:5a:fd:ac:15:91:1a:b9:58:b9:e6:
                    94:de:77:87:0d:8d:1a:14:1c:4d:ec:4b:87:3d:60:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:66:B2:E0:B3:24:4F:78:A3:CB:60:40:71:14:DE:BB:1B:46:13:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/e03325c3-0850-3ada-8976-8e7d84d95452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:c9:14:46:55:4c:a5:35:28:a1:f8:cf:f1:49:a4:94:2a:
         e6:5d:92:68:82:c9:5a:dc:03:80:fd:42:88:17:75:21:5e:3a:
         1b:04:d7:ae:24:a5:15:3b:48:9f:ee:f5:df:23:4b:23:81:a8:
         11:60:53:44:a2:0e:dc:c0:f8:3f:fe:92:03:3b:ed:f5:89:23:
         99:6a:13:0d:f6:9e:e4:18:2a:6e:26:04:32:d4:8f:d3:3b:2d:
         ea:8a:03:8b:6e:d3:1e:ce:8c:8c:a8:70:e9:29:38:48:39:ec:
         b1:3b:47:56:60:ae:85:5a:14:95:75:aa:84:e3:da:aa:8c:aa:
         c8:99:13:07:73:0b:63:60:93:dc:30:19:af:27:6c:0b:d1:10:
         cc:f4:4e:4d:f6:5f:e5:c9:e7:c0:0f:0b:36:2b:a5:b4:ab:98:
         be:1e:47:d1:9f:54:37:85:f8:69:8c:1f:ec:ad:3f:f8:fd:39:
         86:5e:9f:81:1f:11:1d:3b:2a:b3:a3:cd:2b:ea:6e:c0:db:b6:
         04:f7:ec:98:86:eb:58:a0:92:f5:fc:95:39:80:a7:e1:90:43:
         12:a2:9b:f0:2b:d5:ca:a9:dc:56:31:f6:c4:51:5c:86:55:b0:
         3e:a0:d4:14:8e:a1:43:30:0e:3f:69:70:4e:ff:51:7f:b9:d7:
         f4:8f:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----