Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/6d63b16b-d5dc-343f-abe1-bee622e9f67b.roa
File:                     6d63b16b-d5dc-343f-abe1-bee622e9f67b.roa (raw, json)
Hash identifier:          PdLF+9QYu3CCzlIgEZ4V/F2EZkgV01uOI1qvp+MAE90=
Subject key identifier:   80:56:8D:90:C1:67:39:5B:5A:74:21:CD:78:D5:0E:CE:E3:89:76:B0
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285840713CCEE59ABEFED0049F1B00
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/6d63b16b-d5dc-343f-abe1-bee622e9f67b.roa
Signing time:             Mon 10 Feb 2020 18:18:36 +0000
ROA not before:           Mon 10 Feb 2020 18:18:36 +0000
ROA not after:            Sun 06 Apr 2025 04:00:00 +0000
asID:                     210439
IP address blocks:        68.67.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:71:3c:ce:e5:9a:be:fe:d0:04:9f:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 10 18:18:36 2020 GMT
            Not After : Apr  6 04:00:00 2025 GMT
        Subject: CN=b9e9101f-2aae-4473-8e8b-f7a358810b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9c:2f:34:36:a8:82:ae:25:5d:b6:c7:41:4e:
                    bf:b2:75:ad:c5:7a:9b:02:26:dc:81:d5:96:60:ae:
                    1e:6f:b9:85:d5:0d:c3:28:87:a5:7f:9b:83:f5:37:
                    be:b9:bf:1d:1e:d8:f8:43:c5:00:29:46:41:cb:29:
                    6d:36:cc:43:d0:91:4f:04:6d:5f:88:70:24:b8:3b:
                    ac:35:97:94:c1:db:33:5f:05:22:5c:9d:e2:35:94:
                    c9:51:b5:97:dc:47:f8:81:93:a7:8b:8c:bf:60:c5:
                    c6:40:2c:72:b1:1d:98:22:07:e7:89:87:9c:46:a2:
                    d5:38:ec:d1:c1:24:7a:1b:96:6b:ed:25:9a:71:dd:
                    6f:c0:e1:af:1c:de:b6:23:52:d9:9d:7c:04:ef:05:
                    1b:71:05:9a:d9:63:68:8c:6c:dc:52:28:17:dc:bd:
                    ac:1b:01:b2:ab:ad:a2:0b:91:e1:e5:c3:87:10:ce:
                    e2:70:93:05:37:aa:92:a3:22:25:67:53:28:08:49:
                    14:5a:45:88:3c:04:af:97:d9:50:05:f7:78:62:22:
                    13:e0:84:52:5a:67:1a:30:cf:34:de:3d:63:0c:29:
                    77:55:87:c4:73:48:e1:6b:3f:6c:89:3a:4f:1d:52:
                    62:48:dd:4a:ba:37:0a:28:07:53:76:e3:4d:d8:02:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:56:8D:90:C1:67:39:5B:5A:74:21:CD:78:D5:0E:CE:E3:89:76:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/6d63b16b-d5dc-343f-abe1-bee622e9f67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9e:1b:f3:28:2e:e7:1c:87:60:0e:aa:25:23:0d:49:1d:97:
         b7:2b:3d:d6:82:9f:19:86:7e:04:1a:b5:a0:c3:01:0f:3c:3a:
         02:60:8e:26:1a:78:4e:3d:37:66:e4:70:0f:b4:9d:f1:07:65:
         44:f7:a7:60:0c:2a:28:05:f2:67:20:b1:64:c9:ba:dc:b5:63:
         37:41:da:a6:15:8a:6d:05:e8:ba:d0:fb:d2:c6:c8:d6:30:7c:
         01:51:c2:19:50:89:73:49:74:a1:30:72:0a:58:31:e3:74:a6:
         31:69:55:b2:19:32:8f:27:37:f2:97:bf:87:c3:81:45:6f:00:
         1c:30:2e:18:ac:cc:75:58:35:20:64:1f:82:13:7e:cb:73:e9:
         4e:54:86:9d:15:f4:c6:7a:29:f5:9b:13:3b:87:76:f5:8d:fc:
         05:3c:e6:09:ff:a9:39:ad:3b:3d:58:dc:73:ec:22:48:93:e8:
         92:b5:08:71:5e:5e:1b:d8:60:3a:24:2c:e9:04:3f:99:ca:7c:
         40:6a:88:c1:10:da:a9:45:fc:f0:2c:c4:ba:d7:a1:b5:4b:70:
         c1:95:b1:ad:ad:8c:74:b1:42:40:7a:cf:27:d9:6e:a2:75:2a:
         bf:f5:c9:27:09:07:df:df:02:4b:d7:ef:5a:18:bc:18:6f:7f:
         89:7d:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----