Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/1356d9d4-3988-3d29-9d26-472eee7e5d2c.roa
File:                     1356d9d4-3988-3d29-9d26-472eee7e5d2c.roa (raw, json)
Hash identifier:          OGPGFrkGY9puXYa2i+YKHR1ZBp7s7NzhMYGmu/XsXbM=
Subject key identifier:   E9:57:D3:0D:DA:A1:9D:40:C0:EB:46:0A:77:11:0F:8A:A6:59:A8:10
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328576D51CC73C042CFC1696E014C27
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/1356d9d4-3988-3d29-9d26-472eee7e5d2c.roa
Signing time:             Mon 11 Mar 2019 18:26:12 +0000
ROA not before:           Tue 19 Feb 2019 05:00:00 +0000
ROA not after:            Mon 19 Feb 2029 05:00:00 +0000
asID:                     2381
IP address blocks:        2001:4e0:1010::/44 maxlen: 44

Validation:               Failed, certificate revoked on Mon 25 Jul 2022 14:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:6e:01:4c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Feb 19 05:00:00 2019 GMT
            Not After : Feb 19 05:00:00 2029 GMT
        Subject: CN=474dd27c-8737-4a86-a76c-0744f2256916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:c4:f4:6d:67:59:49:b3:90:bd:19:2f:63:
                    1d:84:fe:ff:5c:18:c5:9c:4e:96:d7:f0:90:72:f8:
                    f1:52:09:c2:d8:2f:88:e5:a8:33:3c:3b:ca:fb:39:
                    e3:89:39:b5:bd:4c:56:ee:0a:84:78:27:1d:5d:c2:
                    56:ab:1b:2a:6a:ca:f4:ec:9e:35:15:c8:68:20:7e:
                    24:08:8b:27:05:8b:09:13:79:9c:d2:0a:11:0d:5c:
                    19:8e:9b:c1:1f:ef:e0:55:a1:aa:d6:f9:2e:87:ea:
                    59:b7:30:04:5b:63:cd:5a:63:e2:9f:8f:48:ec:b4:
                    a5:f7:7d:b1:6a:9b:5e:a4:c4:05:07:9e:f1:2d:25:
                    99:39:24:11:50:4e:15:b9:0f:b0:83:74:f8:b5:8f:
                    ff:49:d4:82:9a:2c:36:ac:cc:35:38:38:a8:d3:61:
                    7c:65:e6:fe:a5:5d:23:4e:17:01:3c:5b:56:4b:bf:
                    03:09:a8:86:d2:76:0d:2e:57:c7:6f:4f:3d:10:77:
                    41:46:16:0b:de:48:ee:f1:dc:e7:83:cc:97:d2:bf:
                    1f:70:0c:2d:27:27:ea:bd:03:1d:ea:32:01:b4:66:
                    d4:4d:63:04:ce:68:7a:1f:96:5d:df:41:ab:5a:b8:
                    3c:38:60:9d:b3:5e:e1:2e:16:a5:3f:8d:dc:8f:74:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:57:D3:0D:DA:A1:9D:40:C0:EB:46:0A:77:11:0F:8A:A6:59:A8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/1356d9d4-3988-3d29-9d26-472eee7e5d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:91:7f:88:e4:fe:d9:a7:32:ab:c7:e5:b0:1e:7b:17:d1:75:
         1d:14:de:11:19:6f:5a:06:e3:ae:0b:86:41:b9:ab:7f:9d:21:
         17:2a:1c:57:5c:34:5a:3b:db:93:d0:1c:a5:81:05:36:cb:35:
         46:f4:74:64:a4:0a:7c:a4:56:20:91:96:ed:5f:97:8c:24:5b:
         c8:72:e9:06:11:b7:20:91:a0:6f:fb:40:c0:6f:00:60:d6:1f:
         75:fd:e1:55:cd:84:65:7b:08:6e:9a:bf:71:92:1b:41:35:f9:
         97:d3:48:f2:98:aa:f4:38:ba:e1:df:c8:05:8c:20:db:c5:99:
         c2:c4:06:ff:6b:17:8f:a9:a1:bb:1b:3d:8a:df:26:73:e3:1e:
         9d:95:d8:8f:1d:cf:95:4d:0b:c8:48:29:da:97:e2:36:1e:c0:
         c3:0b:56:df:b3:e9:ac:37:3c:b6:fa:c2:f1:ab:07:c8:5d:12:
         62:ea:ff:be:3a:c1:4a:df:59:6b:07:cf:4a:43:aa:7a:5b:ca:
         78:e2:fe:94:41:93:aa:fc:3d:ea:6c:b4:dd:07:7b:77:42:ec:
         b4:7f:c4:15:fd:27:d4:f5:59:30:75:a0:7c:65:57:30:8c:4c:
         04:e9:67:a0:a4:63:2a:62:72:07:f1:49:89:bb:0a:ef:56:84:
         90:1f:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----