Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/56ec3aa1-510b-39a5-8b65-e697c1ff41cc.roa
File:                     56ec3aa1-510b-39a5-8b65-e697c1ff41cc.roa (raw, json)
Hash identifier:          qDs6pfpeBEaRjgNCjGWhU48Gj2TbhhVh9BHHniUxRi8=
Subject key identifier:   93:0E:97:29:37:A5:CD:11:2E:BE:6F:A6:9A:5B:29:90:DA:FE:0C:0E
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328576D51CC73C042CFC168E89869C2
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/56ec3aa1-510b-39a5-8b65-e697c1ff41cc.roa
Signing time:             Wed 13 Feb 2019 20:42:09 +0000
ROA not before:           Wed 13 Feb 2019 05:00:00 +0000
ROA not after:            Tue 13 Feb 2029 05:00:00 +0000
asID:                     803
IP address blocks:        216.197.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Wed 30 Mar 2022 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:e8:98:69:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Feb 13 05:00:00 2019 GMT
            Not After : Feb 13 05:00:00 2029 GMT
        Subject: CN=c842d7da-1276-4365-a473-265dd7feb176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:a9:2a:be:81:cf:73:b4:d5:77:81:a6:d5:
                    f4:e1:60:55:85:11:e3:3a:34:7e:ff:90:03:b1:70:
                    8c:aa:e5:e0:63:07:0d:c2:52:e9:4a:0b:e5:8a:9e:
                    fa:93:40:2e:65:f7:e4:6f:09:a8:27:f0:d1:cb:d4:
                    12:04:26:aa:f5:a3:0a:b1:17:58:6a:2d:03:da:36:
                    6d:a5:29:26:bc:58:4c:a6:2a:d6:12:68:fc:59:92:
                    e6:a1:36:df:01:56:7b:72:6e:7c:78:6a:65:53:35:
                    ac:61:83:36:97:bb:62:20:a0:ad:23:e7:bd:ad:6b:
                    eb:e6:10:fb:00:df:af:94:ad:58:d7:50:d6:61:7e:
                    57:79:12:a6:16:57:5e:56:39:4a:01:a1:d2:9d:b2:
                    ce:f4:16:77:d5:db:1c:4b:f6:cd:05:84:c3:41:2d:
                    bc:c6:9b:58:5c:fd:53:69:4d:8d:3a:fb:b1:7a:0a:
                    cb:a6:27:2d:fc:d0:f3:a1:8f:3d:52:40:2c:d5:bb:
                    70:40:af:f7:a7:4a:4d:3d:82:a0:72:4d:c8:46:6b:
                    c9:7e:a9:f1:f2:0d:46:8c:96:d9:ed:84:66:17:42:
                    b2:d2:6e:1f:e7:01:c2:c7:34:5f:d0:07:cf:aa:ad:
                    57:a3:1c:dc:02:5d:7b:57:b0:2b:20:e3:f5:0e:d7:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0E:97:29:37:A5:CD:11:2E:BE:6F:A6:9A:5B:29:90:DA:FE:0C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/56ec3aa1-510b-39a5-8b65-e697c1ff41cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.197.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:79:a4:ae:38:5e:47:36:a1:76:f1:f5:bf:27:9d:f6:44:c0:
         9c:71:ed:24:f7:e6:a4:d7:d5:fb:a2:ea:4a:5e:ad:d1:37:ae:
         7a:01:de:92:bc:4c:9c:e1:ec:ab:6a:4c:e2:38:41:86:02:d8:
         1c:6b:e0:35:34:99:39:f1:54:01:79:d0:6a:8c:bd:ea:c8:8a:
         20:bc:8f:70:8c:41:81:27:79:e5:4b:84:7f:f9:ee:cb:1b:f0:
         bb:cd:d3:70:57:db:9d:2f:bc:da:f6:c1:ab:08:43:84:6e:67:
         55:08:79:bb:05:fb:73:4c:c3:75:4e:68:f7:16:c8:f8:05:4d:
         5f:42:79:3f:4f:45:e4:00:5f:fd:7a:f8:bd:ad:3c:c6:5d:15:
         e2:f6:b7:81:e9:43:8a:d8:2f:a1:07:65:a5:67:45:70:b8:d8:
         04:ce:42:d8:26:f0:33:45:56:21:96:f0:02:be:19:96:3f:3e:
         86:91:f8:ed:7f:1a:ba:ef:d0:6b:e6:3d:e2:b7:fa:70:26:c6:
         d6:2f:c1:be:2a:5b:1f:3f:80:de:bb:d3:20:c1:2c:b3:20:6b:
         45:5c:ad:67:16:70:c0:fa:0a:03:68:a5:3d:1b:81:2e:57:bf:
         4e:85:8e:0a:8b:0b:a1:3b:87:8b:59:3c:2a:a1:6c:24:93:b9:
         9c:90:55:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----