Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/04fedf14-a884-37df-8791-e5624f7a49a1.roa
File:                     04fedf14-a884-37df-8791-e5624f7a49a1.roa (raw, json)
Hash identifier:          7q7x/NP8v+BZVe/H0qj2Joang+Htj94u5J1IIvXz+6o=
Subject key identifier:   C4:94:80:F1:6F:AC:C9:3D:00:CA:CE:7E:C2:53:D3:9F:32:32:EE:33
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E35E12B75
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/04fedf14-a884-37df-8791-e5624f7a49a1.roa
Signing time:             Mon 04 Nov 2019 10:06:19 +0000
ROA not before:           Mon 04 Nov 2019 05:00:00 +0000
ROA not after:            Mon 04 Nov 2024 05:00:00 +0000
asID:                     16276
IP address blocks:        142.4.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:35:e1:2b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Nov  4 05:00:00 2019 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=672628ee-8311-446b-aeea-0598f171a081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:ff:34:a1:1c:d4:35:76:c7:ff:6a:75:0f:
                    2a:e7:ef:a1:59:8e:46:d5:fc:31:11:ea:a0:43:6b:
                    b5:f3:2d:4f:d5:1c:96:f2:b4:37:ed:b3:d8:3a:1a:
                    9d:0d:3b:3c:25:97:29:28:68:d8:59:38:cf:87:c3:
                    c9:d9:8b:64:8e:a5:1c:d7:a7:b4:97:89:09:a9:80:
                    8c:4c:26:68:5c:93:c9:f1:58:33:07:bd:1a:24:65:
                    58:b2:5f:29:8f:7d:b6:5d:67:8e:f5:d1:bc:f0:a3:
                    20:82:d1:0c:d2:b0:fd:b3:51:06:1d:58:d6:25:7c:
                    76:0a:38:fd:f8:d1:e3:3b:30:ce:e3:81:69:0f:30:
                    d5:d7:5e:f6:53:78:1c:2f:e3:34:6a:e6:f3:37:d0:
                    98:e6:84:c5:45:35:66:66:71:cb:a1:4c:a8:a8:ab:
                    8e:81:6e:13:1d:70:64:5e:84:e6:ba:dc:62:d4:19:
                    62:2e:f1:09:02:e2:12:73:7d:b5:52:48:98:21:6a:
                    4d:95:ab:c7:fd:a4:63:43:16:c0:54:88:4d:cb:dd:
                    f5:c8:a7:88:07:4e:ad:49:b7:2b:1d:5b:7a:44:4b:
                    62:fc:62:cf:59:66:89:2d:68:58:c6:34:ce:0b:5e:
                    19:95:3e:5d:79:4f:f5:24:59:7c:cb:62:ae:7c:07:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:80:F1:6F:AC:C9:3D:00:CA:CE:7E:C2:53:D3:9F:32:32:EE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/04fedf14-a884-37df-8791-e5624f7a49a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.4.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:d3:70:db:1e:17:45:1b:0d:b2:6c:c3:a6:ed:49:28:8d:
         4a:d5:fa:f8:87:13:f4:91:8a:e2:b1:c8:a1:c7:19:27:4c:30:
         2a:a0:e2:ad:e8:e2:d8:49:11:65:1e:0d:aa:88:5a:c7:d3:67:
         6f:ff:52:85:62:73:74:ad:56:aa:67:e8:4e:69:02:df:89:7b:
         69:69:db:a9:1d:c3:ce:a5:bd:07:03:c0:af:40:37:74:b4:f0:
         9c:19:23:8e:cb:bc:bd:83:89:bf:62:cf:dd:ba:61:e3:c4:92:
         f5:bb:2d:88:07:5f:b9:60:15:df:4e:a0:ed:fb:6a:3a:76:1b:
         77:fe:e7:76:89:2d:3e:7e:5d:c0:3f:e3:16:f9:e7:60:bb:14:
         ce:22:17:67:89:a6:1c:8d:dd:d5:0e:5e:80:d3:38:fa:7f:b7:
         b9:89:47:98:b8:17:1b:47:97:97:57:62:d5:2c:62:0f:22:9a:
         2c:e4:12:2d:d1:33:07:20:fe:ef:80:a6:87:c8:c6:96:ef:aa:
         d6:80:1b:0f:f2:e1:2e:02:9d:ae:b6:9a:33:e2:43:cd:7e:3b:
         1c:f0:ff:68:6f:b3:bb:8b:44:da:7d:bf:f8:98:b5:52:52:cc:
         b3:8f:6d:75:10:44:89:de:84:e4:1a:9a:21:5d:65:60:eb:83:
         a6:bd:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----