Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/5d7b6642-dd9e-3c43-a086-921e1760d26e.roa
File:                     5d7b6642-dd9e-3c43-a086-921e1760d26e.roa (raw, json)
Hash identifier:          hIjSuGJTUzMBne6Fau/sN6uX52UpvLISWKUmRb8HZUs=
Subject key identifier:   43:8E:1D:5F:ED:53:9E:1A:B8:0F:C9:74:67:D6:5C:58:AA:1B:40:50
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E1BF55DD5
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/5d7b6642-dd9e-3c43-a086-921e1760d26e.roa
Signing time:             Wed 30 Oct 2019 09:18:15 +0000
ROA not before:           Wed 30 Oct 2019 04:00:00 +0000
ROA not after:            Wed 30 Oct 2024 04:00:00 +0000
asID:                     16276
IP address blocks:        198.50.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:1b:f5:5d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Oct 30 04:00:00 2019 GMT
            Not After : Oct 30 04:00:00 2024 GMT
        Subject: CN=f18b3445-5ffe-451a-82b9-a7a3ad8c3d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:d8:e3:eb:9a:fc:13:3d:3f:e8:a3:57:4e:
                    f6:c3:36:a1:1a:dc:82:d1:4d:1e:e5:79:f7:fa:be:
                    c6:79:00:79:2f:9b:84:7a:79:af:a7:3c:f3:3b:94:
                    a7:4a:fc:8d:f0:07:b2:ad:78:3b:1d:51:5d:8f:5d:
                    de:6f:cd:83:5d:ce:91:48:34:4a:4f:7d:8f:2e:94:
                    00:2b:ef:0b:eb:97:ab:7a:38:a8:ed:5a:bc:14:d6:
                    b1:15:2d:66:fe:fd:86:02:cb:8f:06:df:4e:d2:83:
                    16:47:0d:04:48:97:aa:21:2b:34:32:34:11:5c:e7:
                    5d:a3:fc:06:17:7d:24:8b:2d:5b:62:30:41:78:98:
                    cf:af:ac:ae:7d:2a:22:9b:da:de:c4:52:e7:e2:80:
                    54:1b:f0:44:6d:a9:1e:d9:89:69:a1:aa:0d:fc:b9:
                    8c:53:7d:db:12:39:7c:e8:5a:82:73:74:31:1f:32:
                    b7:3e:de:65:5d:d1:ae:dc:e2:fe:e3:71:93:9c:97:
                    2a:c2:f2:9e:0a:27:73:4c:84:f9:c6:79:82:55:46:
                    ba:8f:58:10:8f:b7:0f:95:76:fe:d3:1b:df:28:27:
                    8c:d8:60:08:b6:fb:08:70:e1:6c:42:46:79:dc:2f:
                    81:77:69:90:3e:06:5c:64:c0:e8:f3:c1:65:14:e2:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8E:1D:5F:ED:53:9E:1A:B8:0F:C9:74:67:D6:5C:58:AA:1B:40:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/5d7b6642-dd9e-3c43-a086-921e1760d26e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.50.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:21:5d:4d:df:3a:62:c2:e2:a2:13:96:ae:a6:1d:79:4c:a8:
         18:92:32:7d:fa:20:52:55:90:7f:4e:85:48:f5:8f:8a:70:89:
         78:8f:01:27:de:1e:e1:f7:47:70:b3:50:a9:ee:cb:fc:4f:87:
         b7:32:31:9a:1c:7f:5d:ec:a5:62:f1:b2:95:04:42:2c:e3:f4:
         7c:93:39:a2:0f:fd:9b:54:6c:64:f0:a7:f6:55:bb:10:5d:1a:
         dc:74:66:aa:34:59:b3:ec:3c:bd:a5:bd:5d:ef:36:76:81:d5:
         a7:d1:ca:55:97:b6:37:cb:90:25:5c:67:e0:5c:70:8e:0d:da:
         84:b1:dd:5f:aa:d4:00:d2:b2:5e:4a:d2:67:40:61:1f:db:55:
         24:87:bc:16:63:aa:55:3e:c3:ad:0f:df:4f:fe:e2:bc:13:a0:
         21:4c:3a:8c:c9:58:e8:87:4f:a0:9b:a0:27:a7:93:b3:5d:e8:
         11:68:a8:b6:9f:8a:40:4e:56:46:2b:eb:79:f9:b6:da:b5:6b:
         39:cd:dc:8e:ca:35:3e:36:e4:ac:ef:f1:09:01:fe:89:30:68:
         5a:15:e5:73:18:d1:dc:ba:d7:75:c7:86:13:63:11:c3:9c:06:
         39:64:ff:b4:0a:39:e0:49:ba:00:1f:b1:05:5c:2c:ca:7c:73:
         3e:b2:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----