Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/084abef0-635b-3518-ba7e-4dc3136d647e.roa
File:                     084abef0-635b-3518-ba7e-4dc3136d647e.roa (raw, json)
Hash identifier:          BcRCne5bWSUfUxa0f5Il1rpKylxoRLTCfiugzUAD4xY=
Subject key identifier:   53:CE:91:02:96:28:15:93:53:D1:B0:4C:D3:9B:70:8C:E2:43:43:8E
Certificate issuer:       /CN=fe38e0f9-f100-419a-915a-3e2451a50c5a
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FB45E6B5B
Authority key identifier: 2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/084abef0-635b-3518-ba7e-4dc3136d647e.roa
Signing time:             Fri 17 Jan 2020 16:38:04 +0000
ROA not before:           Fri 13 Dec 2019 05:00:00 +0000
ROA not after:            Thu 13 Dec 2029 05:00:00 +0000
asID:                     398223
IP address blocks:        23.149.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:b4:5e:6b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe38e0f9-f100-419a-915a-3e2451a50c5a
        Validity
            Not Before: Dec 13 05:00:00 2019 GMT
            Not After : Dec 13 05:00:00 2029 GMT
        Subject: CN=d3d0ac2f-4460-403e-8b34-293a3011bb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:ce:02:2e:9f:5d:48:93:22:ec:24:54:ad:
                    8f:8b:e6:dc:f2:e6:05:5e:d5:ac:9b:95:3c:d3:77:
                    af:2b:5e:fa:4e:e0:f6:a1:d1:48:df:e0:65:49:99:
                    96:8b:56:dd:79:25:9c:ed:58:da:69:e7:e0:12:7d:
                    9e:f0:c7:a1:de:8e:14:b1:50:c4:c9:22:b7:fc:68:
                    cb:d6:5f:b4:ed:f1:e8:8b:db:1a:94:9e:9a:90:b3:
                    1f:11:0b:e7:8f:30:5e:14:3e:a8:ab:a8:c4:15:39:
                    3c:8b:e0:50:c6:0a:25:39:87:19:27:b5:ce:12:18:
                    76:a2:f9:ad:87:c2:54:e6:fb:d0:4b:cf:ab:bc:c0:
                    3d:2b:fa:bf:c1:54:7b:31:d9:f7:f6:2a:01:9f:01:
                    f7:79:d8:e5:8a:5b:07:18:3a:3d:ff:f5:8d:26:0e:
                    b8:48:8d:ea:b2:0f:a4:58:09:9e:57:65:9d:35:b5:
                    de:81:aa:c4:d7:d8:6e:85:4b:d2:8a:89:f1:2d:08:
                    fc:94:75:01:0d:c6:82:c7:43:ec:85:dc:fa:f3:c7:
                    e8:a7:8b:d4:4a:cf:ec:f1:4c:7e:db:10:b3:53:09:
                    82:0b:14:2f:b5:17:28:28:ed:b8:e9:c5:fa:ab:e5:
                    86:df:81:69:be:81:b2:86:7e:dd:17:45:97:5a:43:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CE:91:02:96:28:15:93:53:D1:B0:4C:D3:9B:70:8C:E2:43:43:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/084abef0-635b-3518-ba7e-4dc3136d647e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:dd:cf:64:f3:15:cf:51:dd:9b:bc:41:56:e2:5c:12:26:
         84:9a:ae:ca:cb:dd:ea:d6:97:24:fc:83:28:11:f4:c9:83:01:
         26:6c:24:98:7c:37:59:5c:d0:c0:d9:b7:35:20:b9:7e:12:f3:
         e9:94:a9:64:31:b5:08:c1:11:d3:ad:4d:be:2d:54:29:08:ee:
         aa:8d:55:76:64:52:4a:5b:34:a4:ff:c2:a3:80:47:b4:58:46:
         e2:fc:28:9f:cf:ad:27:d1:2c:d3:2c:96:a5:75:f8:e9:23:96:
         8f:22:69:aa:bc:8f:24:8b:97:8a:a1:5d:b9:34:03:4f:ba:52:
         3b:74:e5:6b:a2:5b:73:70:4c:d6:54:53:0d:79:5e:07:6f:f8:
         e6:64:8e:91:71:ae:5b:ee:a6:e6:cc:44:d1:70:4a:3f:5c:9c:
         53:16:6a:e6:0c:2d:2f:24:30:9f:df:e4:ff:34:90:91:d8:4c:
         8b:7f:67:5b:26:d6:a7:6d:6e:e4:bd:32:74:82:52:13:23:66:
         1d:6c:dc:eb:34:cc:eb:0f:4f:d3:8a:d5:3f:f7:cb:ff:66:2c:
         24:ab:bf:bd:60:41:c2:6e:93:df:67:a5:b7:c2:53:3f:22:12:
         26:35:25:4f:a3:43:fb:76:44:3e:88:95:32:c9:e6:13:91:85:
         df:b8:5f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----