Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/00a86fec-2a59-365e-a13d-7e11be579e6d.roa
File:                     00a86fec-2a59-365e-a13d-7e11be579e6d.roa (raw, json)
Hash identifier:          14zdLXV0m5ZpUXyn662hmApAmKXTclfAcD9Fg5erX2o=
Subject key identifier:   62:83:7B:4E:FB:2B:45:94:63:1D:2B:15:8F:D6:02:E2:4D:60:BE:E8
Certificate issuer:       /CN=6b435fd1-de86-44d5-ba01-b63f2e3f01fe
Certificate serial:       010D0C9F43285840347883FC3E997C901C76D080
Authority key identifier: 75:4B:CB:FB:50:0E:47:EC:7D:4D:53:47:4C:31:9E:C9:44:26:05:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/00a86fec-2a59-365e-a13d-7e11be579e6d.roa
Signing time:             Wed 26 Oct 2022 12:22:55 +0000
ROA not before:           Wed 26 Oct 2022 12:22:55 +0000
ROA not after:            Tue 28 Jan 2025 05:00:00 +0000
asID:                     204843
IP address blocks:        216.255.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:34:78:83:fc:3e:99:7c:90:1c:76:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b435fd1-de86-44d5-ba01-b63f2e3f01fe
        Validity
            Not Before: Oct 26 12:22:55 2022 GMT
            Not After : Jan 28 05:00:00 2025 GMT
        Subject: CN=24935485-e856-4262-9e1f-5cc3ae998480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:84:3e:c0:ac:a1:53:aa:93:6c:fb:24:3a:
                    a2:6c:5f:68:b1:27:72:f3:ed:02:d8:ef:f7:10:f8:
                    e8:ce:b6:5a:01:36:c1:94:bb:87:58:70:b2:09:3d:
                    3a:01:8c:61:65:de:08:b1:b5:3a:b4:2c:0d:a5:41:
                    8f:14:0b:5c:e6:8f:e9:57:ac:a2:07:52:52:c1:89:
                    71:51:fc:3c:fa:3d:fa:41:f9:0e:56:05:09:e4:15:
                    bf:87:09:4c:35:19:5d:eb:95:63:53:e6:23:56:2a:
                    e9:3f:26:e6:b4:da:0d:d6:20:df:c9:7b:95:e3:f7:
                    50:a6:f6:61:e7:02:43:25:2c:af:4b:97:30:c8:40:
                    ba:0b:63:cf:33:89:c1:0c:af:5a:a5:17:9f:f2:3d:
                    2e:fe:a4:09:5c:77:3c:05:98:ee:ef:38:b7:cc:74:
                    c5:df:66:61:9d:b6:97:a6:db:70:f6:d2:4b:3d:15:
                    0b:f6:d9:50:98:5c:0d:af:da:a1:87:65:33:11:a4:
                    27:56:ee:20:85:56:ef:de:cd:04:e2:73:11:ea:67:
                    89:ce:e7:18:94:1d:d2:d2:77:26:16:a8:9c:1e:7f:
                    6f:6e:10:61:e7:c3:b1:27:7d:d0:4e:77:7a:66:3a:
                    de:77:46:79:3b:35:3f:ca:99:74:8c:85:09:d5:1b:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:83:7B:4E:FB:2B:45:94:63:1D:2B:15:8F:D6:02:E2:4D:60:BE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/00a86fec-2a59-365e-a13d-7e11be579e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.crl

            X509v3 Authority Key Identifier:
                keyid:75:4B:CB:FB:50:0E:47:EC:7D:4D:53:47:4C:31:9E:C9:44:26:05:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:2a:ac:b3:fb:2e:3b:cb:8c:69:12:4d:eb:c3:49:17:79:7c:
         e0:db:ad:d6:44:0a:9b:0b:98:05:66:92:27:5e:88:3b:d8:4b:
         22:60:00:6c:00:3c:c7:0c:62:3f:14:18:03:70:35:72:5e:dd:
         f2:78:bf:c9:71:fb:b2:a3:6b:76:40:18:68:91:80:f0:7d:61:
         72:77:21:d7:52:49:a2:bf:39:b4:20:c4:a8:d8:cc:9e:b1:71:
         fb:f1:49:c0:3e:b6:62:4a:2e:64:11:e1:28:e3:89:15:bf:f3:
         6b:e3:96:e5:af:3c:eb:a0:e9:b1:14:20:f2:aa:28:9c:80:98:
         ec:ba:12:76:26:22:53:61:85:5b:78:ae:db:ea:cd:8e:fd:2d:
         d8:4f:17:66:d6:db:a2:14:64:d3:a7:88:e3:67:79:dd:c9:2c:
         f1:44:f2:64:2a:76:49:47:31:57:4d:6e:6a:fc:f1:0b:40:23:
         7f:38:96:c1:f0:da:76:d3:a2:c6:cc:53:f1:e9:92:26:8f:e8:
         de:6c:35:29:44:49:a6:b2:94:38:1d:6a:7b:fc:f3:a3:07:03:
         49:3d:54:3b:fe:00:49:eb:a2:e0:b0:b8:c4:47:4d:72:c0:2d:
         15:c4:1b:e2:c3:b9:05:38:3b:bc:18:55:4f:c7:3d:72:be:03:
         00:b6:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----