Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/7834698d-a750-37f2-a0fe-ee9358fae966.roa
File:                     7834698d-a750-37f2-a0fe-ee9358fae966.roa (raw, json)
Hash identifier:          x9lql2MffWWCCrCc6GjCvwA5gvY6A2siGpMkW+p+hHg=
Subject key identifier:   25:4F:9B:C3:01:68:4B:9C:E8:4D:45:43:58:5E:EB:E0:71:87:EA:BD
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F4328583F16DA863F265428622D830680
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/7834698d-a750-37f2-a0fe-ee9358fae966.roa
Signing time:             Wed 31 Aug 2022 15:33:15 +0000
ROA not before:           Wed 31 Aug 2022 15:33:15 +0000
ROA not after:            Tue 03 Dec 2024 05:00:00 +0000
asID:                     20454
IP address blocks:        199.7.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:16:da:86:3f:26:54:28:62:2d:83:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Aug 31 15:33:15 2022 GMT
            Not After : Dec  3 05:00:00 2024 GMT
        Subject: CN=30bba628-9c3e-4938-917b-33cb72b19fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:cb:94:a4:a3:24:83:a9:13:72:f9:d9:aa:
                    2c:c7:d6:fe:75:81:b5:d9:6b:db:20:6b:5a:db:51:
                    64:96:47:5e:ec:e3:5c:0b:95:8c:1a:9d:58:40:2c:
                    45:f5:2b:a0:49:58:58:9a:fd:4c:02:14:4f:e4:be:
                    65:12:c6:17:c7:ca:29:7d:a9:5c:4a:ec:ba:98:88:
                    b6:6d:75:a4:cc:4f:41:09:6c:12:73:d7:27:7f:71:
                    bb:bd:09:be:e9:a4:b7:79:03:1d:42:d3:2f:89:af:
                    e1:bd:d3:12:92:ac:58:05:87:25:66:97:a6:e5:99:
                    9a:5f:d6:33:4a:76:02:67:c4:c6:6c:33:8f:fc:db:
                    63:77:38:c8:a5:c4:8e:36:78:4f:e9:1d:18:68:3c:
                    b5:16:a0:fa:21:1c:01:d4:bd:7e:78:a1:b0:c9:e9:
                    84:1c:e2:73:86:e0:f3:87:bb:ab:8a:d0:a6:b2:fc:
                    1c:84:3a:16:57:26:20:f6:1f:73:fc:7e:0c:ef:df:
                    7c:cd:10:ef:63:1e:27:30:35:69:eb:a7:9d:93:7a:
                    82:6e:f2:61:55:df:2e:45:f4:a6:8c:5f:4b:9e:91:
                    65:f1:bc:88:bd:e5:78:3e:5f:40:77:1e:78:fb:32:
                    c2:00:c6:e2:e6:b9:2e:bd:d8:07:d3:7d:a3:3a:b2:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4F:9B:C3:01:68:4B:9C:E8:4D:45:43:58:5E:EB:E0:71:87:EA:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/7834698d-a750-37f2-a0fe-ee9358fae966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fe:b8:d5:82:8f:39:ee:ef:f5:9f:ea:08:bb:82:a3:40:f7:
         9e:9f:fb:82:27:88:91:22:f6:8a:cd:88:60:f9:64:d4:3e:24:
         82:76:82:ac:6b:e8:93:a5:2b:27:ea:15:3c:ea:9b:4c:4c:f5:
         56:f5:10:6c:21:72:41:f6:95:f7:a8:8e:51:c8:42:39:7d:5e:
         66:12:0b:99:fc:ec:c4:11:7e:39:37:f5:9a:26:b0:83:41:99:
         99:de:d8:ce:a4:74:44:a0:46:31:f8:2a:32:17:e8:89:69:57:
         6c:01:5d:d3:be:14:52:1f:f8:52:cc:ba:cb:85:0b:3a:55:85:
         a5:3e:09:9a:40:db:bf:74:94:f0:03:6c:c9:1b:c9:11:12:71:
         5b:9d:24:20:90:16:bc:d1:36:ed:4c:6f:fb:a3:76:95:3c:87:
         0f:19:65:df:46:fc:1f:ec:d8:46:ff:51:c6:80:b9:37:67:50:
         55:52:9d:24:7f:22:88:50:20:e0:49:7b:ef:38:83:0c:a6:f8:
         5c:a0:96:07:40:0a:04:54:cf:5a:fe:aa:49:fc:52:77:59:59:
         4b:55:43:c0:3b:08:b2:d5:90:9e:79:d2:42:3a:ce:44:29:bb:
         f3:61:6d:a9:1c:3b:48:12:96:53:25:09:87:3e:b3:2b:6b:3b:
         4e:b1:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----