Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/9a1f6af6-e467-3b62-ad0b-7e870d15d1c2.roa
File:                     9a1f6af6-e467-3b62-ad0b-7e870d15d1c2.roa (raw, json)
Hash identifier:          WuoxKrnhIc8Lw0b82WBl2IytyOE8SCJ9XXt0WxMbRj8=
Subject key identifier:   22:FA:8F:F4:AD:47:22:E4:BD:9E:36:67:F6:04:0E:1C:E5:6A:84:67
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F4328583E0BFFFA0B3915736428174EC0
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/9a1f6af6-e467-3b62-ad0b-7e870d15d1c2.roa
Signing time:             Fri 27 May 2022 15:30:05 +0000
ROA not before:           Fri 27 May 2022 15:30:05 +0000
ROA not after:            Thu 29 Aug 2024 04:00:00 +0000
asID:                     399686
IP address blocks:        207.90.208.0/24 maxlen: 24
                          207.90.209.0/24 maxlen: 24
                          207.90.210.0/24 maxlen: 24
                          207.90.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0b:ff:fa:0b:39:15:73:64:28:17:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: May 27 15:30:05 2022 GMT
            Not After : Aug 29 04:00:00 2024 GMT
        Subject: CN=c9832260-6b71-4ab7-a963-5ad7ee2df244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:4c:5f:2f:07:9f:d4:49:67:64:e8:64:d5:
                    3c:dc:76:81:7e:2a:74:a7:a1:e4:9c:30:0c:36:26:
                    cf:95:39:7e:7d:78:14:1e:8d:23:51:87:0a:09:69:
                    72:5a:ca:14:4b:a5:0c:af:46:3d:0d:b9:67:cf:38:
                    2c:e1:21:37:dc:9e:55:43:af:21:0a:56:bc:00:7f:
                    35:5f:9b:b4:7f:fd:8f:59:a3:cc:2c:db:c4:61:f2:
                    01:c3:cc:15:29:36:52:1e:56:1d:7f:cd:74:6e:b1:
                    54:2e:eb:65:2d:88:3c:01:cd:db:03:7a:0a:23:d1:
                    6d:a0:27:a4:4f:0e:8a:bc:40:12:f3:c9:64:5b:38:
                    10:1e:d2:08:7f:a7:77:11:ea:14:9c:00:8b:14:29:
                    9a:98:49:c9:7d:75:b3:b1:51:d2:29:a2:6b:5f:0e:
                    a3:82:19:cc:38:cd:90:fe:f0:62:44:f8:70:d8:fa:
                    05:06:83:7d:ac:0a:ca:33:11:85:0c:c7:15:76:61:
                    18:8f:61:5b:80:c2:c7:7c:5e:03:e3:37:79:9e:3b:
                    d5:48:c3:b4:f7:bc:8d:2b:3f:2a:54:d3:9f:3a:16:
                    33:9e:9b:e2:d6:c5:93:38:0e:1e:44:b7:5f:42:9e:
                    03:4e:75:37:20:b6:a5:64:e8:46:c4:54:1c:b0:32:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FA:8F:F4:AD:47:22:E4:BD:9E:36:67:F6:04:0E:1C:E5:6A:84:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/9a1f6af6-e467-3b62-ad0b-7e870d15d1c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier:
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:84:cb:ad:f3:8b:70:5b:31:74:ef:7b:00:dd:19:6d:48:0b:
         5b:d6:ca:a0:89:a0:a7:2c:e8:39:40:53:27:70:d2:99:50:b5:
         cd:10:c2:e0:8e:26:50:6b:d8:e0:19:f4:a8:bb:dc:43:06:32:
         f9:10:f2:2f:c1:5d:50:ee:c7:91:8c:cc:f7:7c:23:cc:f7:0c:
         c3:bb:5e:c7:f9:c7:bf:c3:9d:fa:fb:09:01:16:1d:1d:6a:7f:
         58:1a:c0:3a:aa:e0:86:51:6f:66:55:c0:08:89:17:15:a5:44:
         6a:95:a9:69:2b:2a:7a:ca:75:5c:ba:62:7f:f8:58:7d:a6:74:
         e3:73:a9:d4:07:ba:e5:8f:6e:cf:0a:f4:15:6d:74:1a:25:6b:
         c4:6a:56:3d:f5:27:ae:6a:61:36:2a:8a:85:b3:90:13:5b:6e:
         f0:c3:0d:40:0a:83:30:a4:30:a6:fc:45:99:ae:c6:04:50:59:
         1c:42:a9:19:bd:d6:6f:fc:1c:9e:f9:38:c2:6f:75:10:c7:ea:
         df:64:30:1e:e2:ca:56:20:e8:9b:b6:79:af:7f:eb:91:6f:0c:
         a1:d6:b7:eb:2d:37:aa:98:02:e4:77:fe:85:cf:87:d2:43:60:
         57:67:89:07:b6:56:b8:c2:95:4d:42:ae:df:d2:b9:6b:8d:ce:
         1c:c3:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----