Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5eea1104-9286-3e45-8d07-3805a2acc9d5.roa
File:                     5eea1104-9286-3e45-8d07-3805a2acc9d5.roa (raw, json)
Hash identifier:          M9EnQUbhKEkCoNMJgFui27MDyxIX3KRyh8/qKRZsjrs=
Subject key identifier:   76:93:AD:67:79:C3:2A:7F:1C:5D:89:50:B2:3C:C9:BB:CF:E5:A6:B5
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328583F91B3D613BBEEDBB36D4C7380
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5eea1104-9286-3e45-8d07-3805a2acc9d5.roa
Signing time:             Thu 13 Oct 2022 12:00:00 +0000
ROA not before:           Thu 13 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Oct 2024 04:00:00 +0000
asID:                     7018
IP address blocks:        72.14.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:91:b3:d6:13:bb:ee:db:b3:6d:4c:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct 13 12:00:00 2022 GMT
            Not After : Oct 13 04:00:00 2024 GMT
        Subject: CN=63f819c9-8e5d-4dc1-8cc0-f0d95608a62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:cd:c5:40:54:56:de:f8:e6:2e:53:0d:20:
                    21:6e:0c:d8:87:0b:90:fc:f6:c5:02:cb:ca:75:4e:
                    7e:cb:58:65:66:ae:6a:ca:73:4e:94:8f:d8:6a:20:
                    3d:d8:18:04:ee:62:ea:bd:cc:62:6d:cc:2d:71:89:
                    2f:f9:32:7f:1b:ac:5b:8c:85:9e:e8:29:ac:12:cf:
                    ca:75:84:6d:aa:8d:f2:9c:14:8f:f4:b3:0d:e2:25:
                    12:34:8d:e4:d7:14:b8:a0:e6:d1:7f:59:5a:e1:5d:
                    80:aa:17:64:0a:f6:95:3c:c0:57:e3:90:ba:8c:da:
                    96:b3:48:c5:f7:b8:1f:b2:4b:75:47:41:21:4f:cc:
                    b7:bb:be:8a:2e:2b:3c:5f:f6:42:58:2a:54:2d:10:
                    12:43:b4:9b:59:e0:af:20:cf:12:48:ea:9a:8c:5c:
                    b8:97:12:9d:d1:0d:e1:67:23:03:08:57:4d:16:ac:
                    e3:6d:80:00:3e:75:b7:34:b6:ae:ef:79:00:07:31:
                    76:f3:98:e3:d3:4a:80:8c:b0:20:b4:c1:72:00:2f:
                    05:8a:73:e0:c6:bb:96:19:e6:99:ef:f6:c5:e0:0d:
                    2b:de:8e:c7:e7:1c:02:b2:fc:cd:50:56:c3:39:2d:
                    64:f7:0a:6d:49:47:51:3e:c4:b0:37:9b:4f:69:7e:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:93:AD:67:79:C3:2A:7F:1C:5D:89:50:B2:3C:C9:BB:CF:E5:A6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5eea1104-9286-3e45-8d07-3805a2acc9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bd:61:fc:c1:a0:69:f8:b1:6a:b7:b8:c5:6a:49:4b:42:1b:
         9c:0a:94:9e:3f:e9:99:f0:5b:22:cf:6b:41:53:e2:23:ed:b4:
         a6:6f:8c:88:80:3d:c6:3f:2f:7e:4c:5f:24:5f:20:2c:1e:85:
         4f:35:e5:a7:17:36:db:b4:7e:09:ab:c0:fe:1e:b3:a2:6f:3f:
         74:67:43:0d:a1:fc:e3:16:b0:84:ac:e9:1a:2f:2c:4f:19:06:
         cb:b3:88:a9:9a:c3:ab:fd:1d:85:ec:06:22:1a:5e:ed:bb:87:
         06:08:71:24:0c:d6:5a:01:fe:1b:b2:d5:ad:60:16:b5:3d:6c:
         08:95:e0:fd:90:44:ef:f0:13:89:65:e5:ad:ab:8c:7d:f0:a9:
         74:78:e9:0a:60:39:f5:45:71:4e:6a:40:52:1b:e7:7f:2f:14:
         83:c8:26:0b:3e:81:6f:61:86:9c:11:75:4c:01:5e:e0:21:e8:
         ee:91:6b:e9:90:cc:be:f5:3a:7c:1e:14:d4:8e:7d:d7:72:63:
         8f:37:8f:ce:7f:98:62:09:23:91:e0:ee:5f:d4:19:62:9a:3d:
         9c:5a:30:27:b0:c1:60:2e:a1:30:24:b7:e8:3b:02:de:f7:21:
         3a:b5:b0:08:0e:83:54:8f:46:11:53:d4:1a:1e:81:a3:11:e5:
         c2:0a:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----