Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/e0d01853-ecfd-3c67-9b6e-c4e364335bb2.roa
File:                     e0d01853-ecfd-3c67-9b6e-c4e364335bb2.roa (raw, json)
Hash identifier:          xG5E0xs3MVDpJrShP4ved4c0UEJppvM+8lLTO6EF4Yk=
Subject key identifier:   23:6D:6D:C4:84:2D:D3:7C:89:68:85:F7:A6:42:BC:12:A0:D6:47:F9
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328583F30340D4713F09F5B4DB27864
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/e0d01853-ecfd-3c67-9b6e-c4e364335bb2.roa
Signing time:             Fri 12 Aug 2022 20:12:17 +0000
ROA not before:           Fri 12 Aug 2022 20:12:17 +0000
ROA not after:            Sat 31 Aug 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        72.14.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:34:0d:47:13:f0:9f:5b:4d:b2:78:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Aug 12 20:12:17 2022 GMT
            Not After : Aug 31 04:00:00 2024 GMT
        Subject: CN=adf09789-bd45-40a1-b235-94095aefc0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:3f:fd:ac:ba:d8:32:eb:62:b4:bc:e3:e9:
                    d3:a3:d9:cf:60:b1:6d:73:19:c8:8b:28:c0:1f:41:
                    a0:c1:84:dc:63:5c:f3:25:e4:96:e6:27:ee:a3:3e:
                    7c:43:e3:ef:38:5b:72:d8:49:f2:09:15:31:a2:a9:
                    56:34:31:c6:8a:14:b0:86:11:f4:46:9a:f8:0f:26:
                    03:8c:8d:6a:5f:9b:ba:e2:79:0f:05:78:28:47:45:
                    19:24:42:44:b8:0b:d1:34:9f:3c:2b:a4:63:58:b8:
                    a3:2f:19:d6:01:31:87:f6:ae:ee:9c:27:0a:ee:a9:
                    03:71:c3:d3:91:e3:1e:5d:76:55:f7:16:ea:e9:a9:
                    4d:65:77:2c:d0:b9:6b:46:f9:be:6b:ee:74:37:77:
                    df:97:88:81:cd:2c:07:f1:7e:16:29:1c:6b:b9:21:
                    28:29:81:c7:a4:fe:2f:5a:61:07:b4:e2:56:04:22:
                    78:78:74:60:02:a6:20:43:f0:53:0c:e9:0a:b1:96:
                    09:00:f0:9a:19:1d:db:bf:97:98:20:fb:ce:72:63:
                    e7:18:ce:8f:d8:6b:0f:bd:ce:0d:21:a2:26:39:01:
                    9f:96:ed:64:ca:b1:15:68:33:5f:75:b4:74:98:20:
                    0b:23:66:d9:d5:e1:8b:94:fe:a5:ea:e5:32:43:29:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6D:6D:C4:84:2D:D3:7C:89:68:85:F7:A6:42:BC:12:A0:D6:47:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/e0d01853-ecfd-3c67-9b6e-c4e364335bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:38:d8:71:80:cf:28:0c:f4:8a:c1:24:2f:8a:62:ea:d9:
         26:ad:9f:9b:8c:57:e9:e4:be:f8:99:b8:a5:eb:4a:a3:bf:52:
         16:8f:5d:a2:9b:89:5b:5f:d8:cc:5c:b1:92:c3:3d:16:2d:e2:
         a0:76:03:d8:46:a2:a5:15:52:ee:fb:ca:db:83:de:11:57:65:
         a7:29:3f:95:db:bc:c4:00:3e:6c:30:c9:7f:37:3b:0a:07:00:
         37:2b:ee:91:74:07:d9:a5:41:90:3f:f0:79:23:cb:fc:20:b5:
         27:1a:bb:92:ff:5b:e7:dd:49:9b:fb:21:2b:46:ca:b6:b2:05:
         ce:5a:a8:3b:a2:24:2b:c1:95:3e:b4:26:02:14:bd:24:1f:f5:
         8b:ed:b0:79:3d:9e:64:c0:d7:d4:0a:1c:32:33:83:a4:a3:67:
         b1:3c:71:bd:c1:cc:c8:23:1a:3d:34:6c:24:71:ad:a2:63:df:
         12:4b:dd:7c:96:f7:85:c1:a3:78:fa:bc:5c:a2:11:39:30:cd:
         9f:11:c1:0f:d5:d4:d5:3e:cc:0c:7c:bc:1b:b4:52:70:19:92:
         de:f7:e5:7e:c0:e4:9e:aa:d0:79:48:79:c8:41:46:82:4c:32:
         80:b6:b0:76:09:17:56:df:3e:59:16:ac:66:32:a7:85:54:23:
         ea:ba:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----