Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/c5c2dd20-d471-3447-a391-abfc41762438.roa
File:                     c5c2dd20-d471-3447-a391-abfc41762438.roa (raw, json)
Hash identifier:          20z+DFcc1x20jQTUYA1bwv9nklK/bwFZkKQGSShgQJM=
Subject key identifier:   07:4F:8C:8F:52:BD:68:11:5D:74:50:F8:B9:50:F7:C8:11:9E:9C:F2
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328583F75D722CDC006D93D65415820
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/c5c2dd20-d471-3447-a391-abfc41762438.roa
Signing time:             Tue 04 Oct 2022 18:05:39 +0000
ROA not before:           Tue 04 Oct 2022 18:05:39 +0000
ROA not after:            Mon 30 Dec 2024 05:00:00 +0000
asID:                     14773
IP address blocks:        206.82.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:75:d7:22:cd:c0:06:d9:3d:65:41:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Oct  4 18:05:39 2022 GMT
            Not After : Dec 30 05:00:00 2024 GMT
        Subject: CN=e64ef37c-5307-4a28-b06e-ddc98cc2241d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:d8:07:38:1d:d5:b0:30:b2:6d:47:d8:01:
                    de:0f:59:df:f7:c6:b2:cb:dd:15:89:44:4a:fb:ec:
                    45:1f:2d:1d:90:22:64:0b:fb:c7:d3:5e:06:0d:e8:
                    6f:5f:2d:23:c7:9a:26:e7:d3:2f:62:aa:ed:c9:67:
                    fb:35:c3:c5:81:d9:84:2e:af:d1:58:f3:59:b2:53:
                    3f:61:e1:52:e9:36:f1:bc:4f:a4:01:27:34:4f:11:
                    d8:4c:00:a0:02:13:25:f6:6c:fa:f8:18:e3:48:5b:
                    48:92:10:37:9b:af:df:89:3e:6c:e1:ee:69:a4:ee:
                    74:f2:d4:09:1d:14:32:bc:31:e3:dd:8b:42:de:27:
                    de:33:a9:4a:8b:dd:c7:ae:e2:45:35:c3:8f:42:a5:
                    97:2d:8b:69:ff:23:f7:45:76:b7:39:b0:36:6a:f3:
                    32:46:9e:51:82:11:1e:cc:82:ac:41:d4:81:1e:13:
                    f2:68:00:5f:fd:09:7d:6e:40:08:55:a8:f5:cf:3d:
                    04:fa:88:6d:7b:12:03:e6:fe:f4:06:76:5b:ab:d5:
                    41:92:99:a8:65:a1:6f:d7:82:03:c5:44:56:a9:fd:
                    96:8b:90:b3:cd:11:61:f5:f5:0e:31:1a:0d:e1:fa:
                    df:65:b8:68:a4:9e:71:18:d7:4f:3d:16:52:48:83:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4F:8C:8F:52:BD:68:11:5D:74:50:F8:B9:50:F7:C8:11:9E:9C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/c5c2dd20-d471-3447-a391-abfc41762438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:58:06:2b:99:b3:c0:52:6e:47:51:b6:7d:f8:75:2e:49:
         cf:7d:77:e7:00:bc:16:ed:82:0f:b1:55:d3:dd:75:61:4c:9e:
         bc:93:76:db:64:4a:d1:d1:88:42:bf:99:e0:05:7c:b3:a5:6e:
         41:b5:7f:37:47:5a:a3:93:93:e5:00:ab:0e:6b:c5:3c:7f:ac:
         1d:31:6d:64:49:d6:91:90:16:75:06:71:64:49:a2:ae:d2:9e:
         ff:1c:61:15:0a:cf:e1:18:6c:ff:63:e2:22:eb:e7:d2:86:6c:
         d7:7c:07:74:2c:72:5d:b5:51:81:10:dd:0d:e0:3e:f7:03:44:
         62:4a:69:07:69:a8:74:67:06:bd:ea:f2:16:fe:36:cd:d2:18:
         98:8a:4c:93:f0:f8:f0:39:fa:13:63:79:35:4c:9a:e6:2f:58:
         c0:41:ce:68:71:de:53:46:e7:ae:c0:71:41:a0:9e:cc:8e:26:
         5e:14:fe:e7:63:32:03:88:31:eb:b2:83:16:55:40:80:9d:8a:
         b4:65:f9:d4:82:46:5c:0d:3c:42:88:52:29:23:f4:38:bc:c6:
         61:4f:47:91:ea:67:60:a6:4f:7f:fe:80:60:47:8a:94:a8:37:
         e4:50:40:b6:18:8b:56:32:5a:4c:7b:ca:03:13:6e:aa:20:89:
         c8:a7:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----