Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/37643090-c391-3cb3-8160-0cad1480eb30.roa
File:                     37643090-c391-3cb3-8160-0cad1480eb30.roa (raw, json)
Hash identifier:          yjJoYuO7tT8tYBYu2VCX+EBP9QaCU7VkAOG/ZkjKgX8=
Subject key identifier:   FF:10:E7:92:9B:63:3A:5F:14:4B:04:89:5A:B7:6A:35:E4:08:4B:4B
Certificate issuer:       /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial:       010D0C9F4328583DF4C10827F127F9CF3CD64E80
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/37643090-c391-3cb3-8160-0cad1480eb30.roa
Signing time:             Thu 19 May 2022 17:49:45 +0000
ROA not before:           Thu 19 May 2022 17:49:45 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     63394
IP address blocks:        23.184.112.0/24 maxlen: 24
                          104.237.112.0/20 maxlen: 20
                          157.52.32.0/19 maxlen: 19
                          172.86.0.0/18 maxlen: 18
                          2605:e4c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f4:c1:08:27:f1:27:f9:cf:3c:d6:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
        Validity
            Not Before: May 19 17:49:45 2022 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=6ec9dd14-eae0-466f-a42a-b0b876b4617f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:d8:fb:fe:09:96:f5:05:10:f4:04:a3:95:
                    2c:2f:c4:fb:1a:15:19:83:8a:f5:ac:15:7d:3b:6c:
                    6f:1c:9b:79:f1:2d:85:4b:4d:3a:70:a4:1f:90:64:
                    30:6c:5f:20:f7:2d:34:52:a4:fc:4b:6f:e6:60:2e:
                    2a:70:4f:04:1f:04:6b:ee:29:4b:69:b0:d4:d4:87:
                    05:bc:d9:9e:0e:c7:62:e3:b9:0c:59:b3:de:ab:e2:
                    74:03:ff:2b:f9:47:db:93:90:c2:ad:e6:76:77:02:
                    0f:f5:93:bf:2b:14:7a:58:dd:d9:9e:ef:cc:66:18:
                    b7:f4:ed:cd:23:43:99:23:13:5b:b6:f4:ab:16:a6:
                    cb:6c:98:95:55:73:4e:28:ad:59:1a:de:b5:dc:27:
                    56:2c:f9:97:31:ea:24:40:c3:35:1c:d2:ed:d7:b0:
                    bc:58:12:e6:4f:4e:f7:75:ab:74:c9:2e:24:86:23:
                    ea:b9:e0:67:e8:88:b5:2c:35:2e:2f:2d:70:5f:de:
                    d1:3f:d7:d8:9d:52:1a:1b:a1:5b:63:3b:11:3a:0d:
                    c3:f5:e1:a3:04:ee:72:70:c4:94:42:e3:ba:b2:8a:
                    ee:e6:80:8c:1f:8c:7f:a0:12:24:43:9b:39:40:9d:
                    78:13:6a:c8:3a:8f:e5:28:87:9b:ba:a4:49:99:cf:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:E7:92:9B:63:3A:5F:14:4B:04:89:5A:B7:6A:35:E4:08:4B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/37643090-c391-3cb3-8160-0cad1480eb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl

            X509v3 Authority Key Identifier:
                keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.112.0/24
                  104.237.112.0/20
                  157.52.32.0/19
                  172.86.0.0/18
                IPv6:
                  2605:e4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:34:a7:70:51:83:67:9d:1a:a8:62:7a:e1:78:ff:ef:c1:4b:
         03:38:0b:4b:d4:5f:43:04:71:96:b4:67:19:8c:3e:0e:f4:cf:
         b5:4f:97:4b:dd:1e:ca:56:e0:54:b4:a2:9d:8c:70:8a:6d:d8:
         39:d7:2a:e9:08:b7:50:40:3f:9d:dd:10:bf:37:91:aa:a5:9e:
         e0:49:f9:88:bd:31:90:5e:10:cc:81:37:64:89:7e:7b:8b:72:
         7b:f9:b9:08:3d:94:70:8f:82:5c:8d:9a:c9:85:7d:a7:fc:e3:
         80:f4:82:73:06:3a:73:da:d6:56:d7:ac:51:d5:cb:bf:7a:23:
         d8:8c:d8:fa:50:8f:c4:d6:89:96:ad:3a:d2:42:7c:db:7e:37:
         c3:95:b1:93:23:ed:8c:b6:dc:9c:bc:8b:76:69:cb:07:cc:1f:
         67:65:cf:2d:11:d3:0a:bb:7c:df:96:18:64:25:76:d5:bf:88:
         1f:47:78:e5:1c:f4:7a:7b:a1:05:00:71:ca:16:78:f1:54:3e:
         76:b4:10:2b:1c:2d:dc:17:67:82:b9:91:fa:4c:cd:0a:32:91:
         6c:11:20:56:a3:5a:5d:96:02:17:62:83:df:03:b7:57:bf:54:
         a8:1c:c6:12:73:9b:03:05:58:41:39:01:70:a5:f0:b2:ad:65:
         ab:0d:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----