Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/466326a5-7145-3408-b47a-31b1add0a660.roa
File:                     466326a5-7145-3408-b47a-31b1add0a660.roa (raw, json)
Hash identifier:          HXqODdUqJFwFbT4q3/XToaPLSGBxr1sIjz8/dd6UU64=
Subject key identifier:   51:76:0E:92:02:B8:17:F3:AF:5F:E2:16:A6:B8:14:66:A8:7F:08:52
Certificate issuer:       /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
Certificate serial:       010D0C9F4328583D157B27BFEC9F642E208AEB60
Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/466326a5-7145-3408-b47a-31b1add0a660.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Sun 02 Jun 2024 04:00:00 +0000
asID:                     23122
IP address blocks:        138.247.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:15:7b:27:bf:ec:9f:64:2e:20:8a:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Jun  2 04:00:00 2024 GMT
        Subject: CN=206d733f-8b3c-4769-a69c-08f3e05f6a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:46:ed:74:a7:ec:88:2f:e4:b4:d0:17:eb:
                    78:6a:80:ae:e5:44:80:bb:e9:1a:e7:3f:04:88:05:
                    fd:2b:ca:ad:27:58:a4:fd:6a:d0:63:42:7b:20:e1:
                    4c:03:63:64:51:ed:5e:7e:a1:db:e5:1b:d2:c2:03:
                    28:0b:d4:7e:04:15:8e:d6:85:c0:d4:39:0b:81:ac:
                    88:cc:3c:7c:34:dd:0b:e8:6f:d8:1b:05:2d:66:45:
                    b2:e0:9e:48:7c:6b:7e:88:e2:2b:67:61:5e:07:81:
                    ef:3d:94:2f:05:e8:43:63:64:84:91:62:44:ef:8e:
                    11:f2:9e:18:0b:58:1c:59:14:2f:ad:5e:43:44:46:
                    ad:57:06:32:8c:af:2b:0d:9c:50:ec:23:9c:f6:c9:
                    10:d4:e0:9a:85:28:a5:42:79:c7:ce:1d:96:e6:e2:
                    17:33:2d:6c:39:af:91:35:b3:94:f4:9f:38:a8:77:
                    7a:4d:16:f8:59:db:ba:23:98:45:5a:27:ff:ac:18:
                    b0:84:11:b1:af:c5:03:05:ec:6c:26:e7:b9:19:7f:
                    52:77:cc:38:71:5c:8e:25:27:ec:b8:6c:b6:11:e2:
                    15:d9:fa:8f:cf:cf:cf:4c:83:5c:66:0a:2e:5e:e5:
                    a1:9d:5d:21:a4:3b:63:72:f8:88:b7:a6:2b:20:87:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:0E:92:02:B8:17:F3:AF:5F:E2:16:A6:B8:14:66:A8:7F:08:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/466326a5-7145-3408-b47a-31b1add0a660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl

            X509v3 Authority Key Identifier:
                keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:62:df:44:fb:0c:97:68:dc:cf:d7:9a:fc:ef:21:f2:f4:e1:
         d1:6d:91:69:94:a9:9b:8a:32:66:85:5d:f3:06:ae:f1:24:5b:
         36:d2:38:2b:9a:b1:a5:28:68:fa:8c:05:ff:70:ee:08:1a:d2:
         c0:d5:57:21:7d:dc:a8:27:86:58:e5:29:97:75:4f:f5:e3:90:
         e1:06:c5:11:88:0a:b2:a1:10:74:47:7c:21:b8:b8:e6:39:f9:
         95:10:34:12:e3:38:55:10:0c:e5:e0:7f:cb:34:bf:e4:17:c4:
         2c:1b:5b:b0:01:8a:21:82:df:c6:f2:02:15:c7:f7:f4:60:9e:
         c6:c6:63:51:7f:4f:5b:ff:f1:e6:b6:a8:9e:b2:ac:d8:d3:99:
         bb:6c:34:5c:6a:ab:ed:3f:2a:9a:6b:df:e7:9c:5f:19:d2:3e:
         29:c6:04:ca:a1:ce:73:2f:34:fa:47:3a:e9:c2:e5:37:20:77:
         a4:2f:79:4b:89:cf:92:26:08:b2:d0:07:68:2a:d0:4b:e6:29:
         dc:81:21:ee:75:d3:05:6d:06:dd:0a:29:81:09:f5:48:b9:03:
         50:2d:5a:24:c1:c2:07:23:d6:dc:b0:10:9a:c6:fd:16:15:f7:
         f6:c6:ce:ea:43:ac:19:5c:09:61:52:d5:2c:30:d3:01:3c:9b:
         06:f4:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----