Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/8f32e22e-0594-3959-88b0-fb667de373ee.roa
File:                     8f32e22e-0594-3959-88b0-fb667de373ee.roa (raw, json)
Hash identifier:          WjLNi6aKrKHZbFk4YHG6dvraLQmQFTkrlwGaEc//NH4=
Subject key identifier:   E0:63:88:D0:FA:0E:1D:8D:57:E3:89:6E:F4:36:0A:3E:80:BB:36:87
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F4328583B83AF1AECB50EE3884A7C5D54
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/8f32e22e-0594-3959-88b0-fb667de373ee.roa
Signing time:             Fri 08 Oct 2021 04:00:00 +0000
ROA not before:           Fri 08 Oct 2021 04:00:00 +0000
ROA not after:            Thu 11 Jan 2024 05:00:00 +0000
asID:                     59417
IP address blocks:        208.99.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:83:af:1a:ec:b5:0e:e3:88:4a:7c:5d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Oct  8 04:00:00 2021 GMT
            Not After : Jan 11 05:00:00 2024 GMT
        Subject: CN=9cd9ccec-eea9-4940-a241-41fde22bf9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:32:f9:7a:c9:de:4c:f7:ee:74:63:64:39:
                    df:83:5b:68:25:62:ba:c0:5b:fa:6d:11:8f:79:24:
                    5b:ab:84:7b:c8:42:fc:19:f0:c2:0f:bc:c6:1f:6c:
                    f8:c8:ce:6f:81:9c:c6:30:b7:0b:77:8d:0a:80:5b:
                    93:fa:1e:69:99:56:15:ed:37:d0:e1:eb:77:5c:a1:
                    d4:dc:81:e1:39:cc:4e:07:a1:1b:b1:e7:ba:05:e4:
                    a5:92:f9:79:b2:f9:54:b0:3d:9e:af:10:61:a6:0b:
                    1e:bf:54:ef:e7:e9:7b:37:07:be:25:c8:50:4c:17:
                    f5:9a:22:11:47:90:1a:48:8e:ff:20:1c:83:43:ef:
                    02:0f:77:c3:61:4b:69:70:eb:f6:19:ab:05:b5:f9:
                    dc:be:79:da:84:7d:d8:b1:c9:f6:8f:8a:7d:d5:10:
                    ef:78:4d:23:1b:47:9e:55:17:fc:81:59:57:3b:a2:
                    6a:3b:af:58:74:09:f6:6f:8c:0a:36:76:22:16:a1:
                    31:ff:29:1c:b3:b7:c6:65:b0:d6:79:3c:05:f1:04:
                    7a:f5:49:76:36:38:76:5e:60:a3:17:a5:a0:0e:13:
                    1e:b8:dd:7f:7a:32:bc:6c:c3:8e:c9:07:a6:24:82:
                    11:ca:c4:55:48:32:f6:45:b2:1f:d5:22:60:b4:0e:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:88:D0:FA:0E:1D:8D:57:E3:89:6E:F4:36:0A:3E:80:BB:36:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/8f32e22e-0594-3959-88b0-fb667de373ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:99:b1:b5:12:97:03:2f:c4:2c:af:09:71:dc:38:fa:44:77:
         19:02:30:4f:31:f6:0a:b2:28:86:31:e2:8d:c6:37:b7:b7:5e:
         5b:25:5e:79:60:94:e1:ff:cf:8e:b3:3e:58:e7:b2:49:46:0a:
         b1:e4:d7:37:df:aa:73:3b:b4:c5:56:61:03:10:5c:e7:11:4a:
         3a:ae:38:cf:ec:1d:b7:a0:57:37:c0:5d:81:e7:e2:31:fe:24:
         2a:d5:74:d8:d1:af:37:4b:ab:8a:6a:ed:c2:03:9a:ad:7b:f5:
         ee:72:f6:06:2a:5c:d5:8a:91:b7:6f:99:45:f3:0f:f9:36:ed:
         67:99:7f:67:59:92:15:fb:1e:a5:61:bb:e1:dc:54:f4:bd:b8:
         49:01:70:96:4f:ce:eb:fb:31:42:b2:98:94:8e:3f:c2:1b:22:
         c4:50:c0:01:1d:31:42:8b:f5:de:8b:7c:97:a6:a6:43:7b:e5:
         2c:0e:d8:3f:08:ee:33:fb:d0:9a:c3:be:56:5b:b7:b6:80:96:
         07:75:48:42:af:59:91:ff:0b:cf:ff:1a:93:f1:de:17:91:ee:
         55:2d:9f:59:2b:b8:a5:bf:11:cb:67:26:05:37:4c:09:aa:94:
         f1:dc:13:3c:f7:ae:e9:95:65:8f:b9:eb:8f:12:e6:f4:4f:1f:
         4a:2a:87:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDuDrxrstQ7jiEp8XVQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc2MzliMTUtMjE1YS00ODgxLWIxYTQtNzMxZTA0NmJm
NTFjMB4XDTIxMTAwODA0MDAwMFoXDTI0MDExMTA1MDAwMFowLzEtMCsGA1UEAxMk
OWNkOWNjZWMtZWVhOS00OTQwLWEyNDEtNDFmZGUyMmJmOWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ggy+XrJ3kz37nRjZDnfg1toJWK6wFv6bRGP
eSRbq4R7yEL8GfDCD7zGH2z4yM5vgZzGMLcLd40KgFuT+h5pmVYV7TfQ4et3XKHU
3IHhOcxOB6Ebsee6BeSlkvl5svlUsD2erxBhpgsev1Tv5+l7Nwe+JchQTBf1miIR
R5AaSI7/IByDQ+8CD3fDYUtpcOv2GasFtfncvnnahH3Yscn2j4p91RDveE0jG0ee
VRf8gVlXO6JqO69YdAn2b4wKNnYiFqEx/ykcs7fGZbDWeTwF8QR69Ul2Njh2XmCj
F6WgDhMeuN1/ejK8bMOOyQemJIIRysRVSDL2RbIf1SJgtA47wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBjiND6Dh2NV+OJbvQ2Cj6AuzaHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NzYz
OWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFlMDQ2YmY1MWMvOGYzMmUyMmUtMDU5NC0z
OTU5LTg4YjAtZmI2NjdkZTM3M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTc2MzliMTUtMjE1YS00ODgxLWIx
YTQtNzMxZTA0NmJmNTFjLzk3NjM5YjE1LTIxNWEtNDg4MS1iMWE0LTczMWUwNDZi
ZjUxYy5jcmwwHwYDVR0jBBgwFoAUt0iV8CVDnSLLgJsLm2oc3Ae413swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NzYzOWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFl
MDQ2YmY1MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2ZsbUSlwMvxCyvCXHcOPpEdxkCME8x9gqyKIYx4o3GN7e3XlslXnlg
lOH/z46zPljnsklGCrHk1zffqnM7tMVWYQMQXOcRSjquOM/sHbegVzfAXYHn4jH+
JCrVdNjRrzdLq4pq7cIDmq179e5y9gYqXNWKkbdvmUXzD/k27WeZf2dZkhX7HqVh
u+HcVPS9uEkBcJZPzuv7MUKymJSOP8IbIsRQwAEdMUKL9d6LfJempkN75SwO2D8I
7jP70JrDvlZbt7aAlgd1SEKvWZH/C8//GpPx3heR7lUtn1kruKW/EctnJgU3TAmq
lPHcEzz3rumVZY+5648S5vRPH0oqh3c=
-----END CERTIFICATE-----