Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6b21588b-db96-358f-9bcd-f440da37a7a7.roa
File:                     6b21588b-db96-358f-9bcd-f440da37a7a7.roa (raw, json)
Hash identifier:          E1YW+xQh+HztD55bkVrz5Yh4ZoqpnWKu/j7Zd2yGFfI=
Subject key identifier:   E7:BA:F8:68:A2:5E:31:D9:AD:38:9A:0E:83:CD:B7:D2:9E:85:74:F9
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285841F5F2AB04422DC53F4FBA2F40
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6b21588b-db96-358f-9bcd-f440da37a7a7.roa
Signing time:             Mon 22 May 2023 01:00:17 +0000
ROA not before:           Mon 22 May 2023 01:00:17 +0000
ROA not after:            Sun 20 Aug 2023 01:00:17 +0000
asID:                     22142
IP address blocks:        69.51.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f5:f2:ab:04:42:2d:c5:3f:4f:ba:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 22 01:00:17 2023 GMT
            Not After : Aug 20 01:00:17 2023 GMT
        Subject: CN=31bdf0cb-68d0-45bf-925b-bf84cd90cc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bc:16:cb:a2:49:85:69:71:ae:9f:b8:48:90:
                    87:36:4a:08:08:28:0c:9b:21:ce:b3:ad:52:d4:cd:
                    f6:14:3c:18:71:27:03:5c:f6:e3:1a:41:9f:ec:c4:
                    14:c6:2a:63:b7:a8:ea:2f:bd:8f:fa:1b:e3:d4:10:
                    7f:8e:c6:a0:df:e7:13:c4:4c:da:1e:b7:2d:80:8e:
                    41:30:8f:48:84:c9:20:15:e8:72:48:64:85:87:d0:
                    c1:be:ee:58:e3:90:e3:34:0a:ac:fb:10:71:44:df:
                    61:31:f7:12:42:8f:32:f1:e6:e6:f7:9b:34:2d:df:
                    45:50:ab:d5:f0:5e:80:6a:ea:bf:3e:84:93:a6:fb:
                    00:8c:01:7f:61:b1:4b:d3:d1:aa:01:6c:04:49:9d:
                    67:72:56:8d:ae:6d:4d:da:6b:0a:42:4f:99:34:5e:
                    84:23:23:90:b0:df:e5:01:81:28:c8:2e:5b:cc:0e:
                    7c:4b:b8:cc:b3:05:ff:84:40:29:08:c2:3d:0f:2e:
                    1e:0d:5f:0f:ab:88:21:60:ea:c4:24:07:92:6a:b6:
                    c9:e8:fc:d6:71:99:13:5f:ef:5a:86:83:c0:1f:fc:
                    da:8c:c6:35:7f:5b:b2:a0:f9:86:03:e5:91:08:76:
                    9f:83:b2:71:85:6e:fc:1e:35:57:e1:af:47:12:ac:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:F8:68:A2:5E:31:D9:AD:38:9A:0E:83:CD:B7:D2:9E:85:74:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6b21588b-db96-358f-9bcd-f440da37a7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:72:87:3f:59:15:99:9c:c8:10:95:6c:60:41:9a:92:83:
         ba:8e:b4:fc:57:4f:1a:03:4f:f7:cf:7b:3e:9b:a8:ae:5d:a2:
         a6:47:42:4a:c6:c0:63:34:85:8f:df:30:2c:86:f8:ee:be:a9:
         de:18:f2:16:bf:7d:5f:b9:ff:42:ee:9e:ad:60:c8:3d:78:2a:
         4b:f9:a9:bd:88:18:6f:f0:94:50:da:f3:b6:37:b0:6c:a9:6a:
         fd:81:f4:4b:f9:02:2d:01:61:bb:fe:bb:b3:e7:27:e7:c4:38:
         05:84:6a:c5:44:bd:a8:04:e8:34:b1:d6:e9:78:18:33:dc:f3:
         d9:33:5e:b2:c3:33:87:ea:06:64:98:e9:7f:19:81:c1:a3:9b:
         97:68:68:3d:ea:b5:50:59:68:2f:aa:85:95:4f:6a:36:2f:a2:
         7b:66:8f:78:73:6f:c6:79:7d:24:b6:5e:bd:f8:c8:ad:a2:55:
         6c:63:81:f5:3d:2d:68:6d:6f:31:0f:fe:22:fd:bd:72:eb:54:
         62:da:f0:f4:16:c0:33:d3:81:e6:1a:13:8a:60:67:0e:35:9d:
         14:ab:58:0d:a9:7d:90:1e:68:b9:9f:5f:78:42:1d:c3:e4:96:
         46:fe:a7:27:71:9a:54:88:45:45:30:05:a1:c3:12:8d:df:07:
         fd:cb:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----