Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/f3b75ce7-96e7-308c-b75f-a4099943a857.roa
File:                     f3b75ce7-96e7-308c-b75f-a4099943a857.roa (raw, json)
Hash identifier:          64w1Ec8YP6u14pfizaHnwtwPW7kO/4/etB3RtakdXJc=
Subject key identifier:   82:E2:10:79:2C:5F:A4:97:A9:4A:31:75:B3:3A:AF:88:B1:32:FD:B6
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328583B9D75C5AF53844EEC1FB10900
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/f3b75ce7-96e7-308c-b75f-a4099943a857.roa
Signing time:             Thu 09 Sep 2021 04:00:00 +0000
ROA not before:           Thu 09 Sep 2021 04:00:00 +0000
ROA not after:            Sun 14 Oct 2029 04:00:00 +0000
asID:                     62513
IP address blocks:        74.119.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:9d:75:c5:af:53:84:4e:ec:1f:b1:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Sep  9 04:00:00 2021 GMT
            Not After : Oct 14 04:00:00 2029 GMT
        Subject: CN=0223dd9e-f997-4b80-9266-f755c20a4060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:3b:21:4d:1c:e7:c2:d4:7b:bf:02:50:de:
                    55:14:33:95:12:4e:da:8e:c8:e5:16:cb:23:e0:f7:
                    7c:12:17:cd:e9:8d:42:e8:ea:36:d1:b6:ab:79:c7:
                    e0:61:60:0b:82:f0:b1:fc:75:24:79:ef:e4:28:01:
                    30:16:c3:a6:89:c4:a6:35:cf:50:cf:03:69:1f:a1:
                    b9:58:29:4e:84:0c:96:7b:83:b4:bf:02:fd:22:40:
                    e9:05:02:91:e7:e7:25:71:e7:0f:06:b3:29:ba:49:
                    78:a2:b6:0c:bd:0e:da:ae:a5:76:07:dd:54:aa:d2:
                    2b:12:7e:28:40:ba:e8:5d:fa:a9:c3:0d:c5:a0:9d:
                    fb:75:9e:af:4f:4d:ef:1d:64:53:63:26:6b:5f:2c:
                    3b:05:c9:dc:4e:9e:51:97:f6:6e:eb:7d:ab:46:cf:
                    f9:e6:4d:d9:b1:92:4e:44:c9:c5:b3:3d:d9:72:c7:
                    43:f7:02:c1:1d:35:10:fe:58:8e:4b:74:66:42:21:
                    97:cc:5c:29:4c:40:f9:ab:b4:a5:cb:80:d5:9a:56:
                    e7:d8:d8:68:2b:cc:c7:bc:e1:76:e3:33:20:e1:a0:
                    16:4b:6d:17:55:33:8b:df:b1:0c:7e:5c:4a:47:ec:
                    43:2e:9a:3f:63:df:c3:16:a3:8f:60:10:16:56:f5:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E2:10:79:2C:5F:A4:97:A9:4A:31:75:B3:3A:AF:88:B1:32:FD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/f3b75ce7-96e7-308c-b75f-a4099943a857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:27:db:a4:53:5a:6d:1b:43:ec:f9:3f:39:8b:35:d6:f4:
         fe:92:ff:65:4b:ff:79:59:ae:9b:11:95:67:0e:54:ef:3d:8f:
         34:44:0b:55:3a:ce:7b:54:aa:8d:ca:b9:99:36:95:b0:d1:65:
         b5:84:ac:94:52:2c:72:cd:d3:b8:b1:9a:a8:ee:92:de:15:2f:
         9b:9f:54:30:39:b1:8b:8f:5c:84:d3:c2:2d:1d:5d:88:44:62:
         40:7b:36:c5:df:bc:bb:bd:f5:9d:70:9b:5d:c9:4c:bb:2e:3f:
         36:c3:75:e3:49:3e:ae:7c:51:74:d6:41:94:d7:8d:2a:57:ef:
         6b:f2:68:13:26:14:c6:d2:93:22:96:26:6c:31:7c:1e:42:04:
         e4:f5:4b:3b:4c:52:2c:77:e8:37:f0:73:f0:9f:bd:1e:50:4c:
         ff:6f:ac:81:f2:4c:d9:c3:5e:02:3c:af:e8:70:a6:4d:ae:12:
         c5:67:00:02:a8:97:c2:71:ad:5f:17:bc:e8:88:14:b8:8b:49:
         a5:e2:5f:ab:ef:16:ef:57:f1:78:a2:8f:af:78:59:dc:9d:1d:
         9f:16:a8:7a:50:df:9c:b0:ca:b4:f9:d6:2a:9c:86:1d:4e:0b:
         06:89:5d:8a:33:8c:a0:c8:f0:3d:82:59:35:c0:59:24:c4:76:
         cd:0c:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----