Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6ba0e00a-6f95-329a-b2a8-d5087abe3a3b.roa
File:                     6ba0e00a-6f95-329a-b2a8-d5087abe3a3b.roa (raw, json)
Hash identifier:          Ex/oStav67y7FHCa2f4CbnVdyOifSNF0ELEnsy2mFkY=
Subject key identifier:   3F:84:4A:9D:B1:39:A9:68:63:51:08:37:0D:62:20:F5:F4:B8:FD:04
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583DEBE80D756F028B63FE44E500
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6ba0e00a-6f95-329a-b2a8-d5087abe3a3b.roa
Signing time:             Sat 14 May 2022 12:00:00 +0000
ROA not before:           Sat 14 May 2022 12:00:00 +0000
ROA not after:            Wed 15 May 2030 04:00:00 +0000
asID:                     1239
IP address blocks:        192.190.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:eb:e8:0d:75:6f:02:8b:63:fe:44:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 14 12:00:00 2022 GMT
            Not After : May 15 04:00:00 2030 GMT
        Subject: CN=133850d6-5acb-4c80-a9b5-a0bab05e68b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:2b:53:7b:a7:86:44:ac:2c:86:86:36:1b:
                    e5:6a:86:3d:69:6e:68:28:0f:55:8b:a2:16:38:bc:
                    80:ae:b5:40:21:83:6b:85:da:ed:cb:5c:7f:2b:b2:
                    34:56:a5:5f:bd:07:13:91:47:df:72:5b:4a:8f:26:
                    98:01:9f:2a:d7:40:4b:d7:8a:9a:08:d3:77:97:20:
                    a2:2a:08:f7:80:ea:eb:e0:32:54:23:19:db:a5:8a:
                    a7:6e:61:23:77:89:84:36:24:c9:3f:86:87:b2:1e:
                    5e:f4:1e:27:1b:03:be:02:13:6c:62:cb:49:57:ea:
                    72:66:23:ca:11:ce:44:19:ed:db:ec:fb:e6:88:1a:
                    7a:08:ec:e3:d9:53:8b:b8:54:69:70:8d:56:b6:c8:
                    b2:d3:cc:eb:ca:38:3f:86:a1:43:71:93:14:4f:e5:
                    f8:d0:5d:92:05:ce:79:a8:50:09:98:4f:2b:29:7f:
                    9d:8c:97:73:ef:1e:0c:4b:29:22:1c:03:77:09:ea:
                    0c:35:68:6f:41:87:cf:f9:ea:75:29:aa:fb:7a:bf:
                    85:de:8f:96:52:67:2b:37:c3:eb:09:5e:83:c8:62:
                    c7:15:38:89:58:b3:23:d5:74:62:18:80:67:c3:3b:
                    1b:29:1d:49:5f:ee:62:40:59:bb:27:0f:12:9f:1d:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:84:4A:9D:B1:39:A9:68:63:51:08:37:0D:62:20:F5:F4:B8:FD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6ba0e00a-6f95-329a-b2a8-d5087abe3a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:33:2f:41:ed:6f:b2:22:2a:fa:a3:80:e1:d8:b7:3d:c6:
         98:a9:ca:a6:77:c3:83:e9:4f:51:35:6a:c0:b3:4d:15:81:ef:
         cf:39:40:a8:b3:20:69:3c:72:9e:4d:1e:68:df:17:a0:02:3d:
         80:99:7f:eb:9e:4b:79:35:23:df:48:5a:c2:a9:1b:60:36:5f:
         29:fe:f5:55:a8:81:d3:3d:67:e1:9c:48:08:b5:c8:84:18:1d:
         54:74:b8:05:db:03:14:89:15:6d:9f:50:5a:bd:ff:2b:ed:78:
         6d:c3:6a:1a:db:bb:96:18:94:42:33:57:91:1a:41:c8:14:79:
         57:33:3f:51:22:7c:c6:c1:44:30:81:74:21:ba:a7:34:71:b1:
         0e:ed:15:24:4f:49:00:7e:f8:95:99:7f:33:71:43:85:77:49:
         c0:9d:1b:4a:15:6c:75:01:94:67:9e:9c:5b:b3:6e:6f:4c:a0:
         30:dd:2c:d4:20:d2:3e:2b:9e:5b:7f:a8:05:74:6c:70:c2:07:
         38:35:35:10:0a:2c:01:f3:d4:cc:9d:98:34:9d:19:69:fe:5b:
         d5:94:81:7f:7b:2a:8e:fd:c1:95:ee:2b:31:1a:2f:17:b4:40:
         65:a2:62:b3:1d:29:25:80:a0:42:67:16:18:1a:bc:66:28:e5:
         42:90:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----