Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e199badd-b552-3ca2-b0da-b38579651539.roa
File:                     e199badd-b552-3ca2-b0da-b38579651539.roa (raw, json)
Hash identifier:          jPuZ/KdScdgBAGXoP/fX67NorgGUixCRRRTNg00dsPE=
Subject key identifier:   4C:E5:70:61:1B:6D:E1:36:F2:F4:2C:D0:60:C8:C3:07:9C:2E:E7:23
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583B055A791C71784B4EEE3EED80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e199badd-b552-3ca2-b0da-b38579651539.roa
Signing time:             Sun 22 Aug 2021 04:00:00 +0000
ROA not before:           Sun 22 Aug 2021 04:00:00 +0000
ROA not after:            Fri 23 Aug 2030 04:00:00 +0000
asID:                     1239
IP address blocks:        140.228.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:05:5a:79:1c:71:78:4b:4e:ee:3e:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 22 04:00:00 2021 GMT
            Not After : Aug 23 04:00:00 2030 GMT
        Subject: CN=c7323160-a510-4664-810c-3d0858fb8d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:2a:59:b5:b7:01:5a:ce:45:3b:58:79:16:
                    6c:f0:9a:a5:bf:a2:45:1a:0b:a4:dd:63:fd:36:c8:
                    c9:f6:ee:34:ef:0c:c0:0e:80:ad:84:a4:94:18:96:
                    0e:40:a1:e1:ce:84:40:a6:1a:db:0f:1c:b3:6c:30:
                    71:ac:5e:6f:d8:17:69:00:a2:e4:b8:2b:08:55:1c:
                    2c:e9:da:29:72:39:47:7d:f5:24:4e:52:33:b8:c7:
                    f4:ae:3c:b5:12:f4:b3:2f:6f:f7:4d:13:3f:77:83:
                    25:22:1a:81:6c:f1:e2:92:f4:1f:37:1e:96:4d:cb:
                    98:0c:17:17:69:9d:f6:4e:2a:21:8c:37:de:e6:b3:
                    da:eb:71:0c:bc:b2:1d:14:49:54:44:55:c0:60:3e:
                    e0:49:db:34:10:2d:74:be:c2:31:0f:8e:30:05:cd:
                    05:b0:53:82:3c:5a:d8:39:fa:26:ff:5c:c1:83:31:
                    1f:8e:14:7a:0f:a8:ce:21:b7:a1:53:23:cf:b0:09:
                    4c:b0:9a:b8:20:9b:b2:fd:47:bb:02:e5:da:96:12:
                    12:3b:cc:a7:ae:9c:a9:98:a8:b8:6c:0a:e7:65:88:
                    f1:7d:96:69:a0:23:74:ac:1b:c4:e4:dd:5a:b3:4a:
                    6e:af:78:ed:8d:1a:cd:4c:7a:51:e0:e5:29:3b:0a:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:70:61:1B:6D:E1:36:F2:F4:2C:D0:60:C8:C3:07:9C:2E:E7:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e199badd-b552-3ca2-b0da-b38579651539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:42:bf:ee:35:c7:e8:a4:d1:bf:7b:94:0b:5f:6a:10:37:
         29:d9:31:14:23:2d:94:8b:a8:fc:08:9f:6c:06:d8:81:34:f1:
         f3:cd:99:91:63:24:66:73:a8:04:1f:13:e7:70:f8:17:d1:f4:
         ab:f1:0b:11:b1:42:15:26:c7:47:1b:41:1a:47:a8:9d:d7:81:
         5c:66:67:63:31:99:34:a5:b8:68:48:e1:74:07:ee:81:e1:0e:
         73:6b:c7:bf:0c:15:a9:ba:4f:ee:24:2f:4d:76:2f:47:42:d1:
         57:df:2e:0d:59:46:13:d9:45:63:e3:d0:3d:a3:d1:a3:a3:a2:
         f0:68:d4:00:a4:a9:a5:61:3d:bb:81:9f:e7:8e:ed:09:22:49:
         42:6e:45:84:84:98:a9:8d:7a:11:6a:fa:93:4a:ea:13:e3:31:
         29:c0:38:b4:24:ba:76:25:a3:cd:fb:f4:c9:30:f0:68:6d:d2:
         6b:01:ab:b3:98:2c:20:62:00:45:2c:a9:28:94:1f:80:e3:44:
         f8:07:62:d9:2f:c6:8b:36:55:ea:68:1d:58:44:45:e6:70:39:
         98:4e:fa:47:82:73:dc:e5:98:7c:bb:3c:26:76:ef:0e:36:28:
         3b:10:6e:fc:89:2e:84:9c:56:39:a7:09:f8:f0:00:d6:9c:b3:
         9b:f1:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----