Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/416a811e-d361-3ae5-833e-0da65154a412.roa
File:                     416a811e-d361-3ae5-833e-0da65154a412.roa (raw, json)
Hash identifier:          52/Tgulv6VXf3AS/7TmWrtNd/jzrYkeQRBQrv53cpLA=
Subject key identifier:   08:58:81:2C:29:B1:06:D7:79:8F:D2:3D:3B:1B:25:3C:DD:11:30:0A
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328583C83EE948EFF189FE9486DFF00
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/416a811e-d361-3ae5-833e-0da65154a412.roa
Signing time:             Fri 07 Jan 2022 05:00:00 +0000
ROA not before:           Fri 07 Jan 2022 05:00:00 +0000
ROA not after:            Thu 11 Apr 2024 04:00:00 +0000
asID:                     51999
IP address blocks:        165.140.8.0/22 maxlen: 22
                          2602:fbe9::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:83:ee:94:8e:ff:18:9f:e9:48:6d:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jan  7 05:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2024 GMT
        Subject: CN=6cb65079-eacb-4ade-b5cc-bcfa896f1ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c5:2c:09:dd:fd:1d:40:20:96:ff:11:05:e6:
                    1c:02:d7:26:49:de:bc:b0:47:41:cc:2f:51:13:82:
                    53:f7:1d:9b:fa:c4:d2:6d:c7:70:02:4e:dd:f6:da:
                    93:e6:fc:57:ca:4b:69:15:b8:87:1a:05:a6:78:d4:
                    04:0e:f3:8b:95:89:14:8c:2e:25:74:4c:b9:36:31:
                    3e:07:d5:30:08:86:7e:99:8d:ec:12:4c:f1:24:3a:
                    50:95:5a:fa:ce:ab:96:3c:ca:74:b7:c7:00:66:03:
                    91:a7:fd:48:b4:bc:47:88:b9:56:27:67:ed:c8:77:
                    d5:74:fa:55:c7:86:d0:8f:9c:29:dc:b1:31:61:a1:
                    36:ae:d1:0f:51:61:58:d6:67:84:4f:45:ab:1d:20:
                    a6:2e:50:46:b7:72:60:84:13:5c:78:47:8a:82:64:
                    d9:22:d3:23:82:5b:a9:0a:56:0f:1d:a6:3f:50:28:
                    f2:16:fa:da:ce:dd:35:95:34:d1:75:b3:61:d0:2c:
                    ed:70:8c:82:1c:74:9a:bf:ef:dc:ea:5b:92:91:15:
                    19:b9:1f:7d:2b:fc:bf:7b:ad:fe:39:99:5b:b2:79:
                    bf:a9:f4:cb:a8:a6:87:cd:f0:8b:cb:da:cd:28:00:
                    9b:4a:ab:14:74:e3:07:83:7a:3c:63:c3:ac:cb:23:
                    85:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:81:2C:29:B1:06:D7:79:8F:D2:3D:3B:1B:25:3C:DD:11:30:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/416a811e-d361-3ae5-833e-0da65154a412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.8.0/22
                IPv6:
                  2602:fbe9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:93:90:8a:88:5c:9b:8c:b2:b5:ea:cc:3c:12:32:c6:62:
         7a:a9:4e:07:17:78:6b:17:d8:83:82:3a:97:69:f2:7c:d6:b6:
         15:28:27:59:1e:54:33:f8:50:70:76:02:ea:21:39:76:0f:c2:
         ad:d3:9b:28:09:63:f3:82:f1:1f:2e:9d:17:e2:85:cc:0f:b3:
         4e:fd:62:32:a5:32:c6:86:91:fe:c4:9c:27:d3:e8:c6:7e:3a:
         dd:cb:3b:e9:b8:8b:5d:a0:79:0a:71:03:40:93:e1:64:80:74:
         af:a6:5a:1b:4b:df:cb:bc:b7:ba:f4:8e:b1:e0:a0:6b:49:2e:
         b6:a4:2d:f0:8a:9f:78:bd:9a:0f:68:fd:93:26:ff:cc:9b:4c:
         1e:04:66:90:c7:6d:a5:64:81:b8:a7:82:a0:6e:c7:d6:a9:40:
         bf:7f:b3:73:60:7a:ad:69:6d:ca:5a:f4:34:f5:d6:3f:ed:4c:
         83:04:12:b0:6e:e6:30:79:65:58:a0:41:20:52:ed:06:f2:0c:
         ff:21:08:ba:62:38:f2:ac:88:11:c6:14:01:a3:5d:6a:cc:7a:
         55:59:ee:4f:c4:8b:c6:0c:bf:3f:ef:3f:fd:e4:9c:31:ae:05:
         01:7e:da:51:a8:c0:3c:e6:0b:b2:41:1d:e7:7e:7f:39:28:2a:
         eb:23:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----