Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/20166c54-66cf-3d27-934a-9bf11d40e509.roa
File:                     20166c54-66cf-3d27-934a-9bf11d40e509.roa (raw, json)
Hash identifier:          Yo1cqMg3iPsBF7NbsxBD3U6yepquxDyTEBhgDCVa/gE=
Subject key identifier:   FE:2B:02:0A:6C:13:1E:DC:BE:79:41:61:8E:95:0B:4F:62:85:6C:92
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584155CF7EBC1B3860A096829AC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/20166c54-66cf-3d27-934a-9bf11d40e509.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Fri 27 Jun 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        173.211.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:55:cf:7e:bc:1b:38:60:a0:96:82:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jun 27 04:00:00 2025 GMT
        Subject: CN=61457d7e-dd91-491f-9974-25e706f0a665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9d:95:75:73:45:db:15:78:58:9e:1e:1b:73:
                    64:45:41:13:4f:ba:dd:5f:24:f0:ba:f4:fe:66:33:
                    24:51:eb:57:5c:a4:6c:3c:fb:c9:27:74:39:45:83:
                    15:f6:a3:17:5e:db:26:76:b0:65:03:9f:99:0d:48:
                    ce:91:9c:e6:cf:f2:80:b0:14:8d:9f:f2:7e:bc:b4:
                    72:5f:d8:e2:9c:5e:22:2b:ee:af:c3:fe:0d:47:a9:
                    56:b5:1c:d5:11:5a:90:03:27:d4:0b:1b:ca:af:99:
                    b4:7c:71:68:02:c9:ed:c3:2b:3e:90:45:79:0f:4a:
                    67:1f:f3:a2:20:2a:e8:d2:12:4e:cd:15:f2:97:f9:
                    50:8f:f0:db:cc:9d:c1:ca:09:d6:ca:60:73:74:4d:
                    41:4c:fc:fb:ee:e8:cd:fc:95:c6:3f:1f:ce:c2:2b:
                    53:e6:de:f1:69:54:60:b7:70:6b:c7:af:9e:4d:19:
                    58:8d:2d:e5:05:10:a8:35:2c:ac:59:a4:5a:9a:ec:
                    f5:02:bb:20:91:5d:f2:5e:78:0f:50:e3:32:1b:82:
                    ea:f1:70:7a:19:f6:d2:66:cb:50:76:33:21:62:2a:
                    ae:be:57:51:49:4b:c0:19:f1:ba:ec:55:81:72:b7:
                    d3:59:44:e3:e4:6b:11:8f:fd:9f:9c:6c:31:02:c5:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:02:0A:6C:13:1E:DC:BE:79:41:61:8E:95:0B:4F:62:85:6C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/20166c54-66cf-3d27-934a-9bf11d40e509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:a0:f9:32:e0:03:1c:ef:77:0e:46:38:30:d8:b2:48:5e:8d:
         d4:f0:4b:af:84:d1:cd:ca:af:8f:51:60:05:06:10:3d:90:f4:
         d7:bc:be:8e:03:26:13:d1:f1:09:0f:b0:67:19:1d:a5:9d:1c:
         be:d8:ba:ec:d8:3c:e3:62:ea:12:d3:a8:53:15:7b:51:79:72:
         d8:76:98:0a:af:30:48:f7:40:4b:a0:83:c9:32:82:b7:fb:03:
         fb:5b:99:16:e3:91:2f:e8:94:9d:fd:2e:5b:14:84:75:fc:a2:
         43:6c:5a:1f:cf:28:fd:25:4b:d3:73:8e:11:0d:d3:fa:b9:05:
         2a:62:8b:21:e8:20:fe:69:51:06:1a:37:16:25:eb:72:73:2c:
         1d:e8:c2:1a:03:6e:17:53:cc:8e:b2:ce:ff:c7:71:b7:71:3a:
         fd:ab:26:73:23:e2:7b:84:8a:39:26:33:34:01:37:e2:61:f5:
         bb:c5:df:5c:76:37:0a:9c:3c:72:2b:12:57:f2:11:b1:a6:fb:
         ce:82:6d:4b:ed:54:c2:6b:cc:09:25:2c:43:7a:23:29:4d:69:
         e9:f1:19:11:cc:c8:bb:69:8c:56:2e:a3:5f:1f:b9:4d:d7:d7:
         67:a6:b2:11:b8:44:60:03:58:14:64:8d:c1:cd:02:44:b0:e7:
         d1:46:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----