Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/40e83f21-e8fc-3305-b678-221ab32fbb21.roa
File:                     40e83f21-e8fc-3305-b678-221ab32fbb21.roa (raw, json)
Hash identifier:          +3BKbyQaUuIuLrN3W0zkJxtG/q4/rISN79M+tVKkPV8=
Subject key identifier:   38:CF:8C:FC:48:30:8B:37:CE:43:F2:5D:46:8C:4A:A7:69:43:FB:91
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858403C1CD1992BDCA6A55540E580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/40e83f21-e8fc-3305-b678-221ab32fbb21.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 18 Mar 2025 04:00:00 +0000
asID:                     211585
IP address blocks:        206.206.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3c:1c:d1:99:2b:dc:a6:a5:55:40:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 18 04:00:00 2025 GMT
        Subject: CN=e61ccc94-c720-42c2-aa8e-b652e6ab0843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:fa:23:23:50:4c:a1:ee:3d:85:64:66:10:
                    58:1d:2d:d4:36:d0:35:44:3a:27:76:53:95:b7:e5:
                    e1:7f:da:e2:51:48:8b:49:7f:cc:bf:d4:65:dc:f4:
                    9d:c4:af:24:9d:64:c8:f9:bc:b0:0c:b4:11:8e:fa:
                    60:2f:11:47:80:12:57:a8:7a:2b:5e:a8:d9:5c:c4:
                    98:88:76:d5:ce:28:19:62:79:88:7d:a1:0e:dc:89:
                    21:bf:fa:5a:ae:31:49:5f:c6:2b:78:5e:c3:7e:3f:
                    dd:c4:db:69:d8:d4:4a:34:32:61:53:e7:43:54:20:
                    44:83:61:15:05:84:0e:b4:3c:22:d2:d6:3c:ae:7b:
                    3b:e0:f4:cc:35:9e:0e:0d:b0:27:29:be:e9:20:11:
                    77:c3:1b:09:fa:3e:36:2c:97:3c:79:d4:f7:92:0b:
                    e6:f1:3d:92:0a:f0:fa:00:6c:e5:66:1d:83:23:8e:
                    c2:75:1a:1f:fd:57:82:41:31:00:b2:5c:18:46:81:
                    62:d1:5a:57:4c:d9:96:72:88:3f:61:a9:4c:93:22:
                    64:e0:ae:38:44:55:0a:ca:2e:45:d9:17:a1:26:7e:
                    41:35:43:45:b7:2c:ef:24:d2:4a:5b:3b:16:85:a5:
                    05:28:88:1d:5e:69:38:5f:11:f8:e8:87:05:db:42:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CF:8C:FC:48:30:8B:37:CE:43:F2:5D:46:8C:4A:A7:69:43:FB:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/40e83f21-e8fc-3305-b678-221ab32fbb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:e7:df:93:bf:4f:d6:53:fd:ea:46:92:d5:dc:f5:2a:70:f4:
         73:45:e2:a3:a0:25:d9:77:26:33:d3:bb:9b:7f:e6:b0:a9:29:
         a9:2f:4c:f7:68:b9:31:64:17:68:2a:0b:8d:d0:33:3f:5b:4b:
         73:11:a0:55:fa:bc:f9:58:47:1b:96:2d:71:e7:27:e6:4a:4c:
         81:95:6d:68:ab:2c:43:40:f6:4e:30:5e:5d:c1:70:80:4f:6a:
         33:58:32:f2:9a:09:96:b9:39:0c:aa:8a:a2:fa:f0:4a:50:93:
         aa:42:e8:97:87:43:ea:bf:3e:a3:37:d9:d3:8b:37:96:a3:61:
         01:cb:81:16:6a:3f:69:15:03:32:3b:ff:72:38:f9:af:57:3f:
         35:51:9d:25:a4:c1:7d:bc:cb:5c:17:9d:1b:a6:1c:70:3b:56:
         09:2e:35:81:ff:17:c4:41:bf:4f:e7:73:ec:50:8d:5c:e9:84:
         5a:b3:b5:d7:cc:e1:cf:ac:02:46:58:13:c7:f4:5a:4c:f3:5a:
         dd:5d:a0:80:5c:3c:d0:68:2e:58:05:8a:f5:a5:54:8a:49:a1:
         b3:1b:61:dd:ab:89:a2:91:1c:8f:33:04:dd:fd:ec:53:d2:83:
         0e:35:ec:6d:4b:be:43:ac:fe:46:58:8b:6c:dd:7f:58:69:fa:
         e9:72:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----