Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9286488e-dd3f-3292-8d43-523c5fef585a.roa
File:                     9286488e-dd3f-3292-8d43-523c5fef585a.roa (raw, json)
Hash identifier:          wVMlaSxp+jPpqzEUVrmYKLzJu1GKjN93PRd9gqgtCDE=
Subject key identifier:   C1:45:96:FE:DF:CE:85:7B:C7:AF:29:F9:D8:AD:43:D5:34:3A:2A:80
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840577590E031E1F3D18BA62020
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9286488e-dd3f-3292-8d43-523c5fef585a.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Fri 28 Mar 2025 04:00:00 +0000
asID:                     206092
IP address blocks:        216.10.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:57:75:90:e0:31:e1:f3:d1:8b:a6:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 28 04:00:00 2025 GMT
        Subject: CN=39affc76-de3a-47f7-9710-c751bc03379d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:ac:a0:c4:d1:03:49:c1:b0:24:f2:fc:fd:
                    d8:1d:90:c1:be:0c:93:ca:70:ea:b1:94:f4:46:60:
                    09:7f:cc:43:38:95:f7:74:b6:f5:ff:0c:a5:cd:30:
                    ee:a1:73:25:0b:31:cd:8a:f5:7c:51:21:34:ee:5b:
                    e9:64:ea:19:e7:4b:01:25:a1:08:c3:25:bb:14:48:
                    7f:db:b8:d1:b2:9d:80:91:e2:3f:d1:5d:fd:92:a7:
                    32:ff:cd:59:13:22:a5:30:e7:ae:21:ed:4a:14:4b:
                    ba:59:41:89:57:7e:5d:d4:66:5f:92:4a:22:82:f1:
                    3b:f5:d0:fe:5b:08:7d:8f:56:85:14:e5:9b:2f:19:
                    65:45:80:c2:99:46:e2:0b:79:78:bf:3d:5d:07:75:
                    03:57:14:0d:72:b6:d6:f5:1f:36:1b:18:bf:b8:6c:
                    ee:d6:18:a8:a0:83:af:aa:86:d9:8f:40:26:89:d4:
                    e3:19:ce:16:cc:a3:aa:1f:fa:14:fd:b0:1c:e5:95:
                    0b:3b:f4:9c:64:7e:f3:f0:90:23:1b:a8:6d:8f:46:
                    ba:ca:09:b3:a7:61:ba:d0:5b:ce:bc:42:0c:62:11:
                    d1:5b:65:5b:21:0f:9b:1a:dd:1b:67:39:94:05:19:
                    5a:de:e3:c4:4d:d9:f8:fb:7e:fa:78:de:07:3f:07:
                    45:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:45:96:FE:DF:CE:85:7B:C7:AF:29:F9:D8:AD:43:D5:34:3A:2A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9286488e-dd3f-3292-8d43-523c5fef585a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:b0:a5:f6:fd:a8:c0:69:ee:8f:36:fd:70:6c:4a:8d:7d:
         56:1f:1d:01:21:1b:7a:1f:15:85:91:d8:4e:b9:af:a1:8b:b5:
         04:d9:8f:37:9c:28:c4:c8:ca:51:8e:b2:16:31:07:ac:59:e9:
         b2:5a:20:e2:08:c0:26:3a:8a:c7:5b:69:dd:ed:a6:8b:fd:71:
         46:28:72:0a:73:dc:d6:58:b2:17:05:ed:73:5e:fe:52:24:e4:
         81:07:53:28:08:39:d3:ae:ba:c0:20:80:e8:7a:5c:40:e2:1e:
         07:75:98:a3:40:40:94:0c:18:76:3c:06:af:4e:5b:00:06:cb:
         e8:b7:a7:1d:9b:45:9b:52:14:2e:a0:f4:2f:fb:9e:af:ef:89:
         99:0e:55:fe:74:2a:d2:14:c8:00:2f:ec:ca:4b:48:06:7d:af:
         5d:76:ec:eb:3f:9b:41:b0:a5:29:74:9c:28:86:56:aa:b2:63:
         4c:d4:7e:8d:ce:0b:67:8f:0c:64:c0:40:8c:a6:bf:56:45:95:
         42:f0:37:c6:65:f5:44:38:98:2d:b0:8d:b2:80:2c:a4:2a:de:
         a1:5b:08:d2:75:2d:a1:89:d1:84:16:10:37:49:df:3b:82:5b:
         2e:97:d4:6d:53:da:c6:c8:de:88:11:ad:cc:65:07:a5:fe:57:
         f5:97:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----