Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c896d2ab-5c83-3eab-9629-900e1cd33d5a.roa
File:                     c896d2ab-5c83-3eab-9629-900e1cd33d5a.roa (raw, json)
Hash identifier:          5kOcjh9tvysBPE7eDFEsqTsUTcCMsa3xQsYNuGaAMms=
Subject key identifier:   FC:69:7D:45:09:0A:39:CB:5C:55:31:C0:47:FA:55:51:BD:50:26:AB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858403BEBB0D3555E2F0EC956D4C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c896d2ab-5c83-3eab-9629-900e1cd33d5a.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 18 Mar 2025 04:00:00 +0000
asID:                     211585
IP address blocks:        206.206.96.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3b:eb:b0:d3:55:5e:2f:0e:c9:56:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 18 04:00:00 2025 GMT
        Subject: CN=db1f19af-5920-4db8-bafa-358293f5050a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:62:37:ee:07:df:89:96:04:0c:ee:a3:d8:
                    0b:a1:38:7b:91:b8:82:4f:39:53:72:c5:56:94:45:
                    c6:2b:0d:ef:81:d8:d1:ce:4d:f0:56:c6:4f:d1:e6:
                    63:32:e4:66:e3:de:f9:67:c2:4a:6f:f4:66:68:69:
                    1e:76:6c:30:11:17:73:1e:57:7f:44:71:c2:24:76:
                    de:cb:6a:e2:80:55:28:5a:e2:ee:1a:11:ea:65:80:
                    e2:5f:60:10:e3:db:e6:d3:c6:19:b2:e7:cd:b6:d8:
                    7a:2a:85:25:90:b6:95:37:34:55:7c:49:bc:b5:d6:
                    d7:d1:90:eb:9d:eb:b7:e8:ce:ef:df:84:93:f2:b5:
                    21:46:ee:f5:a9:57:6c:f2:cc:6c:30:94:ae:1f:9f:
                    d4:91:35:57:da:47:e9:13:0e:44:70:66:02:4b:84:
                    c4:e6:4a:a6:ed:49:8c:95:c7:cc:66:f7:b2:9a:00:
                    43:f8:07:62:1a:88:a3:81:23:17:45:e7:a7:c5:2b:
                    0c:df:f3:89:6b:bc:92:ec:a9:56:13:33:8a:a0:a9:
                    30:80:66:5c:05:59:89:8b:63:b4:42:c2:2c:30:1f:
                    8e:58:37:41:1d:14:cd:4d:fc:b7:ad:d7:6e:da:45:
                    29:11:68:ae:87:09:de:1f:fe:22:dc:66:08:17:30:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:7D:45:09:0A:39:CB:5C:55:31:C0:47:FA:55:51:BD:50:26:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c896d2ab-5c83-3eab-9629-900e1cd33d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:af:d6:e3:d3:3e:ec:c5:28:d7:af:9b:90:ba:6c:1a:2d:56:
         22:ef:ad:69:79:48:b8:2a:58:7d:71:ce:8e:8c:cd:34:a4:a5:
         be:4f:93:39:53:c2:04:ff:e2:4e:bd:4d:6c:11:d6:bf:eb:5d:
         ad:3e:31:d4:78:aa:b8:7e:fc:8d:fe:8e:e6:b6:4d:ed:02:b0:
         07:05:54:58:ab:10:1c:fb:9d:7e:d0:78:19:e0:e9:02:8f:7f:
         b8:fc:d9:c1:7b:48:07:54:ee:c9:e4:c9:89:94:8d:78:f3:39:
         75:2f:f4:86:37:7d:e1:c8:59:76:f6:eb:5f:44:2a:1b:dd:99:
         e0:97:63:2b:3b:1a:85:8a:e4:ad:d5:25:9f:57:0a:da:91:74:
         7c:43:a8:4b:81:5a:92:93:83:80:61:80:e2:5e:83:d7:be:32:
         db:3e:26:6e:6e:2a:0f:f3:34:ce:5e:e1:83:77:3a:68:49:26:
         f1:f7:52:ca:1f:1d:13:30:c8:fe:41:b6:63:bb:54:6e:98:01:
         7e:37:3b:b7:94:d9:1e:45:77:4e:c4:d1:bc:1b:df:7b:51:26:
         e1:1f:71:78:03:c3:70:e2:4a:53:89:ae:eb:70:a4:fa:57:f2:
         03:b8:d0:7c:e4:a5:26:65:58:d1:ce:4c:3b:e0:88:cb:c9:0b:
         ff:c4:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----