Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d9505daf-d87d-3dc0-ae57-341da93420ec.roa
File:                     d9505daf-d87d-3dc0-ae57-341da93420ec.roa (raw, json)
Hash identifier:          Wbi4R30UMbiRT8CkZ455H/265V0TzGiPfRrUDyigAJU=
Subject key identifier:   A8:46:B6:FE:C3:D3:6D:CF:80:5B:4E:D4:CB:0D:CB:A4:5A:7E:E8:CC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840E65DD842B3C823EC3B4D9CF8
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d9505daf-d87d-3dc0-ae57-341da93420ec.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sun 18 May 2025 04:00:00 +0000
asID:                     135752
IP address blocks:        173.214.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e6:5d:d8:42:b3:c8:23:ec:3b:4d:9c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : May 18 04:00:00 2025 GMT
        Subject: CN=eb90caba-2805-4a5b-baf6-ce9b694b9969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9f:12:8e:54:24:8b:67:46:4a:12:23:72:40:
                    f0:39:5c:37:47:dc:e2:a8:9b:bc:88:bd:03:4f:d6:
                    94:09:a1:90:d4:b7:fb:ad:87:d8:29:26:85:58:b3:
                    f5:69:17:7c:06:b7:f4:a0:4a:ad:0f:6c:8c:44:d1:
                    e9:3b:ad:89:f8:7b:67:59:7b:0d:2c:40:e5:7e:cf:
                    f2:22:f6:7b:6f:fe:41:a9:19:ba:a4:72:f4:e7:11:
                    ec:62:65:26:5b:68:6c:ac:82:da:38:ea:c4:ed:64:
                    1e:0d:c3:f9:0d:4d:a1:d4:cf:9e:37:4f:34:44:b5:
                    2f:72:cb:6c:95:ce:47:94:9e:ad:32:22:09:9f:9e:
                    a2:c4:10:77:a0:aa:62:94:4a:72:ec:a8:48:ea:0c:
                    f4:69:19:5e:75:f3:e6:b0:80:82:16:f5:e8:f0:43:
                    41:27:16:73:ff:19:5e:89:c1:45:94:c0:c1:fe:5f:
                    60:44:60:cb:65:58:82:85:60:e8:bc:70:fe:72:e4:
                    34:81:43:57:87:2e:8c:32:24:0b:25:ea:d8:bb:96:
                    fc:e8:23:f1:40:b6:08:fa:a2:b6:ae:14:98:47:ff:
                    5e:1f:ab:33:70:14:1c:8f:6e:34:8a:79:28:7b:bf:
                    81:b8:11:e5:d9:e3:e5:50:19:c7:8c:d4:be:71:26:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:46:B6:FE:C3:D3:6D:CF:80:5B:4E:D4:CB:0D:CB:A4:5A:7E:E8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d9505daf-d87d-3dc0-ae57-341da93420ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5e:41:f0:41:f8:94:b3:37:12:6f:dd:e0:3e:c0:8b:ed:c7:
         e3:dc:aa:90:a7:58:85:58:b6:0d:48:6f:69:90:df:a4:87:1e:
         f0:ce:91:85:d5:bf:14:07:dd:f2:f2:59:c4:b7:bd:f7:65:38:
         cb:b1:06:c4:04:91:d5:59:9d:9d:ea:25:9a:38:40:8c:e6:90:
         98:84:fb:1a:4b:a5:70:a2:a7:fe:d4:b5:ed:fb:56:59:fd:fa:
         2a:eb:8f:73:3f:10:ad:f1:36:7a:22:5a:e1:51:3d:ac:e1:26:
         17:e0:b1:17:00:d7:fe:f5:01:bd:8c:31:d7:c0:a4:0d:db:98:
         ba:98:72:41:eb:9f:8a:5f:e0:5a:fc:99:85:83:99:06:7b:6f:
         ba:9e:4e:82:83:ec:43:ae:3d:ca:b7:28:f3:5b:19:16:66:71:
         5b:a4:79:c8:aa:c4:0b:8d:3f:9d:2d:8f:9f:61:2e:2f:b5:54:
         25:31:0f:c2:11:46:1c:bf:d3:d3:c0:c0:8c:80:2c:ed:75:db:
         13:7e:8f:5e:31:02:9a:c4:62:49:f9:f4:9a:51:ee:b5:34:ca:
         7c:09:f6:c8:8e:59:a3:a4:df:f1:4d:e7:48:4e:e6:21:f6:eb:
         7c:c9:63:4d:33:35:8c:81:0b:d2:c2:41:41:fd:ad:ae:f7:d7:
         84:36:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----