Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e326104b-71d4-340a-bcba-00375f51a1bd.roa
File:                     e326104b-71d4-340a-bcba-00375f51a1bd.roa (raw, json)
Hash identifier:          yyQPuaD7i688iphEzlLxetAqbvJo+GDnDtkMV0D9zso=
Subject key identifier:   6D:38:B0:86:B8:A5:46:E2:1F:60:F8:7E:DE:F4:D7:85:68:26:0C:0F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583EB3762FD3274209AABE752980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e326104b-71d4-340a-bcba-00375f51a1bd.roa
Signing time:             Fri 01 Jul 2022 13:51:08 +0000
ROA not before:           Fri 01 Jul 2022 13:51:08 +0000
ROA not after:            Mon 28 Oct 2024 04:00:00 +0000
asID:                     397873
IP address blocks:        173.211.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b3:76:2f:d3:27:42:09:aa:be:75:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 13:51:08 2022 GMT
            Not After : Oct 28 04:00:00 2024 GMT
        Subject: CN=0dc503e2-f274-4948-bd81-339367e69cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:3a:ba:2f:65:f7:9f:d9:34:db:a3:e0:4d:
                    78:2e:6f:16:29:20:dd:b0:b4:4a:4d:ae:fd:85:ec:
                    77:28:0d:84:fa:fc:7b:6a:26:9d:17:d0:01:66:66:
                    57:21:05:cc:11:95:80:5f:c9:d9:29:cd:74:1d:1c:
                    a0:12:ef:ad:76:0d:b0:2f:3a:01:04:f0:7d:5d:7f:
                    82:7d:d6:39:18:56:d4:ba:43:f6:6e:3c:d6:f5:e0:
                    67:92:1c:d2:43:82:6e:6f:7f:8d:dc:04:dd:28:ff:
                    57:a9:29:64:2f:8a:8a:1f:a3:39:8e:27:0e:25:c4:
                    39:0d:05:80:c8:21:9f:ec:9d:e2:ae:1a:b1:9d:38:
                    a8:09:f1:d1:e9:6e:f6:da:3d:83:3f:20:4e:87:66:
                    35:29:76:55:57:6f:86:21:78:1d:44:a7:89:8e:b0:
                    cd:d1:83:5f:49:75:6c:08:5f:e0:d1:dc:b5:fc:8c:
                    09:0a:95:e6:5b:53:76:cf:06:30:ba:4c:1b:2d:1a:
                    a6:9c:75:a2:7b:1c:f5:c2:a8:4a:65:bd:ad:21:0d:
                    54:70:86:30:36:7c:fe:42:05:f4:01:14:61:ff:6b:
                    43:25:53:08:43:91:f2:c1:c0:28:f2:5f:a6:7e:f2:
                    01:5c:dc:4c:0c:ba:04:1e:2b:37:7f:fb:6f:13:a4:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:B0:86:B8:A5:46:E2:1F:60:F8:7E:DE:F4:D7:85:68:26:0C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e326104b-71d4-340a-bcba-00375f51a1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:13:0e:b5:17:c1:76:c4:02:e4:be:6b:5e:ec:3d:06:1c:e2:
         be:32:a2:bb:17:00:11:16:3a:02:50:a0:65:66:62:0e:d6:b4:
         95:1e:3c:2f:df:10:75:78:12:1f:5e:9d:76:8c:a3:33:d1:86:
         7a:4c:5b:f9:d4:1a:e3:ba:5e:93:7f:45:10:ac:4c:e8:d4:43:
         15:88:a2:b1:09:af:b1:43:db:02:52:81:ba:5f:b8:94:1f:7b:
         e5:25:98:5f:70:31:3e:e8:c6:fe:35:a2:86:f1:c8:47:fe:75:
         f8:33:23:56:ec:2a:0d:65:ce:b6:db:e1:f7:78:f1:b9:fa:40:
         0c:c6:51:8b:7b:74:0f:c4:82:03:8b:b0:a9:85:03:f6:77:e9:
         54:37:bc:f7:8a:b5:7b:3a:f1:87:d1:45:1a:50:77:92:8a:52:
         74:20:23:f4:93:6a:07:22:89:12:6a:2e:97:30:ed:b6:e6:13:
         6a:17:c8:43:ae:5c:e3:7c:9c:9f:ba:6c:6e:d5:5b:cf:ae:cd:
         25:a3:ec:0d:07:e0:4b:0d:b4:e7:ec:2e:56:99:e8:78:59:90:
         39:55:b0:95:ac:b2:e1:9c:af:f1:be:26:4f:39:5a:31:c3:c8:
         20:8e:f5:ea:d9:1d:f3:60:80:c4:37:77:60:96:ac:cf:44:c2:
         38:95:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----