Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f63fb9fb-e464-37b3-8c12-cc8262de9c0f.roa
File:                     f63fb9fb-e464-37b3-8c12-cc8262de9c0f.roa (raw, json)
Hash identifier:          siexvffSYNdz7JiAjHXIg6wAn0EOiw8JHqQpPQGAkgM=
Subject key identifier:   42:A5:BC:E5:A9:0D:BC:39:FF:B7:D6:C3:D7:4E:FA:61:A1:C3:60:BC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583E9A9A357ADACAB45F513B0BE0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f63fb9fb-e464-37b3-8c12-cc8262de9c0f.roa
Signing time:             Fri 01 Jul 2022 13:51:08 +0000
ROA not before:           Fri 01 Jul 2022 13:51:08 +0000
ROA not after:            Sat 19 Oct 2024 04:00:00 +0000
asID:                     49999
IP address blocks:        216.74.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9a:9a:35:7a:da:ca:b4:5f:51:3b:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 13:51:08 2022 GMT
            Not After : Oct 19 04:00:00 2024 GMT
        Subject: CN=c36fb59a-e53a-462d-bf71-cb91ccfb4c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:e5:ca:55:b8:0c:dc:00:e8:36:aa:f9:14:
                    b2:ca:10:03:71:74:a2:d7:d9:3d:7d:29:3d:53:59:
                    ac:05:20:e2:05:34:ec:a9:6a:f8:8e:ec:08:de:1b:
                    91:63:19:23:c3:4c:b7:bb:50:eb:97:66:bb:1e:08:
                    a5:14:ac:4c:89:dd:fb:f8:76:95:da:77:1f:21:9e:
                    be:8a:4e:a2:20:f6:ac:d1:47:af:a1:15:bb:83:be:
                    64:65:09:9e:41:75:75:95:29:53:5a:11:25:e7:59:
                    ce:66:4e:84:e9:e2:4c:cf:3e:67:7c:57:68:51:1f:
                    19:ba:32:0d:64:0e:83:93:16:d1:20:c4:d6:08:b6:
                    75:b8:7a:bc:c2:2a:a6:7f:51:a1:f0:bc:7b:63:71:
                    8d:23:26:36:f9:99:cb:23:2b:43:34:54:ca:77:77:
                    f6:1f:46:31:10:e2:c9:41:89:02:2f:b3:08:ed:bc:
                    22:13:8f:4b:c9:86:c0:01:a7:aa:e7:25:16:95:16:
                    c8:dc:14:07:b4:72:43:7b:0c:5b:e0:c4:f3:91:c5:
                    93:26:0c:47:18:f4:18:69:5e:cc:f1:e2:05:0e:53:
                    5e:ad:b1:18:7d:f1:bb:0b:f9:17:ea:09:82:3d:b5:
                    d2:4d:dd:43:98:e5:38:2f:82:d0:40:48:f9:ef:22:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A5:BC:E5:A9:0D:BC:39:FF:B7:D6:C3:D7:4E:FA:61:A1:C3:60:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f63fb9fb-e464-37b3-8c12-cc8262de9c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:33:6d:a2:c7:aa:82:ac:f7:dd:2e:e8:33:cb:1b:26:c9:f4:
         e2:21:18:1a:e4:67:39:86:70:fa:7c:6b:8c:1c:93:7d:1e:46:
         a7:96:8d:35:47:c5:67:07:10:a5:96:d4:2c:39:bc:b9:a8:6b:
         6c:3f:8c:18:d1:2c:eb:41:0b:38:c7:4a:56:7e:a9:bb:ab:79:
         4c:af:53:5a:9a:b2:77:c8:62:ca:63:a8:25:37:c1:e6:2a:e5:
         66:2f:6b:73:1d:c3:2a:76:d8:a3:16:fa:7b:aa:f3:34:f2:55:
         da:4e:b3:70:7c:58:6c:3c:30:c5:fa:c8:92:0c:c2:6b:75:1b:
         49:39:62:34:91:6d:7d:47:64:db:95:8d:7a:8a:34:10:31:62:
         e6:66:69:27:cf:ee:c1:01:d2:bc:7e:c7:b2:ed:68:a4:79:63:
         e1:bc:16:30:a2:95:0b:d5:d8:d4:c7:ea:5d:0b:87:7c:2b:78:
         69:04:29:5f:e3:3f:77:b6:e5:28:06:8c:84:e5:35:e2:2c:b2:
         a7:21:55:8c:d4:1a:80:2d:ba:ee:e8:f8:fc:9b:79:53:c4:a2:
         bc:b4:8e:00:c9:3a:13:ec:92:3f:f2:e2:1b:7d:92:b9:6c:eb:
         5d:d5:d3:7b:b2:75:68:cb:16:93:e4:18:bb:06:40:6f:e7:09:
         6d:d4:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----