Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2979ac84-d13f-36a3-9196-2d7b29c4efe3.roa
File:                     2979ac84-d13f-36a3-9196-2d7b29c4efe3.roa (raw, json)
Hash identifier:          dd6hSrm2QN+Sru98y0CK9ei5ZnBNIXAD47Ny/hRDTRE=
Subject key identifier:   14:A9:4C:C9:A2:97:7D:E8:B4:12:C1:CA:46:6D:3D:B0:A0:68:B6:69
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328583D73D794C95C604792B8F93680
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2979ac84-d13f-36a3-9196-2d7b29c4efe3.roa
Signing time:             Tue 18 May 2021 04:00:00 +0000
ROA not before:           Tue 18 May 2021 04:00:00 +0000
ROA not after:            Sat 06 Jul 2030 04:00:00 +0000
asID:                     11325
IP address blocks:        172.98.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:73:d7:94:c9:5c:60:47:92:b8:f9:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 18 04:00:00 2021 GMT
            Not After : Jul  6 04:00:00 2030 GMT
        Subject: CN=106e7c45-7325-48d2-96d3-bcb90e6d56a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:a4:3a:8f:85:92:fb:89:61:da:20:13:b8:
                    de:7c:0a:e0:28:91:8e:a0:d6:5f:0c:f7:0b:c8:90:
                    20:fb:55:61:a7:d8:0d:bd:5f:ac:db:8e:b7:ce:0b:
                    58:6d:6b:03:10:d9:6c:f7:d7:27:58:ab:a3:c3:86:
                    cb:b4:b3:2e:be:80:29:60:87:94:bf:5e:84:12:32:
                    f9:51:1e:6f:22:86:63:0b:12:9e:64:af:4b:47:ed:
                    76:31:09:cb:e6:c8:59:bb:0c:e2:ab:01:b7:72:78:
                    5b:c2:1c:58:7c:fb:ea:bd:ed:04:10:7f:54:ed:fa:
                    0a:d4:de:fb:db:2f:dd:49:c5:e6:f4:1f:a9:cb:1a:
                    73:d1:5a:7b:b6:7f:7a:f5:8a:80:da:55:09:5d:ce:
                    63:ec:29:68:3f:6e:cf:67:eb:23:df:bd:95:40:93:
                    eb:77:09:75:4b:83:ee:64:40:f0:a0:9f:77:d8:82:
                    21:c4:6f:18:9f:2a:2c:29:ff:31:0a:dc:34:22:31:
                    1f:c7:be:c9:a8:5b:f1:2c:b9:3c:22:8d:67:a2:44:
                    21:df:a6:b8:ae:20:13:78:7a:88:6e:cf:f3:a8:77:
                    62:7c:45:fb:2b:ce:a9:a9:cb:cd:85:00:5d:5a:b6:
                    e8:c6:f9:8a:be:1b:01:b3:2a:ed:79:8a:b6:12:69:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A9:4C:C9:A2:97:7D:E8:B4:12:C1:CA:46:6D:3D:B0:A0:68:B6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2979ac84-d13f-36a3-9196-2d7b29c4efe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:18:a9:41:02:e0:eb:30:6c:c0:05:ca:da:cc:37:d2:34:00:
         30:72:4b:a8:44:7e:fe:67:ef:58:55:79:bd:23:52:a2:fd:b6:
         44:e0:4c:fa:30:63:34:e6:61:39:44:b4:d5:68:6f:d8:d7:b1:
         8f:e7:f6:ec:37:dd:e0:a9:7e:7f:0d:02:1e:07:b9:56:ef:4b:
         7f:ad:de:78:f3:54:4f:59:57:08:50:99:d7:66:28:c6:fb:f9:
         a8:64:03:ab:1c:67:9b:12:5b:85:68:15:11:5d:0b:2e:2e:1b:
         3f:f7:40:b9:ed:29:f5:62:62:1c:2e:6a:b1:25:f3:7d:1b:e7:
         e1:98:fe:f5:42:63:06:b4:67:08:70:be:1c:79:26:c6:d5:e2:
         31:26:2f:f9:fb:3d:b8:b2:3f:18:98:8c:5b:77:1d:cb:45:b6:
         d8:6c:1b:9e:31:93:ab:6c:15:d0:29:72:44:0f:0d:64:f5:a5:
         ea:2a:14:f6:56:30:65:97:1d:a5:0e:da:24:2e:5e:8f:6a:97:
         e7:8e:ce:9e:ce:93:20:41:32:53:86:3b:ca:1e:55:9e:5a:2a:
         b0:71:f1:b2:54:84:3a:a4:e4:01:81:9a:8b:5d:34:23:48:c1:
         79:27:78:53:07:51:41:a1:66:97:5e:d0:35:3f:84:ca:7a:cf:
         9e:87:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----