Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f2882d30-fa1e-33b5-937a-5d45700aad7b.roa
File:                     f2882d30-fa1e-33b5-937a-5d45700aad7b.roa (raw, json)
Hash identifier:          YIlyqE4JR/n+7t/2f4v05dBYRKG4yES07y8XUM273ns=
Subject key identifier:   3E:94:A2:F0:23:7E:B4:F9:D8:39:9C:36:6D:09:93:FF:66:5E:B5:DA
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328583D737F14C4BB2370BB5DBA6200
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f2882d30-fa1e-33b5-937a-5d45700aad7b.roa
Signing time:             Tue 18 May 2021 04:00:00 +0000
ROA not before:           Tue 18 May 2021 04:00:00 +0000
ROA not after:            Sat 06 Jul 2030 04:00:00 +0000
asID:                     19437
IP address blocks:        207.230.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:73:7f:14:c4:bb:23:70:bb:5d:ba:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 18 04:00:00 2021 GMT
            Not After : Jul  6 04:00:00 2030 GMT
        Subject: CN=da3cd208-d5dc-4f3e-ad15-6edd1c0e3fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:c2:c6:aa:ac:a6:cd:a7:e9:ce:a8:8a:5d:
                    cf:1d:01:7b:cd:52:e1:5d:72:02:01:2e:fe:6a:6d:
                    64:ad:4f:b7:4f:92:bb:b8:75:92:48:47:e1:25:9b:
                    36:78:7b:b7:68:30:0d:71:27:3c:4a:da:35:a0:d0:
                    75:74:6b:09:f9:04:48:5f:cd:56:c9:38:d1:4b:60:
                    67:96:e0:71:23:78:51:5d:8f:9e:1b:ca:04:b4:f8:
                    fc:dd:e3:01:9b:0d:dd:8c:6e:cb:8d:c1:d0:8e:50:
                    0b:45:58:59:d0:04:e4:b6:2c:46:26:d0:ae:e0:45:
                    f0:16:bd:f6:a3:f2:62:7a:68:ca:5b:ee:1d:69:69:
                    bf:6a:7e:92:1a:d9:e5:3c:32:c8:e4:63:14:fb:23:
                    ac:82:29:d8:bb:a6:69:39:24:32:f1:ee:eb:0c:cf:
                    dc:60:40:5a:d6:d7:ad:21:43:be:7a:d0:ff:79:13:
                    57:a7:0c:cb:85:6f:7a:97:ee:c6:b4:5d:29:49:88:
                    44:7d:16:77:0f:a7:58:4b:80:43:2a:37:db:2e:ce:
                    ff:5d:1a:12:9d:00:d5:4b:9a:62:99:b8:48:8a:cf:
                    ff:2d:07:ad:ca:c7:df:8c:e1:79:7f:c6:5f:50:0f:
                    31:f2:af:6f:72:8c:9a:47:58:e5:35:19:2a:4f:d4:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:A2:F0:23:7E:B4:F9:D8:39:9C:36:6D:09:93:FF:66:5E:B5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f2882d30-fa1e-33b5-937a-5d45700aad7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:ba:38:a8:b3:2a:32:d6:8f:e7:9f:f9:15:d1:bb:07:67:
         d4:85:9d:86:58:b6:f7:e9:32:df:37:e4:4e:ef:bc:f1:11:b0:
         15:dd:aa:27:33:e5:03:7e:bc:ed:2b:a7:51:0f:93:12:e5:3c:
         6d:a3:61:f0:8f:50:4b:02:ee:7b:54:83:89:f1:79:3c:3d:9c:
         31:9f:79:25:1e:6b:48:f3:4f:be:5e:e8:44:82:4d:ac:4a:9c:
         d3:2e:83:b5:03:a6:1f:92:16:9c:d4:2d:86:74:6f:44:43:0a:
         42:cc:98:2d:ad:3e:06:b3:4b:e0:38:2a:e0:85:22:1f:bb:71:
         a5:b1:c3:a9:2d:0c:a9:76:c0:b5:a7:b9:0e:8a:67:37:f2:bc:
         c6:e7:70:f2:7b:e9:0b:1b:70:6a:85:8b:fe:2d:4b:1e:dc:85:
         0b:3a:3c:2f:a8:e6:40:4b:4c:c0:39:61:03:6c:2f:68:64:d0:
         fd:c5:5e:e0:74:cd:83:c6:23:99:8b:09:49:f1:4c:7c:33:fd:
         16:61:03:8a:38:25:7c:69:9b:5b:ce:23:f2:10:52:3b:4c:25:
         5a:d3:0d:d7:60:c2:c0:27:43:a2:3b:81:1b:e3:22:2c:0f:16:
         4e:28:a8:41:c8:9d:41:5c:ca:73:99:83:d4:df:ee:80:a0:2e:
         94:8a:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----