Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0034b12c-5760-3667-abb3-9c2602de078e.roa
File:                     0034b12c-5760-3667-abb3-9c2602de078e.roa (raw, json)
Hash identifier:          bu4kiTOGh9DOtHWYQLAWJfJ6i+3EiikAo6UkFKm78+M=
Subject key identifier:   A4:0A:1C:D3:55:B5:20:DC:DA:5A:CB:D2:ED:17:83:A9:E2:9B:FB:4C
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B1731D553793F8FA9233D380
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0034b12c-5760-3667-abb3-9c2602de078e.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:73:1d:55:37:93:f8:fa:92:33:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=5cc6a40e-63f3-4548-ae97-798b070cdde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:e2:53:2a:24:14:f5:28:be:3d:6d:50:7b:
                    41:a9:f9:52:45:5a:20:e2:70:0b:1a:f4:17:89:38:
                    35:39:2a:ef:14:a1:6f:88:13:0e:ed:6a:10:c0:17:
                    ef:5b:b1:b7:35:07:c4:c2:0e:96:12:b6:0c:da:18:
                    11:61:bc:98:c6:8e:a7:d8:6f:16:94:5f:d5:1e:a1:
                    da:bf:02:48:ec:7a:a1:a9:f5:58:30:5c:f6:59:ec:
                    1c:11:7a:d8:ff:49:a0:b2:5b:6a:d0:ab:28:ca:e0:
                    2d:25:fd:e4:62:38:f1:cb:aa:6a:e3:82:01:91:f4:
                    82:d9:48:a6:5e:f7:8c:27:07:85:0d:a2:10:f9:17:
                    db:d4:fe:ac:a1:dd:49:40:34:8b:ea:b3:3b:32:5c:
                    60:cc:e0:76:54:f8:5f:ba:47:07:17:f0:50:4a:21:
                    a9:c7:0d:e7:15:a6:9a:ec:03:c9:da:6f:c3:de:15:
                    f5:a0:72:72:75:30:07:77:e8:c9:d9:36:c8:c9:07:
                    bf:54:3d:55:7e:3b:39:f3:f1:33:98:77:f2:4a:0a:
                    d7:40:0c:a3:a0:c2:d2:13:2d:84:88:da:fa:f4:48:
                    ab:66:1e:b3:cf:4f:a2:96:66:64:f2:a1:47:c4:3e:
                    a6:65:44:4b:bd:f9:b0:54:66:b5:c7:85:ab:72:2a:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0A:1C:D3:55:B5:20:DC:DA:5A:CB:D2:ED:17:83:A9:E2:9B:FB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0034b12c-5760-3667-abb3-9c2602de078e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:60:69:36:c8:36:3a:3d:3d:2b:01:67:34:d2:a1:ce:6d:a7:
         43:69:66:ca:a2:36:19:c1:05:42:52:cb:72:28:9c:bf:09:4e:
         2b:16:d4:d2:1f:88:56:cb:6d:6b:13:b9:7e:55:f2:fb:dd:35:
         d6:cd:d9:3e:a7:65:c0:dd:bb:92:fa:46:2a:a7:80:df:0f:83:
         c7:60:39:6c:84:c5:bc:8f:a7:dd:91:b1:76:73:b7:3d:79:85:
         51:36:e5:58:72:18:89:9a:a0:a1:df:89:eb:82:e1:f5:1c:36:
         c8:f1:68:ec:79:42:33:27:4a:2e:a9:95:72:b3:8f:0d:6b:2c:
         9a:71:df:2b:c3:ce:7d:68:7c:25:05:8b:56:05:34:b8:64:bb:
         87:a9:68:a0:60:36:a8:77:23:5b:3b:67:96:c0:d0:92:cd:d7:
         69:5c:30:bd:dd:1b:59:76:4e:44:72:c4:67:41:03:b6:7b:be:
         2a:95:fe:3b:43:e9:b4:38:ae:ab:12:b7:ed:b1:14:42:32:13:
         de:21:11:1e:f2:80:10:14:fd:e3:47:34:da:29:10:dd:44:b8:
         1b:2a:20:74:ff:98:f5:09:b9:d4:f4:55:7c:44:a0:54:5d:f7:
         e4:a1:83:e4:2e:92:b5:ba:e0:ae:5f:bf:c1:b3:ab:40:8b:ea:
         0a:1e:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----