Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/140e3e97-0138-31f5-a1a7-96ce3f810e98.roa
File:                     140e3e97-0138-31f5-a1a7-96ce3f810e98.roa (raw, json)
Hash identifier:          05nqrhV+eqgyRCMJ30jTT23X9pKhy0HI/LSncJaIVX8=
Subject key identifier:   E8:1A:6B:85:05:15:6D:DC:98:34:C5:D1:30:EE:4E:35:37:F9:31:96
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B16EC37C0DB21C37260DC900
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/140e3e97-0138-31f5-a1a7-96ce3f810e98.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:6e:c3:7c:0d:b2:1c:37:26:0d:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=3e551a2f-3f1d-45d6-bd9f-97d86c6de473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d3:e3:fc:cf:71:ee:fa:f4:3e:cb:27:70:2a:
                    87:63:4a:1d:ae:4e:36:7c:0b:c3:62:22:e5:00:49:
                    6d:ea:01:5f:02:ff:14:5d:cb:df:cf:bf:02:9b:1c:
                    e9:2b:34:f6:72:8b:7b:9c:d0:69:4e:c5:08:8d:5c:
                    73:0f:70:cc:31:8d:ec:4d:00:08:62:29:e2:4d:56:
                    9e:40:7d:1f:5c:c3:d3:52:6d:3c:c1:27:22:08:8c:
                    1c:79:9d:13:b1:a3:38:64:33:25:37:9a:9c:5b:12:
                    af:4d:af:9f:3e:74:d3:57:d9:77:29:4e:57:87:c7:
                    7a:d7:f6:a3:68:26:ec:c9:13:ee:37:15:c2:8d:3a:
                    aa:92:47:e2:9d:86:32:a8:2b:d2:08:38:cb:d0:8b:
                    f4:be:a4:83:f0:d0:67:1e:24:35:50:9d:ed:4a:c0:
                    0a:aa:59:b5:1f:f4:b8:ab:f9:1b:d5:96:d5:b8:64:
                    23:53:08:1d:6c:81:0b:26:06:fc:8f:cc:ef:18:ee:
                    20:75:c3:29:3c:73:51:87:1a:ae:75:40:9c:c1:82:
                    bd:10:65:fc:2e:d4:ae:86:93:75:22:7d:3b:f9:1d:
                    17:4a:b7:d9:34:0f:b1:3a:e8:38:92:05:5a:de:84:
                    a8:af:33:2f:ca:a0:1c:ac:5e:d5:61:12:ca:7a:17:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:6B:85:05:15:6D:DC:98:34:C5:D1:30:EE:4E:35:37:F9:31:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/140e3e97-0138-31f5-a1a7-96ce3f810e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:62:26:b2:b0:d1:71:6d:c3:3a:73:52:8f:27:49:d5:8a:
         64:17:75:78:58:02:59:70:1b:91:51:ec:38:2e:26:ba:39:b4:
         fe:22:72:c0:cd:c7:ad:4e:3b:ea:cb:73:2f:bc:64:19:0f:c1:
         75:26:9c:97:16:64:ed:a8:db:61:a7:49:85:d8:b6:8f:2a:c9:
         5b:c4:af:90:9f:c7:89:43:7f:14:fd:6a:62:62:27:98:2e:48:
         2c:61:e6:91:65:1d:a4:f2:dc:d1:29:30:e9:94:22:f6:5b:a9:
         22:9c:9d:c1:c6:25:bf:ee:59:fb:e8:05:62:b0:72:57:77:22:
         a3:f0:29:6e:4b:1c:8f:f3:f8:06:68:26:f7:4e:d3:c5:b3:d0:
         40:c7:f3:02:55:10:67:3b:10:4a:32:89:f2:43:e1:cf:df:90:
         c7:a8:9c:b1:6a:66:81:7f:1e:d4:0c:29:ac:d8:33:ce:c7:75:
         de:65:59:24:fc:bb:55:72:ca:c8:6b:2a:b1:47:c4:84:fb:c6:
         3b:e5:3b:f0:fc:8e:c8:8d:e2:27:8b:f7:36:ab:ec:16:b7:e1:
         02:11:f3:a9:06:79:0d:6a:f5:64:a6:34:ba:e9:50:b9:5f:60:
         37:e7:d7:25:f8:6c:6a:5e:ac:e9:0d:12:a3:e4:50:96:70:90:
         5a:2c:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----