Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/4f6dc4bc-f854-34ad-aa3b-a5b0eda19ba6.roa
File:                     4f6dc4bc-f854-34ad-aa3b-a5b0eda19ba6.roa (raw, json)
Hash identifier:          ahcaveTZcZlpQs2blYQc1ZCpNg0+y46ivgYpm9yzxgQ=
Subject key identifier:   06:67:DC:BD:FF:66:9B:DC:1B:DB:49:26:58:E5:A8:35:A4:F5:E8:59
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B172EA76D321B2D580F62640
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/4f6dc4bc-f854-34ad-aa3b-a5b0eda19ba6.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:72:ea:76:d3:21:b2:d5:80:f6:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=dc013661-cdc0-4ac2-b33a-d32d8c7149dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:48:00:1f:d0:0a:0d:4f:3a:4c:c5:2e:0d:
                    33:1e:08:ec:3e:23:42:92:a6:5b:9a:76:7a:ae:15:
                    d7:ac:1b:a5:4b:82:a5:49:e1:f7:8c:bc:6d:f0:60:
                    be:14:3a:c4:29:88:f4:20:9e:0f:9d:9a:29:14:d5:
                    94:c1:cb:34:e8:de:5a:c4:d3:ee:ef:e4:05:55:fc:
                    5b:b3:33:d8:d4:00:57:1c:ec:da:57:56:e9:3b:72:
                    7c:cf:06:be:54:a5:a4:d0:10:8b:90:68:b4:24:cf:
                    cd:d3:07:94:96:7e:68:58:cc:43:b2:02:27:9a:44:
                    6f:da:7d:d5:35:3a:45:c6:9d:ae:a5:69:3d:10:7e:
                    66:dd:75:a5:44:7a:18:6d:8e:67:29:b4:67:5f:6c:
                    2d:d4:e4:8e:43:72:b3:a9:1c:7c:ee:16:3d:f2:9c:
                    26:c2:b0:a4:e7:57:1f:c7:79:d7:96:a1:e7:27:70:
                    1c:ab:50:2b:a2:ed:4f:19:fd:33:e5:cb:28:6c:da:
                    15:98:82:35:80:56:82:f7:a6:ec:1a:14:1e:17:3a:
                    55:b3:00:08:ee:ca:1b:de:80:2c:0c:93:f4:7f:a1:
                    69:12:77:1f:e3:c9:45:5f:0b:94:52:86:16:97:eb:
                    d1:f4:c4:6a:e6:2b:91:ea:3c:04:14:87:e7:17:34:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:DC:BD:FF:66:9B:DC:1B:DB:49:26:58:E5:A8:35:A4:F5:E8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/4f6dc4bc-f854-34ad-aa3b-a5b0eda19ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:16:35:94:1c:75:5f:f3:f4:9a:d7:4a:d6:7b:a4:8d:91:
         a1:60:0b:6f:67:8d:25:ae:c3:27:fb:6e:72:f2:3e:c9:65:58:
         1a:e8:83:f3:64:3b:eb:59:bd:ee:3c:fc:f8:0b:17:38:a0:1b:
         fe:26:69:d3:2e:48:5c:4b:bb:28:5f:4c:aa:e5:a0:b0:60:39:
         9b:cb:8b:0e:1c:72:a8:59:a7:7d:89:28:6a:57:d3:a9:79:f5:
         9a:66:b4:7e:63:e2:2c:7a:54:ce:7b:5e:fc:e3:04:c6:73:8c:
         36:b3:5f:59:e1:74:6f:56:31:ce:6d:f0:b5:5e:c6:99:bd:be:
         84:3b:81:b0:2f:39:5d:fa:a7:6e:55:80:83:1a:46:96:b9:a5:
         53:6f:6f:12:d0:d6:8e:0b:bd:cb:13:91:e2:4b:e7:dc:ca:7e:
         4f:63:17:97:57:4b:a7:1a:0f:17:3b:a6:3e:36:9e:16:5b:3d:
         63:02:2e:82:8c:ec:79:09:4c:57:d5:65:8d:5b:9e:7e:a9:19:
         dc:cf:27:63:dc:b1:56:4e:e1:d1:65:ad:73:7a:60:5b:35:12:
         83:a0:2b:5d:c1:58:2d:f3:20:e7:e6:1b:f8:2f:c3:16:2b:0c:
         be:93:de:62:57:3a:c1:60:84:78:8b:f9:db:19:e4:b8:2f:e2:
         0c:fd:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----