Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ac56386d-183a-3a2d-a495-762a3f726427.roa
File:                     ac56386d-183a-3a2d-a495-762a3f726427.roa (raw, json)
Hash identifier:          Z36fTEsSIGcmY0vogQ3rZqGPRvA/cSayiq4avyhCmgM=
Subject key identifier:   D1:7B:E1:F9:B4:66:98:00:D8:38:21:2D:9D:70:59:74:4F:E9:DD:07
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B1715355F09EC4C1F9319380
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ac56386d-183a-3a2d-a495-762a3f726427.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:71:53:55:f0:9e:c4:c1:f9:31:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=32f80744-1350-4e80-b3f8-2209c0a7a604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:7a:e3:3b:80:21:7f:e1:f7:4e:99:c9:c1:
                    cb:5f:95:88:2e:0d:a4:f0:dd:39:6d:eb:1b:b4:f6:
                    44:9b:d4:9b:5d:88:b4:5a:9b:d4:e3:e5:31:56:58:
                    4c:d5:ca:93:c4:e5:e5:bc:e6:c5:9e:d7:7a:ee:d6:
                    57:c9:77:b7:43:5c:27:a4:86:02:e6:92:54:1e:ae:
                    e4:70:36:2c:20:fc:87:a3:99:9d:d2:b0:be:c5:dd:
                    7a:eb:bf:4e:68:6f:e1:9a:90:1e:0f:df:a3:7d:6e:
                    c5:a9:70:cb:ee:d1:e8:70:21:df:73:ab:20:f2:72:
                    f5:8a:f7:aa:be:f7:9d:ca:e9:ff:d1:af:d5:52:f3:
                    58:fd:d0:23:52:2a:21:06:7c:b6:bb:10:b5:cc:a2:
                    0f:09:6e:55:39:ad:2c:03:85:cc:d5:fd:b0:ca:7e:
                    73:71:25:4c:77:70:7f:62:31:a8:86:e7:a1:b4:73:
                    61:b2:cb:06:f2:33:68:61:70:79:a3:ef:d1:5e:03:
                    c3:79:69:f0:c4:d2:29:87:5c:6a:d5:06:34:ae:54:
                    47:11:a1:87:a8:21:18:5b:16:be:b3:31:71:33:66:
                    34:e1:7c:26:a4:c1:04:ea:f6:97:53:9b:0f:31:1f:
                    30:0d:d3:c2:93:88:b1:f8:eb:62:09:86:ff:0a:f0:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:E1:F9:B4:66:98:00:D8:38:21:2D:9D:70:59:74:4F:E9:DD:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ac56386d-183a-3a2d-a495-762a3f726427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b0:a7:a4:c2:e0:2f:12:af:a8:ee:f7:f7:d5:76:90:91:0f:
         9a:f9:b3:6b:54:72:b1:eb:49:2b:ad:36:99:1a:c3:09:44:39:
         bb:30:d4:fc:0b:9a:f8:82:a8:d2:27:8a:85:36:bc:4a:2c:74:
         da:32:a5:53:50:7f:38:7a:a3:1e:25:d9:2c:bc:29:6c:00:30:
         d3:b4:99:65:1d:75:35:84:fc:54:3d:4a:4b:c8:ce:54:ae:44:
         c6:74:ab:45:b1:00:6b:f4:cb:1d:dd:af:a6:77:44:f7:e4:f3:
         98:30:68:4d:39:99:59:30:43:58:31:c3:11:b6:c5:74:24:69:
         4d:e7:b3:5b:d2:ac:0e:9d:ed:78:2e:9f:01:ac:89:ba:06:5b:
         f4:95:0e:71:2d:0b:f1:47:c1:c3:ff:ce:a9:e2:0f:e7:f7:a0:
         43:ae:e7:4a:b9:cb:49:1b:d9:09:55:db:66:ac:91:df:4a:c9:
         d8:ce:22:f2:2c:35:bc:a2:4f:5c:90:53:56:f5:11:e4:57:71:
         67:44:29:e3:b6:d8:62:bc:ff:d2:05:4d:9f:90:b1:c1:0f:8e:
         44:08:c9:65:73:d8:0c:5a:e6:b1:b7:25:bc:c5:1f:6e:97:67:
         d6:b2:85:1a:af:6c:72:9f:29:18:fd:c0:d9:49:10:64:15:90:
         ac:da:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----