Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/5b048418-79d6-3880-885d-14666e4c51bf.roa
File:                     5b048418-79d6-3880-885d-14666e4c51bf.roa (raw, json)
Hash identifier:          3udx+B06FzzmQM+DqsTyJkSLRWkebmH3929h762janQ=
Subject key identifier:   F8:5C:08:26:6D:E6:E5:47:44:AF:8B:61:0C:A9:D5:CB:C1:7A:95:8A
Certificate issuer:       /CN=4df6cec2-94eb-4439-960f-00719026d770
Certificate serial:       010D0C9F432858409DD3C18408FC561B75E16400
Authority key identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/5b048418-79d6-3880-885d-14666e4c51bf.roa
Signing time:             Wed 14 Sep 2022 16:55:44 +0000
ROA not before:           Wed 14 Sep 2022 16:55:44 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     16509
IP address blocks:        64.28.43.32/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9d:d3:c1:84:08:fc:56:1b:75:e1:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df6cec2-94eb-4439-960f-00719026d770
        Validity
            Not Before: Sep 14 16:55:44 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=df090498-b28d-43be-b302-215a84bbd16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:2f:4e:7e:ea:8e:06:e2:c3:8a:74:9c:49:
                    2b:2e:f7:d3:20:e5:af:54:64:9b:63:1b:24:4b:67:
                    5d:89:f1:21:ac:69:da:42:d2:ec:9b:fc:47:27:82:
                    2e:7e:2e:a3:d0:48:d9:2e:41:5d:50:21:4b:06:1c:
                    2c:f7:3f:d3:78:66:67:47:dc:fe:79:62:1b:97:4b:
                    85:91:b5:f8:29:3a:a6:db:ff:8a:ce:bf:25:b9:c7:
                    d6:95:4e:fb:4a:50:b8:95:2b:b6:a9:f7:a6:ff:d5:
                    b4:a6:bd:52:18:00:7c:cd:d2:93:70:b0:00:2a:73:
                    f0:d1:5d:ac:be:81:51:4c:7a:c8:49:8a:2e:f4:50:
                    85:3a:0d:be:60:9a:f9:69:e1:dd:be:07:f4:39:4e:
                    3c:3a:8d:21:4b:c5:22:46:81:d4:25:48:87:60:e3:
                    ff:80:45:1d:df:18:03:b4:d7:dc:e6:ef:41:5f:65:
                    e8:0f:5d:71:06:28:f0:40:b9:42:a8:41:47:ab:02:
                    81:f9:8e:bf:b8:6a:ca:95:54:56:87:91:8f:fd:0b:
                    51:b5:43:f3:9c:3b:7d:bb:d4:59:b7:55:9b:4e:95:
                    0e:88:ea:25:e4:b9:54:34:4d:5c:b1:d2:6f:06:9b:
                    2d:12:3b:10:ce:ab:af:9e:83:53:b2:66:06:be:aa:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:08:26:6D:E6:E5:47:44:AF:8B:61:0C:A9:D5:CB:C1:7A:95:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/5b048418-79d6-3880-885d-14666e4c51bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl

            X509v3 Authority Key Identifier:
                keyid:C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.43.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0d:1b:46:c4:68:b1:de:f2:44:3e:94:51:4b:f2:0a:56:4b:
         a4:f7:ea:f6:37:ef:73:0d:f7:34:d0:29:64:8e:93:81:cb:c3:
         49:de:c6:76:84:ba:28:d4:db:9a:81:bd:67:32:05:c1:97:79:
         a4:6d:7a:d3:79:ea:f1:b4:1a:2b:d9:a0:5f:3e:48:03:93:51:
         df:4b:ac:c9:b0:51:cb:23:d1:19:dc:ff:89:f7:3c:d3:04:3b:
         20:d3:5d:71:4c:75:ef:4c:9b:a1:2d:6b:9f:0d:62:36:0e:c0:
         54:e7:0b:cf:07:0f:95:ca:2f:e8:ae:bb:4d:d9:89:9e:22:ac:
         b6:1b:67:7d:40:73:9f:5c:54:b9:07:3e:22:6d:31:44:96:42:
         53:a9:1c:64:ca:49:c8:9c:3e:54:f1:1c:44:37:3f:12:4e:79:
         2c:50:05:8b:a0:d7:9a:70:ca:97:c8:86:3f:7f:c0:9e:46:35:
         08:6e:65:57:7c:47:77:96:ab:46:62:cd:9e:47:37:3a:7c:9d:
         7b:a5:99:fe:50:e9:0c:3f:ee:f4:9c:81:54:c0:1b:c4:89:3f:
         cf:c0:0b:fe:5a:6b:df:90:72:68:ed:02:7f:aa:30:05:55:a8:
         bc:03:59:a4:ff:ee:33:2b:f3:32:88:d1:10:b0:5a:05:1c:04:
         af:9d:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----