Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/20664a28-8d6b-3199-bb69-7ddd0192b456.roa
File:                     20664a28-8d6b-3199-bb69-7ddd0192b456.roa (raw, json)
Hash identifier:          +ZJKPjiYb0Qxb5ZZMksYWWKAa7voQlyRelXRchd5X3A=
Subject key identifier:   AA:A2:B8:5B:66:73:03:47:3C:DE:1E:ED:BA:6C:43:41:04:F7:20:85
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F43285842E22F7FABDECBE5A06AE08B80
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/20664a28-8d6b-3199-bb69-7ddd0192b456.roa
Signing time:             Mon 14 Aug 2023 15:53:39 +0000
ROA not before:           Mon 14 Aug 2023 15:53:39 +0000
ROA not after:            Sun 12 Nov 2023 16:53:39 +0000
asID:                     398465
IP address blocks:        64.84.96.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e2:2f:7f:ab:de:cb:e5:a0:6a:e0:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Aug 14 15:53:39 2023 GMT
            Not After : Nov 12 16:53:39 2023 GMT
        Subject: CN=df38f9a2-e60d-4711-a2c3-30d7947450e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:88:dc:7f:4b:ed:5c:a8:61:1c:af:bc:a9:
                    e3:75:63:d6:25:51:e8:cd:fa:b2:da:3d:4d:4a:be:
                    13:68:ef:48:48:5d:d0:79:56:0a:d8:3e:2e:77:54:
                    06:f9:fa:0d:e1:17:1e:08:c4:66:c5:58:e3:37:55:
                    42:a9:98:b6:ff:66:af:02:0a:b0:19:0d:fe:ac:d9:
                    12:e2:34:ba:a4:59:e8:af:7a:78:c5:29:3f:2c:bd:
                    b5:d2:1f:1f:3a:5a:e2:d6:b9:7c:df:10:32:53:c0:
                    21:39:c4:15:7d:32:09:6c:cb:c8:56:82:ef:42:46:
                    3d:1b:e2:b5:b0:c3:bf:bc:a0:06:60:48:0e:68:81:
                    2a:a6:48:5a:7b:e0:52:5e:68:2c:3b:05:7c:63:ad:
                    fe:5c:f5:d0:9e:8e:11:8b:0d:50:d8:27:85:2e:63:
                    ad:ed:12:40:65:78:0d:69:6a:ca:8f:97:9e:25:3a:
                    79:88:81:b6:e4:42:99:86:e7:23:49:7b:62:42:90:
                    e6:6c:13:c2:83:32:e3:a8:2a:bb:cf:50:4f:33:16:
                    7d:e4:1b:88:69:b4:35:21:3c:df:a4:dc:3d:78:ea:
                    40:0b:5e:d7:f3:13:e4:4a:b7:28:b7:d2:d9:1e:bb:
                    d3:e4:2a:d7:ce:ce:b5:a0:c4:26:7f:16:ed:01:7c:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A2:B8:5B:66:73:03:47:3C:DE:1E:ED:BA:6C:43:41:04:F7:20:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/20664a28-8d6b-3199-bb69-7ddd0192b456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:ab:95:dd:c1:bc:20:02:39:68:46:6e:c3:1f:ad:4b:e2:
         bd:51:76:f8:a5:c9:40:55:59:1e:09:68:c6:01:27:f1:9e:fc:
         32:58:de:7f:74:53:af:56:5e:1b:93:a1:b8:f1:78:91:7d:cc:
         54:fd:bb:f3:7d:72:d7:c7:d6:04:76:c3:1c:c5:2e:d1:0c:59:
         ac:6e:15:8d:8f:96:f5:35:3f:90:40:d6:1e:f6:60:a7:23:af:
         86:76:6e:ca:81:28:eb:ec:7e:1d:51:0c:90:7a:db:1b:ff:eb:
         26:37:e7:2f:89:85:6d:24:23:9a:ed:ec:6a:42:b6:26:04:69:
         e0:34:02:e0:20:0d:54:6e:6e:0b:72:71:da:a5:8a:de:7e:54:
         71:78:d6:b2:3e:09:75:c2:a1:ad:47:ab:9a:60:d4:ae:e0:d5:
         a3:9e:a8:5c:0a:0a:8f:11:e6:94:c6:29:bf:7e:35:46:65:0f:
         6a:d3:50:d4:d0:9c:0f:b7:57:51:f2:c7:cb:6d:78:7f:94:d0:
         a8:f2:a0:d1:59:af:0f:9c:9c:e0:6e:71:d1:f6:0a:25:d0:25:
         97:81:b2:51:62:4b:bb:d2:2d:1e:37:c9:e9:f9:b7:15:97:82:
         27:ae:40:87:77:0e:a9:93:b2:66:bf:f6:43:e7:de:fa:64:30:
         a9:e0:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----