Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/3d23db49-612b-3ee1-b645-b454a81e96f0.roa
File:                     3d23db49-612b-3ee1-b645-b454a81e96f0.roa (raw, json)
Hash identifier:          sOzbgiySpEG9nemqUmKpBq1o35/Rg4mOgSdspAngagc=
Subject key identifier:   9C:9C:FF:8A:8E:2B:7E:84:2D:4F:1A:69:41:78:4C:35:17:E8:66:19
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F43285841E46E3DFD5C247679C630C290
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/3d23db49-612b-3ee1-b645-b454a81e96f0.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 26 Jul 2023 00:55:16 +0000
asID:                     7018
IP address blocks:        64.84.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:3d:fd:5c:24:76:79:c6:30:c2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 26 00:55:16 2023 GMT
        Subject: CN=c7d03d90-e539-4cc5-9c34-47a15d641db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:6a:72:59:c8:c6:7a:1a:d6:93:b0:e8:6a:
                    eb:be:13:cd:7f:09:32:b9:62:12:c8:cd:dc:e8:12:
                    5f:5d:46:86:bc:f7:b8:74:bd:40:62:8d:14:fa:de:
                    b9:a2:85:a1:36:1c:65:a8:47:9c:b9:5a:41:eb:de:
                    48:51:87:ae:17:03:09:07:1c:ee:44:f2:e0:09:a6:
                    53:a7:58:ee:93:07:95:c6:31:fd:0a:6b:15:c6:e7:
                    22:cd:62:39:81:d3:41:60:1c:72:38:a3:e9:0f:19:
                    66:ca:d6:41:14:27:25:2b:bc:7d:16:92:7f:c0:5b:
                    97:d1:e3:5a:81:fe:fc:b5:cf:86:b7:ae:a5:81:f4:
                    e3:8b:ff:dd:71:52:a2:06:25:55:e8:ab:b9:d8:9c:
                    a7:9c:46:25:d4:a2:fd:a2:ed:d2:47:1a:c6:09:a7:
                    62:71:4d:2d:fd:27:ba:9b:56:c7:33:46:6c:e1:ba:
                    ca:48:aa:5b:e1:39:d4:4a:c5:d1:f2:00:bb:79:84:
                    34:86:f1:b5:b7:95:c6:7d:43:77:4d:b8:a0:7a:f6:
                    d3:fb:cf:13:0f:c7:8b:5e:2b:c2:98:fa:13:4c:52:
                    34:c4:2c:d7:f3:08:56:da:e9:8a:32:fd:01:21:b6:
                    c7:59:46:4a:9b:46:e1:28:ce:9b:63:6e:92:8d:15:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9C:FF:8A:8E:2B:7E:84:2D:4F:1A:69:41:78:4C:35:17:E8:66:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/3d23db49-612b-3ee1-b645-b454a81e96f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:20:8c:7a:9a:e6:a2:e2:b8:95:98:b1:ca:cd:cc:25:85:
         f7:82:d0:c9:fd:7a:9e:39:9e:c0:0c:6e:f9:23:62:80:24:e5:
         b1:f9:19:be:64:f5:15:45:27:81:ad:fe:c9:bd:93:cf:d0:28:
         30:6a:7d:6f:9a:fa:99:6f:9e:c0:61:a4:52:56:98:fd:2a:f9:
         61:f3:de:e3:ce:86:b3:27:ec:c8:6c:87:0f:19:a5:66:ce:a1:
         92:87:e3:3c:9d:01:aa:77:26:d2:3e:c3:2b:1f:e2:b1:d6:62:
         05:4b:1e:4c:98:62:4d:e7:69:ec:3a:34:3d:ce:24:fb:f8:bf:
         9c:0d:9f:61:4a:1a:ac:fd:19:8a:9f:94:d0:4f:8e:9d:92:af:
         b3:67:31:a6:5e:6d:c6:ca:0f:23:d5:bf:3b:aa:05:8c:51:83:
         96:b5:e5:d7:2b:48:73:e1:ac:5f:b7:74:a2:6c:4c:27:38:9c:
         e5:be:bd:e4:86:3f:b5:39:38:d6:56:58:18:75:c8:9d:cf:bd:
         58:bb:16:e6:0c:e6:c2:4e:b8:c6:db:31:52:a0:a7:4b:1a:82:
         03:98:cd:96:8f:a2:cf:3e:15:fc:14:7e:ea:1a:c8:be:82:77:
         a2:3d:20:5c:cb:66:a3:74:79:93:b8:d7:4f:05:bd:14:d9:e6:
         a2:be:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----