Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/557ab3b9-39fa-3b12-a2fc-0e8facdfd969.roa
File:                     557ab3b9-39fa-3b12-a2fc-0e8facdfd969.roa (raw, json)
Hash identifier:          sn2ttH5R6LVfs5BURJjKtQjC4UDxgxxJ3FVYobvvh30=
Subject key identifier:   C2:01:50:76:71:C4:68:5B:79:79:6E:08:DB:5A:7C:9B:D3:3D:CF:35
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F4328584235CDFEC7FB3374710D070A40
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/557ab3b9-39fa-3b12-a2fc-0e8facdfd969.roa
Signing time:             Tue 13 Jun 2023 21:58:10 +0000
ROA not before:           Tue 13 Jun 2023 21:58:10 +0000
ROA not after:            Mon 11 Sep 2023 21:58:10 +0000
asID:                     834
IP address blocks:        64.84.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:cd:fe:c7:fb:33:74:71:0d:07:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Jun 13 21:58:10 2023 GMT
            Not After : Sep 11 21:58:10 2023 GMT
        Subject: CN=95d79bbc-fff1-4ae9-88a1-1fad4a0e41f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:88:fa:90:df:13:d8:89:4d:d3:ff:47:d8:
                    e5:53:69:3d:43:22:93:1a:94:fd:80:21:bc:d7:13:
                    b5:75:44:f4:ad:56:e8:fb:3d:0e:20:a5:38:6c:6e:
                    a1:cb:15:d0:ee:13:93:ca:c6:d5:a4:da:e7:49:1b:
                    ea:f2:c7:43:78:13:7a:c8:5c:20:b6:ef:8c:64:38:
                    6c:ba:83:e8:99:2f:38:b3:b2:a1:20:16:a3:80:a8:
                    68:0d:0d:db:80:00:c3:39:c0:3d:5b:f0:db:36:ab:
                    9f:54:42:11:43:67:14:68:62:9b:44:ba:20:14:00:
                    70:9d:ba:81:42:f3:b6:07:53:8c:95:7c:72:dd:b0:
                    8b:52:9d:14:61:91:03:d5:db:84:23:0a:6f:0d:b9:
                    d8:7a:c3:ab:3c:5f:08:a4:19:e2:d3:a5:15:05:e5:
                    36:20:ae:67:6f:a5:d8:a9:bc:7e:0f:94:9d:98:8c:
                    ab:b7:27:66:21:07:e4:09:8b:df:95:9a:37:80:f4:
                    5c:93:d4:f9:fc:5d:4e:26:8d:cc:c9:c8:fb:12:3e:
                    ae:b4:97:54:03:f0:97:b9:22:36:8b:2c:31:a1:b3:
                    bd:85:af:63:d9:fc:cf:58:ff:93:34:01:e1:d7:0a:
                    2b:22:56:9b:d2:1c:55:4b:96:40:c9:35:c3:35:07:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:50:76:71:C4:68:5B:79:79:6E:08:DB:5A:7C:9B:D3:3D:CF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/557ab3b9-39fa-3b12-a2fc-0e8facdfd969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:97:d1:ab:ad:c8:d3:0a:d7:0f:93:da:77:d0:99:c9:48:94:
         9b:64:80:60:e7:3c:fe:b8:c8:a0:8e:64:e5:59:33:18:64:b2:
         14:c1:ae:4e:2c:46:84:24:00:94:f4:30:53:b6:80:b5:e0:f4:
         a0:d1:5c:2e:55:95:c1:36:16:b4:39:80:9a:95:41:e7:3a:64:
         96:04:e9:4a:80:97:ce:86:aa:ef:41:d8:43:7b:0c:18:52:b0:
         aa:46:d8:74:34:13:b7:30:4d:e7:91:ae:d4:ed:9e:b6:df:4e:
         2a:4a:6e:91:9c:aa:15:b5:07:90:91:16:ba:34:b4:90:db:d9:
         43:fd:c4:bb:30:74:20:ea:d1:af:e3:2a:60:db:d2:4d:a7:4c:
         86:d7:01:22:0e:2f:05:1c:a5:27:60:51:7d:57:1c:73:56:15:
         51:1e:b3:45:e0:96:c7:29:11:ae:f8:63:a5:56:cd:8c:bd:cd:
         a9:dd:63:8e:b9:bb:af:68:30:7b:ee:fd:bc:70:e5:84:85:c5:
         1e:cd:46:8d:10:e5:ef:06:37:c3:37:b2:52:92:27:82:74:8e:
         e1:bb:8c:9e:3f:11:fd:e5:39:76:65:c3:14:66:06:31:f8:61:
         09:fb:99:64:ea:ec:12:08:7b:fc:b8:45:ce:56:4f:2f:58:d3:
         60:64:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----