Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/630e1ec2-7efa-385d-943c-e9d1306de1b4.roa
File:                     630e1ec2-7efa-385d-943c-e9d1306de1b4.roa (raw, json)
Hash identifier:          NdGsGB3e7/mb5P2zvkQpIFQeLrPwU8D5906BvRTKNCc=
Subject key identifier:   1E:26:E4:33:3A:68:FE:2A:DD:BD:61:A3:D9:71:7E:72:96:6C:D5:82
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F4328584286569A84F1A413585D426840
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/630e1ec2-7efa-385d-943c-e9d1306de1b4.roa
Signing time:             Wed 12 Jul 2023 18:18:05 +0000
ROA not before:           Wed 12 Jul 2023 18:18:05 +0000
ROA not after:            Tue 10 Oct 2023 18:18:05 +0000
asID:                     834
IP address blocks:        64.84.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:86:56:9a:84:f1:a4:13:58:5d:42:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Jul 12 18:18:05 2023 GMT
            Not After : Oct 10 18:18:05 2023 GMT
        Subject: CN=a9c43757-f436-41a0-8951-d18a6851e9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:1f:27:25:5d:93:04:da:5b:6c:4d:b0:42:
                    90:7e:e6:8e:70:1d:8a:d9:bc:f9:59:8a:be:06:f4:
                    8e:91:e6:b3:00:ef:81:bb:42:93:76:4f:e7:40:35:
                    1f:15:a5:74:eb:10:fb:e2:aa:3b:99:7f:de:3a:ae:
                    ef:9d:e3:50:95:80:59:1f:3e:2b:2e:6d:7a:00:d0:
                    17:9f:63:73:1b:c9:f0:0a:59:99:f6:51:cf:66:f9:
                    63:88:4e:b3:cc:91:a3:9a:db:2b:0a:17:89:6e:c4:
                    d8:54:c9:71:15:d2:10:1d:4f:0a:07:ca:48:83:29:
                    1d:35:f1:96:c3:e5:33:70:07:40:cb:78:16:81:4e:
                    b3:6e:eb:87:f2:15:38:a1:87:3c:2b:e3:e5:2d:45:
                    83:6e:23:b1:61:a7:98:dc:2d:46:83:0f:b5:60:1e:
                    a2:62:c6:57:85:c9:7d:c6:04:b7:dd:9b:7f:a2:fb:
                    e8:71:32:da:1a:91:96:b5:44:86:90:1f:02:ec:8d:
                    ad:cb:cd:ce:3b:3c:fe:5a:be:d5:7c:1e:4d:79:4b:
                    3d:70:e7:b8:b0:88:75:97:3e:96:7f:76:8d:e9:cd:
                    a7:30:7c:ab:67:11:15:ed:1a:a0:5e:b5:0d:d4:1f:
                    28:0a:bc:e4:b5:e9:52:3e:c2:71:65:7d:e6:76:fb:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:E4:33:3A:68:FE:2A:DD:BD:61:A3:D9:71:7E:72:96:6C:D5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/630e1ec2-7efa-385d-943c-e9d1306de1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:c0:44:27:ac:e4:67:02:7a:53:4d:72:be:cd:68:a9:b4:
         3d:39:25:68:22:e2:30:b0:41:e0:f3:03:9f:ae:73:bf:90:75:
         51:95:2d:cc:ae:26:e5:83:94:0b:aa:80:b4:55:8f:f5:fd:30:
         4f:6e:cf:ca:f0:ab:14:cc:48:52:19:e7:f6:e9:51:b4:70:10:
         ab:35:71:ed:83:40:b5:ec:45:c2:7f:50:1f:7b:ce:ac:46:dc:
         4d:68:d7:7c:8f:45:e5:39:bb:77:8a:d8:a8:18:3c:37:b3:07:
         13:08:ec:57:a2:8b:77:07:7e:7a:0b:59:47:17:b1:09:fe:57:
         bc:f6:38:a1:b9:81:d3:f7:a3:36:89:1b:e2:e4:ca:94:06:bc:
         8e:4e:b7:6c:58:16:a4:f6:10:31:06:c9:97:ca:88:2b:90:43:
         98:22:5e:d6:ce:53:56:3f:a1:b3:00:63:c8:05:9e:f0:e9:eb:
         8d:35:b0:29:c7:2a:4f:9d:0a:ff:41:3f:d7:b2:af:10:60:53:
         bd:5f:4e:c7:3c:98:c4:b4:f9:4b:61:94:43:55:48:1e:11:76:
         54:c4:2d:d7:ad:19:ec:28:83:61:57:5c:d1:be:6f:bc:74:a1:
         29:cf:41:a6:09:43:da:6d:6d:d0:5d:fc:21:5f:db:8d:80:59:
         4f:a4:7c:b8
-----BEGIN CERTIFICATE-----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