Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/b0097a2f-f485-30b8-b058-32f3a5fa3526.roa
File:                     b0097a2f-f485-30b8-b058-32f3a5fa3526.roa (raw, json)
Hash identifier:          thQg1qGBuvIaw/j94qVSdLozYvf0Zl7HEdQO11AUEy8=
Subject key identifier:   29:DB:BA:2B:CD:6F:05:72:64:91:C0:BC:F4:90:04:1D:FC:36:26:75
Certificate issuer:       /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial:       010D0C9F432858418B5FE0B95DAF42353684FA70
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/b0097a2f-f485-30b8-b058-32f3a5fa3526.roa
Signing time:             Fri 24 Jun 2022 17:40:59 +0000
ROA not before:           Fri 24 Jun 2022 17:40:59 +0000
ROA not after:            Thu 26 Sep 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        199.15.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:8b:5f:e0:b9:5d:af:42:35:36:84:fa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
        Validity
            Not Before: Jun 24 17:40:59 2022 GMT
            Not After : Sep 26 04:00:00 2024 GMT
        Subject: CN=ffb9563b-1724-4881-8f34-a8accb76234e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:5b:e5:9b:f5:73:22:85:b2:65:e8:92:b5:
                    6d:aa:c9:7a:45:fb:88:42:f7:67:5f:26:50:b9:54:
                    2b:ec:dd:b5:d7:7e:07:1c:10:4a:22:e4:47:3d:9a:
                    b8:d7:9d:bc:79:cc:bb:68:c5:a0:d5:26:57:93:39:
                    65:c3:1d:98:8d:cc:a4:1e:70:96:1c:dc:10:6e:11:
                    c6:77:56:28:6a:5c:52:7e:61:d1:c0:cf:e9:0e:f7:
                    79:5b:43:64:65:5b:04:22:6a:fa:23:41:ed:dc:10:
                    65:1d:13:5a:6a:ae:05:c9:b6:1a:26:d7:6a:13:3b:
                    d9:97:13:1e:76:46:07:60:f8:20:9a:74:26:3e:dd:
                    6a:17:00:f0:d8:f1:70:5b:20:af:c9:17:fc:c2:57:
                    50:83:35:b3:b3:29:79:50:3a:41:ba:b7:c9:7f:23:
                    25:b2:a4:b8:eb:6a:0b:8e:b9:ef:3e:36:bf:a8:37:
                    45:a5:d8:ce:24:10:fe:f0:ac:8d:bc:ac:75:03:a3:
                    77:22:72:37:4f:9d:2e:79:3c:47:23:28:44:2e:14:
                    ae:64:57:3b:2a:26:bb:40:95:3b:28:3a:c2:83:12:
                    85:3a:50:29:2f:15:bc:7a:bb:7e:36:42:8a:03:e2:
                    10:0f:e3:ac:14:34:8d:9d:b5:21:cc:e5:b3:d0:5b:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:BA:2B:CD:6F:05:72:64:91:C0:BC:F4:90:04:1D:FC:36:26:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/b0097a2f-f485-30b8-b058-32f3a5fa3526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl

            X509v3 Authority Key Identifier:
                keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:78:1d:8d:d3:60:db:3c:55:32:cf:d9:97:30:f8:fa:a9:
         de:2a:c7:6e:4e:d0:e6:43:2f:49:13:85:3a:85:1d:0c:68:43:
         5b:38:38:cf:95:51:75:8c:af:d5:a3:47:41:92:35:80:ad:e9:
         81:16:d7:68:67:b3:11:e2:a1:27:b4:5c:a4:de:f1:86:c7:87:
         26:c1:34:07:90:2b:70:06:f8:0c:a0:ce:06:e7:bb:3c:5b:ec:
         02:3f:fb:a8:e8:4c:af:43:66:c0:0d:18:96:28:4e:e9:ed:75:
         a0:05:d8:b0:a7:20:69:a9:d7:ac:4f:e3:80:52:08:bc:40:67:
         5f:e4:f4:37:48:8b:3f:f6:5e:0a:c3:2b:ce:7f:83:0e:5f:ca:
         f5:a4:4f:95:39:99:a4:ac:3e:c1:af:d1:df:eb:40:e4:9c:7c:
         44:5a:50:3e:0e:1f:4a:ec:9a:2e:a6:ac:20:49:d5:61:b7:64:
         f3:9e:98:c7:1f:38:43:bb:94:47:61:e7:4e:0e:23:da:4d:d4:
         dc:0b:56:72:27:cc:01:6c:34:7d:c9:03:d2:65:44:9b:01:73:
         40:70:7a:fc:ad:ec:54:5a:c4:b7:d5:1f:6f:ec:ae:1e:93:03:
         9a:0d:4d:4d:02:67:13:ba:be:52:67:cb:1c:db:ef:4a:53:ce:
         26:1d:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----