Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/cc8da5f6-89da-3a41-a7d3-74b756966147.roa
File:                     cc8da5f6-89da-3a41-a7d3-74b756966147.roa (raw, json)
Hash identifier:          cf/w4WVAIbrOX9zdl7yd0LYpFTP8wzTEHi4/Ou9MyFM=
Subject key identifier:   88:09:DC:E6:E9:B0:95:47:B1:A2:3D:E9:95:25:EC:6C:20:28:9C:81
Certificate issuer:       /CN=e87e7197-115d-4b17-bafc-0f9752e38b31
Certificate serial:       010D0C9F4328583F7ACB6523A7E00C841A684C40
Authority key identifier: E9:0F:2B:5C:D4:BD:D1:46:B0:8F:DB:7A:D9:B0:64:7C:9F:AE:FF:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/cc8da5f6-89da-3a41-a7d3-74b756966147.roa
Signing time:             Wed 05 Oct 2022 15:34:04 +0000
ROA not before:           Wed 05 Oct 2022 15:34:04 +0000
ROA not after:            Tue 07 Jan 2025 05:00:00 +0000
asID:                     13742
IP address blocks:        70.37.192.0/19 maxlen: 19
                          2606:1740::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:cb:65:23:a7:e0:0c:84:1a:68:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87e7197-115d-4b17-bafc-0f9752e38b31
        Validity
            Not Before: Oct  5 15:34:04 2022 GMT
            Not After : Jan  7 05:00:00 2025 GMT
        Subject: CN=eeb82d3a-eb28-408f-a3cc-f4779c5bdd8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:df:5f:74:9a:cf:45:51:34:28:b3:5c:9c:
                    2c:09:50:66:9e:c8:aa:9c:16:e8:1d:e1:ed:89:01:
                    b1:8c:7a:3d:92:59:6f:9b:53:95:6e:27:f6:dc:25:
                    20:55:e1:f5:76:b0:ff:77:55:82:75:db:41:65:33:
                    f1:db:ab:57:6f:7d:4e:09:94:8f:67:3e:ee:5f:36:
                    26:b0:ff:ac:59:63:52:c7:e9:ed:07:f3:43:09:08:
                    b1:38:fb:0c:e7:63:cf:41:2d:0e:68:33:18:e7:e9:
                    f3:f2:5d:05:1b:18:3f:29:23:12:75:2e:69:96:24:
                    3b:a5:ec:91:c8:c6:b1:1c:ee:70:58:92:13:08:7f:
                    2b:1a:13:23:c8:fd:86:d8:49:8f:b8:97:6a:17:7c:
                    d8:23:cc:f2:71:9a:20:f3:ee:b9:8f:26:d4:16:1c:
                    27:ee:f3:cd:30:a7:73:ac:f3:e6:3d:69:65:98:e2:
                    bd:e4:a4:1c:68:8c:06:92:96:be:36:a6:6d:11:1c:
                    48:e3:d2:e8:f3:76:f7:e9:89:7a:85:20:45:e2:c3:
                    cb:e8:ff:42:dc:4d:d0:92:68:6f:f9:d4:57:48:e0:
                    f3:d0:8b:35:e4:d9:af:4c:f7:a0:92:4b:d6:7a:6d:
                    8b:09:9b:74:68:42:71:bb:22:9f:5e:a2:12:5b:66:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:DC:E6:E9:B0:95:47:B1:A2:3D:E9:95:25:EC:6C:20:28:9C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/cc8da5f6-89da-3a41-a7d3-74b756966147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/e87e7197-115d-4b17-bafc-0f9752e38b31.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0F:2B:5C:D4:BD:D1:46:B0:8F:DB:7A:D9:B0:64:7C:9F:AE:FF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.37.192.0/19
                IPv6:
                  2606:1740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f2:de:4c:a0:6c:7e:7e:c3:d8:b9:00:ab:97:ee:71:34:31:
         6f:b2:34:94:3a:3f:fd:60:6a:9b:e1:5e:58:ee:6d:1a:72:34:
         4f:bd:9b:02:d0:47:4a:a1:9c:88:1d:d9:23:88:10:cb:de:6a:
         24:be:71:86:4f:a9:44:72:73:c6:4d:fe:7b:7d:b4:8f:17:5a:
         ce:0c:3e:42:78:50:da:08:96:12:9f:86:e7:78:bf:4c:70:54:
         c2:18:47:d2:72:fa:66:ec:32:6c:9c:78:5e:82:64:ec:a2:30:
         e2:69:36:bb:35:02:64:03:2a:e3:da:d6:75:f7:74:f5:3b:3c:
         f8:e4:b4:33:9b:99:5d:72:35:d7:32:92:60:67:21:96:9c:52:
         ff:32:18:85:26:ce:9b:d2:f5:20:57:c4:6b:4a:ae:a1:3a:68:
         4d:af:2f:56:96:d7:5a:dc:28:c9:b8:0a:63:4e:52:61:20:c1:
         d6:1f:65:22:20:92:b8:05:b8:90:a3:d4:40:35:05:11:4c:9f:
         7f:cd:b8:95:10:5e:7f:4c:a2:c1:95:cf:7c:72:ca:6c:7d:3e:
         12:d9:ba:4d:e4:58:52:b7:2b:cd:27:a5:0f:ce:be:99:97:24:
         19:9c:4a:ce:1f:c2:c6:7a:58:bd:14:0d:57:a4:1e:a3:a5:8c:
         97:64:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----