Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/611abbaa-4abe-3ab0-a22c-931c0a622ff1.roa
File:                     611abbaa-4abe-3ab0-a22c-931c0a622ff1.roa (raw, json)
Hash identifier:          714sin+PWkQJj1HZnrx4A52fHGQ5SEdhHGrj7F7ufGE=
Subject key identifier:   4D:47:91:3E:83:B5:7C:84:0B:1A:48:78:2E:36:E9:FF:E0:64:45:DC
Certificate issuer:       /CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49
Certificate serial:       010D0C9F4328583DD334362DABE0FDA939255100
Authority key identifier: E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/611abbaa-4abe-3ab0-a22c-931c0a622ff1.roa
Signing time:             Thu 16 Dec 2021 23:24:35 +0000
ROA not before:           Thu 16 Dec 2021 23:24:35 +0000
ROA not after:            Fri 09 Aug 2024 04:00:00 +0000
asID:                     399266
IP address blocks:        165.140.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d3:34:36:2d:ab:e0:fd:a9:39:25:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49
        Validity
            Not Before: Dec 16 23:24:35 2021 GMT
            Not After : Aug  9 04:00:00 2024 GMT
        Subject: CN=daa8a63f-0e31-4e0f-a82f-cde4cd2c7a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:a5:c6:b3:7a:8d:7b:d3:48:f8:33:ef:87:
                    d7:0c:2f:be:5b:8d:03:1c:c0:85:b0:84:63:47:3e:
                    3f:b2:36:0c:bc:84:34:7a:b5:dd:fd:3e:38:7e:5c:
                    63:f4:3f:e9:f9:e1:39:19:eb:4b:97:50:12:21:02:
                    f3:d5:a6:c0:44:49:0f:c5:e6:02:92:ff:35:a6:36:
                    01:8a:49:49:5f:0e:3e:c7:cc:1f:27:b2:7f:68:75:
                    30:3a:fd:41:eb:7d:9b:3a:f0:be:c0:5c:a4:70:9c:
                    d1:3f:4f:2a:57:85:52:74:2b:b8:60:03:8f:13:6e:
                    3f:0b:1a:fc:64:7b:2f:89:af:1a:6a:76:c7:48:0a:
                    84:d4:53:65:a1:0f:f9:77:49:86:7e:cc:e0:e1:09:
                    4f:85:65:0c:0b:79:e3:27:40:6c:a7:e2:c8:7a:ca:
                    6f:72:7c:16:61:33:84:bb:99:7f:2b:60:2f:2b:fa:
                    89:f9:9f:8b:f3:7c:89:71:ce:54:db:ae:f0:f6:6f:
                    8f:54:50:13:83:11:9f:a3:31:ba:22:a2:d8:b4:55:
                    0b:cf:89:1e:a6:10:39:48:38:8f:e4:b8:f2:b9:38:
                    bd:20:b6:09:66:6d:f6:d0:e1:b2:95:11:86:48:c9:
                    15:90:96:53:3e:18:3a:45:a3:7a:c4:78:05:26:e2:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:47:91:3E:83:B5:7C:84:0B:1A:48:78:2E:36:E9:FF:E0:64:45:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/611abbaa-4abe-3ab0-a22c-931c0a622ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl

            X509v3 Authority Key Identifier:
                keyid:E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d4:7c:c3:f4:d1:a9:2b:16:3d:a0:35:f9:bc:6f:c4:7a:06:
         1a:57:e7:bd:89:67:d5:ac:a2:cb:fd:ed:66:67:c4:3a:7a:d6:
         2c:ab:d6:ca:87:f1:54:f0:97:5b:28:fb:1b:9a:cd:d5:5b:35:
         6a:49:ca:6f:88:47:25:f4:72:4e:5c:52:8a:16:04:b6:c9:c4:
         b4:4a:43:5d:69:6e:e0:5b:6e:5b:31:7d:4b:b5:b7:8f:12:f8:
         97:d0:56:cc:e1:f9:9a:25:1d:ce:e9:77:df:ff:57:30:9e:54:
         79:98:c5:cb:f4:f2:50:2d:a5:81:a1:61:b1:a4:cd:c2:61:ea:
         3a:0a:1c:d7:4b:0a:4a:e3:f9:68:8c:33:65:84:38:b4:05:ae:
         58:62:44:48:f9:1d:93:94:81:e4:30:5f:0f:d1:47:92:dd:2a:
         12:a8:f9:05:fc:5f:0b:13:48:ef:e5:ed:72:49:d6:7b:c2:20:
         e5:89:3e:6f:2e:4d:0e:54:c0:81:e1:06:2a:7c:68:89:31:fc:
         25:72:af:24:0e:0e:3b:b9:92:f0:fc:21:1e:b1:b3:3b:3c:c6:
         e1:e8:56:93:c0:87:b0:e8:5e:cd:2e:3d:82:32:56:a8:0d:2a:
         04:76:6d:d9:fb:ea:df:b3:24:6b:80:75:9b:0f:15:66:a0:9e:
         2b:b4:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----