Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/296598c2-430a-3c48-b902-15aafcb1533e.roa
File:                     296598c2-430a-3c48-b902-15aafcb1533e.roa (raw, json)
Hash identifier:          g4zpK0isjkIPVtD3y4BjLgMT1t4itIiM/17uLo3VAms=
Subject key identifier:   D6:7C:6D:37:6B:94:9F:B8:E0:CD:44:F1:74:19:AB:14:D8:D3:A7:0B
Certificate issuer:       /CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Certificate serial:       010D0C9F4328583FAD62BFE36F1AC641B1A21480
Authority key identifier: E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/296598c2-430a-3c48-b902-15aafcb1533e.roa
Signing time:             Sat 22 Oct 2022 12:00:00 +0000
ROA not before:           Sat 22 Oct 2022 12:00:00 +0000
ROA not after:            Tue 19 Sep 2028 04:00:00 +0000
asID:                     6456
IP address blocks:        208.90.168.0/22 maxlen: 23
                          208.90.170.0/24 maxlen: 24
                          208.90.171.0/24 maxlen: 24
                          2620:0:cf0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ad:62:bf:e3:6f:1a:c6:41:b1:a2:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Validity
            Not Before: Oct 22 12:00:00 2022 GMT
            Not After : Sep 19 04:00:00 2028 GMT
        Subject: CN=80d55db2-094a-41f2-aa43-0cd368358370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:f6:71:14:cd:10:86:05:fe:69:67:f6:11:
                    d8:25:d7:2f:ba:dd:40:a1:2a:9c:a7:23:2b:8a:d7:
                    e5:9b:92:ff:23:02:52:e9:03:34:0e:20:d4:4a:c3:
                    5a:09:7d:03:c7:16:7a:32:7d:b9:cc:8e:d0:8b:a2:
                    b0:d8:d5:5e:36:1f:ad:a9:72:6e:3f:91:ae:20:bf:
                    87:25:b3:8d:05:cc:49:ff:99:9a:f6:1b:8e:1c:c5:
                    b6:43:fe:4d:6d:24:e0:89:92:1c:0a:d7:11:55:dd:
                    91:cb:19:ef:17:9a:02:60:9e:6e:e8:36:31:81:40:
                    dd:af:f6:f8:08:42:47:d4:5b:5a:39:2d:3d:28:54:
                    ff:00:50:68:3a:57:72:82:16:cd:1e:8e:42:b5:7d:
                    bc:30:b9:0b:d8:3f:c4:c5:c1:b7:ef:38:8a:4f:46:
                    6d:ff:a1:93:b1:40:a5:8a:c2:b3:8b:74:10:d4:28:
                    d5:f9:bf:bf:83:a2:31:03:a9:09:96:5b:81:cd:07:
                    4e:6a:89:e1:8a:32:88:e4:3c:9f:0b:54:e5:0e:5c:
                    f8:ec:0b:6a:b9:97:bb:69:d4:4e:8a:21:64:fe:4c:
                    56:bb:d5:86:62:bf:c4:c6:82:d6:2e:b7:4f:4a:ba:
                    f4:cd:77:62:3b:4e:0e:49:4c:59:bb:74:5d:dd:1a:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7C:6D:37:6B:94:9F:B8:E0:CD:44:F1:74:19:AB:14:D8:D3:A7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/296598c2-430a-3c48-b902-15aafcb1533e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22
                IPv6:
                  2620:0:cf0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:04:d3:6b:04:d8:ae:fb:dc:05:86:e1:14:53:cd:ab:a4:
         d4:25:fc:32:7b:c7:c6:de:96:5f:f8:1b:39:9a:be:11:10:49:
         40:00:5b:9d:26:3d:db:67:93:8b:ba:b4:53:8f:f6:44:75:6f:
         d8:43:1e:48:c9:a7:7f:3d:51:de:70:a2:23:59:08:44:0b:c3:
         69:b9:d8:ba:ff:a9:e8:b6:e5:47:56:8a:9b:f6:24:b2:77:35:
         ad:03:a7:bb:7e:ba:22:8f:5b:8c:49:38:df:c1:ef:25:3a:9f:
         5c:f7:28:da:c0:6b:77:bb:3b:60:b7:62:74:51:7a:39:a9:85:
         ff:b5:8a:a1:0c:2c:4f:f3:54:8a:2a:c6:d8:b6:c7:83:80:ab:
         57:e5:67:ed:da:a9:d9:b5:1b:df:36:a9:ec:78:b8:73:62:8e:
         2a:84:59:30:b5:dd:d9:40:44:53:8a:28:dd:fd:01:55:53:fd:
         c6:6c:c1:5b:c1:43:b4:4f:2e:1e:28:cf:b6:6a:a9:30:8b:18:
         f3:70:e3:4e:82:7c:d9:9e:71:7d:1d:90:ca:1c:2a:f6:e5:8d:
         a8:61:66:e4:46:b6:30:68:77:0a:59:84:94:11:60:3d:1d:95:
         be:91:ba:51:84:3b:78:14:00:b0:53:c0:67:76:bf:d6:61:e6:
         1a:46:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----