Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f25017-9c84-3a37-b857-19064c77cfa0.roa
File:                     21f25017-9c84-3a37-b857-19064c77cfa0.roa (raw, json)
Hash identifier:          wutFAilJg6NEKDAs++6DJYtIGXL0Ghl1eTl2XMBmZrU=
Subject key identifier:   21:13:EF:86:9D:33:CC:1D:46:0A:84:74:8B:73:AF:79:32:A1:AA:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328583DA389704C88098D86E92FB0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f25017-9c84-3a37-b857-19064c77cfa0.roa
Signing time:             Thu 20 Jan 2022 22:23:07 +0000
ROA not before:           Thu 20 Jan 2022 22:23:07 +0000
ROA not after:            Tue 23 Jul 2024 04:00:00 +0000
asID:                     0
IP address blocks:        192.153.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a3:89:70:4c:88:09:8d:86:e9:2f:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 22:23:07 2022 GMT
            Not After : Jul 23 04:00:00 2024 GMT
        Subject: CN=23cec141-e6d7-488f-a634-c845f16272d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:c6:77:a4:5f:0f:a4:e7:49:a5:27:91:bb:
                    95:15:09:e3:3b:a6:1b:bd:90:dd:5c:1d:10:86:79:
                    70:48:52:8f:01:c6:db:17:cf:a9:41:b8:84:6a:20:
                    96:aa:b8:43:13:52:77:4f:df:47:ea:1f:0d:63:c4:
                    cb:9d:11:c1:77:52:cd:ff:0f:1a:96:b8:2a:9b:84:
                    60:ef:a1:01:27:ee:28:ff:79:e4:d9:8c:0a:76:82:
                    cb:17:fb:e4:6b:73:7a:ea:93:6c:23:4a:55:ac:cb:
                    66:b0:f6:b1:4d:b6:7b:64:05:a6:e6:7f:e9:8f:be:
                    d8:87:fe:32:19:60:6f:e3:e8:1b:91:bd:30:bb:42:
                    97:8c:c7:36:f8:eb:80:9f:82:1a:fe:8f:0b:5d:47:
                    a0:a3:c3:f6:96:6d:c8:b1:0e:cc:06:35:51:a1:4d:
                    d8:b0:59:92:93:09:37:58:63:bf:c3:0d:b6:ca:fc:
                    35:d0:10:0c:9c:e9:1d:21:6d:33:5c:9e:59:c4:9a:
                    86:9f:d6:f2:a3:17:33:11:d1:c2:75:71:18:b6:76:
                    8c:8c:92:bc:1d:df:73:d4:19:aa:15:1e:b3:c9:34:
                    e3:56:c1:ec:b9:4f:b0:e0:fc:2f:e6:80:5e:5c:b3:
                    d7:ed:74:c7:39:09:28:e0:57:a3:5d:a5:89:42:c7:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:13:EF:86:9D:33:CC:1D:46:0A:84:74:8B:73:AF:79:32:A1:AA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f25017-9c84-3a37-b857-19064c77cfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:c4:9d:04:4d:91:72:e8:cc:00:74:73:6a:d2:b6:a7:a5:
         6f:a8:f9:08:2d:b4:d4:54:d6:5f:3d:b2:1a:7d:b1:98:3b:7e:
         cc:f0:8b:00:e8:e7:3f:fc:d1:17:7f:c1:6a:b3:c1:c2:02:ef:
         80:87:ab:cd:1a:00:0d:94:ee:fc:e2:17:56:7a:ae:cf:e5:4f:
         62:db:5f:50:6a:c2:0f:d6:97:c4:48:19:8b:31:53:4d:bd:1e:
         d1:51:7d:a4:67:f6:99:00:d0:6a:58:36:7e:37:db:98:36:0d:
         da:e0:53:de:32:a4:3f:07:9e:97:50:5e:d2:31:e5:92:90:07:
         2a:3c:cc:48:99:a5:be:1c:2c:b9:d8:b9:91:31:84:c8:ec:94:
         d7:7b:3b:8a:d2:4f:ac:21:b2:d9:7f:94:6a:3f:be:24:3a:f8:
         d3:4b:bb:7b:67:39:2f:79:b3:8d:2d:e3:ba:5c:71:2d:84:6b:
         94:d8:b2:2f:70:58:ba:54:40:5f:0b:32:d1:b5:fa:7d:f2:21:
         ab:b6:5b:a2:95:42:1c:6d:3d:95:93:a7:a7:ca:bc:bf:bb:e8:
         79:46:84:7b:3f:53:3f:ed:1e:db:c6:0e:48:32:fb:83:e0:44:
         4d:a6:94:37:d5:c5:30:1f:02:19:11:f3:f6:e1:ae:c1:f9:e8:
         48:ab:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----