Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/a84c838f-79d2-3634-9043-6d51550a28dd.roa
File:                     a84c838f-79d2-3634-9043-6d51550a28dd.roa (raw, json)
Hash identifier:          ii3DesBj2cqOhwSl7UaBs46EVqx9knO8QiqHNTHabZc=
Subject key identifier:   EF:11:DB:F7:C0:99:4C:5A:F3:AF:B5:E1:D9:9B:45:06:2B:81:FD:84
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F4328583F8C9B26CB3EA6DD4467A1DFC0
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/a84c838f-79d2-3634-9043-6d51550a28dd.roa
Signing time:             Tue 23 Nov 2021 15:55:25 +0000
ROA not before:           Tue 23 Nov 2021 15:55:25 +0000
ROA not after:            Sun 14 Jan 2029 05:00:00 +0000
asID:                     398304
IP address blocks:        162.218.242.0/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8c:9b:26:cb:3e:a6:dd:44:67:a1:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Nov 23 15:55:25 2021 GMT
            Not After : Jan 14 05:00:00 2029 GMT
        Subject: CN=4f36bcfe-2908-4a73-ae4c-83e0eb212083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:02:dc:7c:5d:61:f8:34:1a:59:a0:cd:34:
                    77:ad:39:3e:eb:37:b4:a2:98:85:51:c3:9c:24:bb:
                    34:d5:7f:0b:27:a6:a9:02:d9:48:fa:8a:11:03:1b:
                    45:c1:ef:c7:3e:fc:4a:7d:a0:16:f6:a1:fd:7a:3a:
                    38:5a:70:b2:b7:8b:ce:43:3f:37:6d:fe:32:34:18:
                    27:ef:f6:78:b1:5c:f2:cc:06:2b:f9:73:54:e8:26:
                    86:25:d3:cf:a5:67:66:4e:ca:f5:ba:11:c8:ac:4d:
                    0e:cd:df:e2:dd:b9:60:77:e7:a2:cc:6e:f3:8d:1a:
                    66:47:6b:9a:19:86:de:9e:2c:8d:63:29:6c:f2:57:
                    eb:82:f2:18:b3:12:7f:a1:e4:e7:12:c0:41:bc:2c:
                    fe:ac:04:76:79:f2:78:66:67:25:a8:37:71:16:ce:
                    7d:86:40:ac:5d:c7:f5:72:6f:d4:3b:2e:e6:8a:90:
                    43:21:ba:b9:ad:0d:b2:29:83:a2:c3:f2:35:c1:92:
                    ad:b9:0b:ca:34:2a:74:94:96:7c:0d:9a:f2:90:3a:
                    0a:80:b4:a4:97:b8:c5:2e:47:2f:d0:54:24:55:26:
                    e5:2e:c7:4b:9b:a9:dd:bc:c1:e6:e9:5b:27:0d:42:
                    79:13:a9:db:93:42:65:0b:1e:8d:b2:35:55:7b:4b:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:11:DB:F7:C0:99:4C:5A:F3:AF:B5:E1:D9:9B:45:06:2B:81:FD:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/a84c838f-79d2-3634-9043-6d51550a28dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.242.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:35:0e:3f:53:97:8c:a1:e2:f2:e5:d3:34:7a:d2:0f:35:
         8b:bb:12:cf:75:29:0b:02:bc:71:0b:0b:82:91:5e:aa:2f:e2:
         d7:f2:59:97:f0:c9:d7:3e:0f:f2:0c:66:99:80:37:c3:92:dc:
         2f:f8:01:f7:a5:d0:fd:20:54:02:5f:d2:62:05:04:55:e7:22:
         3d:a4:eb:8b:5f:fb:9b:3c:65:e8:d9:c4:64:e9:55:1d:8d:45:
         16:a8:83:38:6b:db:7b:81:73:fd:1f:5d:ec:b4:0a:a2:05:56:
         7f:6e:3c:8d:09:c2:fd:55:dd:5b:be:78:cd:ea:f2:6f:c3:74:
         ff:80:ff:ef:8d:96:4b:33:cd:1f:7b:e8:e9:f3:49:5f:63:e4:
         98:82:62:2d:63:dd:3a:13:67:70:68:04:83:7d:e1:cc:1b:9d:
         06:05:b4:92:51:48:3c:12:b1:b5:49:35:63:a3:da:fb:05:f9:
         74:30:50:8d:63:6e:e1:ab:5b:eb:c2:fb:fb:65:47:55:bf:29:
         24:af:04:72:0c:ba:8e:2b:cd:57:fd:30:9f:7b:c0:60:c1:3e:
         33:95:b7:4a:cb:06:d3:7d:f9:14:6f:8d:46:61:19:ad:f1:ca:
         73:79:69:83:bd:47:8b:52:f8:7a:60:fb:a8:47:ba:5d:be:2a:
         c0:0b:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----