Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/7a6b4cc4-b9b8-3f76-ae33-1d611aee1854.roa
File:                     7a6b4cc4-b9b8-3f76-ae33-1d611aee1854.roa (raw, json)
Hash identifier:          UhWjWpA6Xk4+0Y5oXIAl/dCvr8jZrX8vG5n1LiiGv1o=
Subject key identifier:   38:8B:91:51:13:02:5A:16:CD:55:6D:C4:B0:1D:3E:A4:58:BC:C7:3F
Certificate issuer:       /CN=5099b784-b9db-4eb1-bfc6-b20b342c1e2a
Certificate serial:       010D0C9F4328584234C312226E9F6735558203A0
Authority key identifier: 1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/7a6b4cc4-b9b8-3f76-ae33-1d611aee1854.roa
Signing time:             Tue 13 Jun 2023 13:00:19 +0000
ROA not before:           Tue 13 Jun 2023 13:00:19 +0000
ROA not after:            Mon 11 Sep 2023 13:00:19 +0000
asID:                     7922
IP address blocks:        72.46.64.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:34:c3:12:22:6e:9f:67:35:55:82:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5099b784-b9db-4eb1-bfc6-b20b342c1e2a
        Validity
            Not Before: Jun 13 13:00:19 2023 GMT
            Not After : Sep 11 13:00:19 2023 GMT
        Subject: CN=7723001c-e877-4cef-9221-5dd9475645f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:8a:27:66:90:d8:7c:ee:8e:17:ea:0c:46:
                    b3:ef:5d:4f:92:36:7f:9b:74:e3:b1:5d:af:81:da:
                    b6:d8:51:4e:1d:33:cb:36:c7:5c:0f:3e:91:d2:39:
                    f5:37:49:56:a3:d2:5f:bf:d2:2a:5b:23:63:96:ca:
                    aa:88:17:67:4a:a7:6d:5e:be:9d:16:77:0e:d4:7c:
                    f1:38:75:5b:d6:56:c7:c6:2a:56:89:f1:43:e7:00:
                    15:4b:c7:d5:c9:32:d9:28:3d:77:08:54:d3:ea:15:
                    e1:e6:34:ef:d7:46:3e:c8:0a:a6:f0:fd:92:12:70:
                    62:04:c4:e5:d7:6f:8f:29:9a:83:c3:ef:0e:16:42:
                    6c:5f:50:8a:33:1b:40:b3:2e:18:18:a2:6c:1d:3c:
                    6d:5e:7f:76:3d:53:2b:76:a3:98:b8:cf:0c:08:2b:
                    8d:0f:e8:5d:23:0d:c1:2b:8d:86:08:7e:6c:2c:ba:
                    11:ce:fd:b8:e8:0e:1a:b7:3a:fc:7a:ef:9a:95:74:
                    64:a0:0c:6c:89:b2:36:18:57:da:06:53:21:f1:93:
                    58:1a:75:89:2a:1e:8b:7b:69:f3:dc:57:8a:d6:80:
                    00:c5:f4:01:1c:19:43:da:1b:7f:9b:a8:d4:ef:59:
                    51:04:bc:40:0f:85:67:15:2c:3c:3e:c6:95:82:54:
                    26:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:91:51:13:02:5A:16:CD:55:6D:C4:B0:1D:3E:A4:58:BC:C7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/7a6b4cc4-b9b8-3f76-ae33-1d611aee1854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d0:54:29:08:45:33:36:2d:2d:b5:1d:88:e9:84:19:93:8e:
         9e:b1:3d:fe:1a:08:a7:e0:3b:b0:5d:d1:20:40:c4:52:d0:af:
         e0:d8:a7:a4:06:5f:56:27:cc:a0:0e:d8:a8:24:f8:6c:b1:d1:
         3d:c5:b6:6d:c3:65:87:56:49:67:70:15:9c:ea:dc:cb:17:52:
         2e:f1:17:93:72:ed:ae:b7:7c:67:c2:2b:6c:d7:54:f0:8c:31:
         4b:57:72:39:89:5e:aa:1a:0a:9d:c5:98:82:db:51:63:a6:83:
         ac:d2:09:80:f0:99:ca:93:7b:5b:05:91:84:d5:9f:91:5e:c5:
         70:6e:85:3f:ff:ad:1d:09:a3:38:3c:0f:9a:f1:97:4b:5c:58:
         96:f6:15:26:cd:08:f9:cf:60:45:75:a5:b1:3c:9b:66:ad:c3:
         d4:ca:f5:93:bc:5d:eb:8d:a3:a6:37:36:1c:9e:62:1b:08:3a:
         8a:77:71:dd:da:9f:96:9c:e9:07:9b:b9:bd:af:ea:29:4a:a3:
         8e:86:9c:bc:0d:d8:c1:c8:1e:8b:4f:14:b3:81:66:f0:f9:e7:
         c7:f3:f8:69:3e:50:7b:68:4b:5c:7f:84:67:b5:d6:04:f2:a0:
         95:5e:00:66:c3:c5:f5:4a:07:ef:bf:5b:54:4a:83:30:60:97:
         59:10:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----