Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/1769f99a-9aae-355d-a35a-82df78f7c5b1.roa
File:                     1769f99a-9aae-355d-a35a-82df78f7c5b1.roa (raw, json)
Hash identifier:          oLwKdHRgH5JwHP2JpM/0wQTOTtkEtH0rgSw2dvRAs1Y=
Subject key identifier:   E8:E6:A2:1D:5B:D5:D9:3C:B8:18:95:85:BF:B8:CB:2B:81:1C:B9:C9
Certificate issuer:       /CN=51dcdcba-3766-4509-a479-bbf02514719f
Certificate serial:       010D0C9F43285840499852A7E4C7755D3B13BB80
Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/1769f99a-9aae-355d-a35a-82df78f7c5b1.roa
Signing time:             Wed 12 Jan 2022 15:40:08 +0000
ROA not before:           Wed 12 Jan 2022 15:40:08 +0000
ROA not after:            Sun 23 Mar 2025 04:00:00 +0000
asID:                     62164
IP address blocks:        207.90.206.0/24 maxlen: 24
                          207.90.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:49:98:52:a7:e4:c7:75:5d:3b:13:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f
        Validity
            Not Before: Jan 12 15:40:08 2022 GMT
            Not After : Mar 23 04:00:00 2025 GMT
        Subject: CN=337b8f98-31d2-4879-a78b-ab9484c88f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:63:7e:12:e6:85:64:2f:21:8c:48:55:b6:
                    61:04:1c:c2:d0:4d:41:83:29:86:cc:8c:ee:04:d4:
                    98:13:44:f8:52:21:7b:3a:a5:67:68:c5:e1:f3:c6:
                    5f:bc:47:1f:f2:32:30:98:d8:e3:70:98:a1:76:81:
                    43:d0:31:90:94:e6:25:dd:28:d4:b2:11:7f:4e:e2:
                    f0:3b:95:d6:2c:95:cf:d7:06:60:d4:99:68:93:80:
                    3c:b8:d6:1a:33:83:3f:90:65:47:f8:18:3d:35:59:
                    e8:15:a6:5c:b1:81:12:f4:3c:76:8b:50:8f:9d:c8:
                    e6:08:9d:09:29:c4:1f:76:0f:4d:f2:94:c9:ee:67:
                    65:c5:19:ba:66:14:96:c9:77:6b:89:33:98:c9:af:
                    2f:9e:d3:ae:5f:80:4e:2e:8d:cc:ba:fe:89:0e:cf:
                    3d:e4:ce:d8:72:8c:e4:bd:48:2c:7a:84:ba:20:2b:
                    9a:a7:92:f9:57:09:ae:f8:bf:6e:35:59:19:74:9d:
                    75:cb:e3:78:02:8d:8e:99:1d:70:b6:38:71:f1:da:
                    7a:13:14:2f:d1:d3:50:b7:49:18:ae:e0:ac:6e:93:
                    46:c9:10:ec:9c:00:41:eb:0f:e6:39:d1:c1:cd:f9:
                    b9:ed:d7:67:ed:ea:88:dc:f1:2a:5b:08:5f:a7:79:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:A2:1D:5B:D5:D9:3C:B8:18:95:85:BF:B8:CB:2B:81:1C:B9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/1769f99a-9aae-355d-a35a-82df78f7c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:fd:e2:16:ca:71:88:ac:f6:c3:2d:2f:a9:b4:de:46:fa:c0:
         31:c4:0d:f6:e3:3c:59:32:72:8e:8b:9f:56:11:93:61:09:31:
         60:da:f5:63:4a:42:a1:e1:a5:37:0a:05:d9:6c:46:8e:b2:39:
         63:e5:cb:3b:4c:03:f7:94:c4:40:24:c1:6a:ce:07:55:52:a4:
         8d:9d:ef:a8:85:ef:c7:f1:65:13:86:00:bb:4a:1e:01:a3:1a:
         da:df:b3:56:56:d0:9f:b5:1c:0f:e7:e6:1a:cb:79:44:a2:62:
         6f:f8:e8:ec:95:43:55:92:1f:03:1b:2d:c2:c2:c4:ae:14:3a:
         ac:29:74:4c:21:db:e1:ab:f6:43:04:03:20:63:b8:12:6b:65:
         3e:41:cf:80:1b:9c:d3:63:81:06:5b:b1:f2:dc:36:92:05:6f:
         2f:d2:b0:15:57:8a:15:51:54:61:b0:30:64:f7:e2:c3:31:69:
         40:b3:2f:bf:6f:37:53:30:77:d4:cc:ff:b4:3b:b3:2c:26:cf:
         0d:4a:7f:6e:e1:99:2a:f6:77:71:0c:a5:ec:2b:37:81:a8:94:
         59:85:39:1e:8a:d5:25:9c:66:0e:40:29:b7:3f:27:4e:d5:c4:
         1f:33:d1:8b:30:fd:1b:e6:1d:81:e6:a4:d8:8e:66:dc:59:92:
         7c:b7:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----