Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/cf7eaf93-2f84-3d01-a1ee-8bf70ae9f3f1.roa
File:                     cf7eaf93-2f84-3d01-a1ee-8bf70ae9f3f1.roa (raw, json)
Hash identifier:          hsMWQU30CcsL/NjlkZJ+J4Z/eFXg7KGDeY3HiLUxOec=
Subject key identifier:   6F:38:A4:69:35:8F:BC:3C:F0:1A:61:48:52:DC:EA:09:25:C8:97:CD
Certificate issuer:       /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
Certificate serial:       010D0C9F4328583E39A89BEB0D5B11BE7E7631F0
Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/cf7eaf93-2f84-3d01-a1ee-8bf70ae9f3f1.roa
Signing time:             Thu 14 Apr 2022 03:28:59 +0000
ROA not before:           Thu 14 Apr 2022 03:28:59 +0000
ROA not after:            Sun 15 Sep 2024 04:00:00 +0000
asID:                     2914
IP address blocks:        216.146.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 14 Jun 2022 01:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:39:a8:9b:eb:0d:5b:11:be:7e:76:31:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
        Validity
            Not Before: Apr 14 03:28:59 2022 GMT
            Not After : Sep 15 04:00:00 2024 GMT
        Subject: CN=b848f24e-48e7-4342-819a-3cfacf1e14c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fd:22:31:bf:94:fe:cc:4a:47:dd:6b:b6:d3:
                    29:ed:ef:d1:d2:d8:2c:95:98:af:73:8f:6b:d4:c4:
                    51:26:10:10:4a:c5:1d:67:87:b0:46:c6:ea:5b:73:
                    f9:45:e3:2e:e8:4d:eb:f2:88:c4:0d:b8:66:79:89:
                    c3:c4:24:a5:0e:b2:a8:d7:bf:7d:63:65:01:e7:97:
                    21:cd:94:b3:1c:af:6c:08:e7:0e:91:4e:f9:af:4d:
                    fc:96:e9:cd:53:4f:13:bb:90:d1:f0:34:5d:71:a8:
                    89:79:82:aa:17:3f:1c:14:5e:fc:00:03:43:46:bb:
                    d0:dc:17:c0:51:8d:8e:a7:c3:7a:30:37:94:41:5e:
                    74:b6:a1:62:45:c9:b2:cc:22:29:5a:9b:ad:6e:20:
                    cd:13:5b:86:5a:c0:e4:eb:6f:f7:32:35:7c:a4:2c:
                    4e:d7:21:17:56:c2:9b:32:1d:83:26:94:ea:96:e4:
                    30:7b:78:7c:67:b6:cc:1c:6e:e7:71:98:d5:a4:71:
                    0f:0e:3e:9a:39:c0:f4:72:bb:6c:ed:33:ef:a6:ce:
                    0c:29:01:2f:80:36:29:a8:fb:b3:f7:e1:76:53:4a:
                    26:8b:90:d8:34:3b:e8:d3:fc:0f:3e:9b:01:14:fc:
                    a2:b6:e9:d5:0b:cc:d4:d1:f8:55:84:99:53:9b:a2:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:38:A4:69:35:8F:BC:3C:F0:1A:61:48:52:DC:EA:09:25:C8:97:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/cf7eaf93-2f84-3d01-a1ee-8bf70ae9f3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl

            X509v3 Authority Key Identifier:
                keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:32:8a:32:4d:92:53:19:6a:71:e5:75:1b:25:e8:f5:22:c2:
         f0:03:90:bd:24:31:87:01:62:0a:70:58:bf:80:67:b7:e6:e7:
         cd:1a:91:19:38:05:15:de:92:50:3b:0d:8b:45:7a:ef:41:5e:
         ac:cf:89:fb:65:24:23:0e:d7:6e:9b:d2:48:88:6c:eb:35:d3:
         33:93:82:24:d5:7c:56:44:c9:fb:90:37:1a:fc:52:d9:7f:cf:
         2b:ec:3b:75:4a:31:63:6e:44:c5:f1:0c:12:b9:41:f8:8a:39:
         77:18:6f:17:5f:83:2b:81:c0:a8:46:cb:d2:f8:7c:48:d6:1e:
         28:f7:fa:06:64:3a:e4:f2:40:60:7a:3c:6e:68:fe:d5:eb:c7:
         8f:83:88:10:9a:55:ea:96:d9:9a:1e:6d:78:f1:3a:08:cf:71:
         a5:dd:5b:58:b9:c8:cc:8b:3d:7a:77:e4:db:c6:7d:b7:d9:e8:
         d8:a9:ac:ec:d1:c7:90:08:94:e0:2a:6f:9f:2e:cf:1f:73:da:
         ed:b2:92:76:b3:0c:fb:a3:f3:b9:28:ec:83:04:61:4e:1f:4f:
         c2:3a:84:46:b7:40:3c:0d:f3:84:37:8d:b3:75:5e:a6:f7:2d:
         2c:d7:88:df:60:d1:4d:7d:83:19:bb:72:9e:db:82:a3:b8:15:
         63:99:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----