Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/382eb6c3-1192-3e59-b17e-7e9385c45eac.roa
File:                     382eb6c3-1192-3e59-b17e-7e9385c45eac.roa (raw, json)
Hash identifier:          0m/by3LqWuV21o2Njl4YQ/5t+1AKz5PAy4bYYPbk1FI=
Subject key identifier:   C6:8A:63:5B:72:B5:C3:94:00:F8:E7:97:BA:99:C6:2C:E2:86:B5:55
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328583D5AB2337DFD0BF6B7CC3E5B00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/382eb6c3-1192-3e59-b17e-7e9385c45eac.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Thu 27 Jun 2024 04:00:00 +0000
asID:                     16839
IP address blocks:        149.96.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:b2:33:7d:fd:0b:f6:b7:cc:3e:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Jun 27 04:00:00 2024 GMT
        Subject: CN=37d86204-180c-4def-a273-0b7ce03b63aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bb:09:47:82:4f:e5:15:31:34:ee:50:10:16:
                    59:7d:5b:71:83:52:37:76:a5:f4:f8:bc:a7:ee:06:
                    c3:1f:f5:65:2f:fa:89:96:73:bd:96:49:e9:73:b0:
                    d5:3c:b2:e4:5a:5a:70:6a:51:94:3f:8a:c2:20:3b:
                    e0:15:3c:49:51:65:69:e5:19:a9:6b:05:35:8c:03:
                    2e:e3:30:33:92:fe:52:87:8a:91:e6:48:eb:e1:bb:
                    8d:de:fc:23:8c:ca:bc:e0:b1:4e:76:44:85:fc:fd:
                    20:fe:a5:34:55:6e:b2:31:52:02:91:ad:19:b6:19:
                    3b:18:13:0c:cc:26:1f:1a:f3:dc:db:58:d6:97:82:
                    16:72:6b:38:5f:b6:ab:f9:17:2b:f0:d6:2f:46:06:
                    d0:a3:2f:d5:20:b8:26:4a:6f:c3:9a:ce:3a:49:f3:
                    b2:08:3c:33:a6:ac:89:fb:2f:6e:3f:62:06:7a:53:
                    e2:67:73:83:28:36:6b:53:9a:cc:8e:5b:07:f6:20:
                    38:bb:41:25:cd:2c:e4:c8:84:bf:bb:c8:7e:b9:dd:
                    d7:f3:60:a5:46:e6:70:52:a1:0d:a0:49:e0:06:f1:
                    2b:45:70:e3:dc:ea:fc:66:94:62:c9:99:e9:71:67:
                    c2:45:65:eb:f7:06:f7:94:af:b0:a6:31:65:48:2f:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:63:5B:72:B5:C3:94:00:F8:E7:97:BA:99:C6:2C:E2:86:B5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/382eb6c3-1192-3e59-b17e-7e9385c45eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:9f:f1:42:50:32:83:99:94:18:38:c6:e3:5f:d5:e3:2b:3c:
         b9:1b:b3:de:e2:8e:8d:79:5b:42:eb:17:d4:74:a7:4e:4a:fd:
         c1:40:a5:de:da:e8:5c:b8:fc:e9:45:4d:cd:90:62:b8:5f:2b:
         ba:d8:87:51:58:f1:e3:7c:3b:47:71:66:6d:1c:1e:14:91:75:
         e1:2a:57:87:4e:58:fd:12:98:e7:63:83:3c:a7:57:af:b2:dd:
         45:20:cc:da:f8:67:89:9a:94:12:71:fb:e9:12:b8:42:17:c3:
         16:ac:ab:0c:42:a4:bf:ed:16:ae:3b:3c:9a:fd:9b:17:04:71:
         7d:52:5a:4b:36:e1:c2:9a:22:fc:f4:7e:4e:e8:7d:d2:82:7a:
         71:af:e3:81:ba:c2:38:a0:64:6d:35:7d:fc:6d:b5:34:a5:fd:
         b8:8e:20:a6:e3:61:98:d4:df:aa:09:7a:f0:53:7a:1f:f5:00:
         30:99:39:c1:ee:72:f4:7f:b3:23:50:55:d1:47:f3:40:b6:44:
         de:39:33:53:a1:e6:89:21:72:31:ef:e6:d7:89:ee:41:66:59:
         dc:da:e9:e9:ae:53:4e:a1:ef:ba:bf:d8:db:b0:ec:7b:7c:53:
         18:f9:ec:80:bf:56:fa:b2:4a:9c:fc:e1:d7:51:80:1a:86:96:
         16:7e:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----