Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1539d262-3c62-3878-a421-17f451b10583.roa
File:                     1539d262-3c62-3878-a421-17f451b10583.roa (raw, json)
Hash identifier:          R4dSFxjGklo2hFjXFN9zcQs5qmOp6mGFWk16EGgoztw=
Subject key identifier:   78:BF:47:57:A7:FE:27:27:74:B5:0E:C4:A7:01:4A:20:B2:8C:AB:BA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F52C07E78F003B140A90E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1539d262-3c62-3878-a421-17f451b10583.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        174.64.0.0/12 maxlen: 12

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f5:2c:07:e7:8f:00:3b:14:0a:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=a14ddb4a-6afa-4270-8213-d50e26e5c724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:9e:2e:ea:2b:dc:d8:0e:23:e0:1c:7e:9e:
                    7b:89:64:88:42:b1:0c:eb:4d:ec:6c:bf:94:c0:3b:
                    f0:6e:47:f2:85:5a:e2:9e:0b:7e:6a:93:c7:27:16:
                    78:77:d7:54:ec:5f:c1:ef:06:d2:76:e6:af:48:c0:
                    e2:64:33:ec:4b:a2:4f:6a:95:3f:72:14:34:4b:ae:
                    47:d7:54:40:21:b4:03:80:25:9e:c0:98:a2:f0:40:
                    90:49:49:7f:f7:db:dd:0b:c9:29:b5:38:72:31:eb:
                    52:20:55:e3:cc:3e:c4:b9:c9:3c:93:24:0d:75:ac:
                    71:82:32:9b:f6:1c:42:9e:55:f3:d3:d2:49:17:2f:
                    49:62:6f:52:0f:c1:6b:e6:28:a3:4b:87:7d:a5:09:
                    ea:eb:35:27:af:bc:7a:46:fd:1c:87:4e:a1:52:6d:
                    0d:19:24:9e:6c:4d:6e:7a:4d:0d:96:98:48:be:55:
                    0e:2e:7b:df:c2:c9:9a:b3:a3:69:03:e4:fa:0e:47:
                    96:fd:ce:1c:51:6a:d2:b9:29:eb:5f:1c:d8:58:fb:
                    a0:1e:88:c5:47:48:48:c1:f7:b6:f5:59:2a:79:ae:
                    16:f4:a3:df:70:a9:54:0f:30:ca:6d:c4:d9:fa:ed:
                    7b:19:36:8b:31:ad:81:45:d7:7b:a8:6b:46:1d:19:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:47:57:A7:FE:27:27:74:B5:0E:C4:A7:01:4A:20:B2:8C:AB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1539d262-3c62-3878-a421-17f451b10583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.64.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:f8:09:6f:31:5d:f3:55:0e:c2:ce:52:14:9e:e7:9e:c7:
         0e:84:f7:f7:92:fb:71:d0:c0:f3:a3:03:9a:84:a1:74:86:68:
         92:cc:a7:f6:48:d0:4a:3f:14:c5:f1:52:f0:e6:35:9e:c8:9b:
         c7:b7:8b:ff:6e:90:c2:ce:06:dc:e3:af:ff:3b:84:f5:a2:c5:
         7d:4a:88:f0:2c:b8:89:27:b2:f5:a3:6c:bd:98:c5:dc:ce:a5:
         2c:fd:76:35:6a:ef:de:60:ff:5b:ea:78:ea:b0:f7:a4:6a:91:
         89:70:fb:fe:35:63:af:a2:15:2d:95:d9:17:79:d5:f6:30:6a:
         5c:42:dd:af:53:dc:f1:e5:17:f0:34:fd:e8:fa:cb:e6:60:b6:
         59:44:b3:55:85:98:09:d9:e2:c7:74:cd:0a:ce:74:3e:79:d3:
         51:e3:95:e9:66:99:89:49:f3:99:cd:2e:80:c2:48:b6:3b:fd:
         bc:7d:1c:ae:2f:a0:95:67:64:c0:96:a1:86:d5:c5:ec:fc:b4:
         73:e8:a1:42:ec:a2:de:57:71:13:ce:dc:dc:ad:61:b2:f4:3a:
         e0:e1:e4:f8:db:08:20:33:5b:dc:96:ff:00:6f:0d:db:de:6f:
         02:32:fb:b1:d7:fe:21:ce:61:96:04:33:20:16:bd:4d:ab:7b:
         dc:a0:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----