Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71d6789a-4d6d-3824-a6a7-d999706d4197.roa
File:                     71d6789a-4d6d-3824-a6a7-d999706d4197.roa (raw, json)
Hash identifier:          MClEFxfokE2uipcSYRKwv38DPqiGFfH/MnptS+7kIM8=
Subject key identifier:   52:5C:CA:A0:60:47:D5:62:E4:A0:95:C3:7B:90:26:18:47:6B:95:E1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F53F1871D1FBD262812360
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71d6789a-4d6d-3824-a6a7-d999706d4197.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.224.0.0/13 maxlen: 13

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f5:3f:18:71:d1:fb:d2:62:81:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=b0aa8e07-99d8-4bb4-95cd-9acc0b315499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:93:e3:78:0b:c9:3f:f8:b3:17:bb:95:0c:
                    f6:ec:a2:9c:35:65:ff:0c:ea:5c:1d:27:7c:bc:1a:
                    b9:c4:63:cc:78:3d:a7:02:6c:b4:3a:04:f2:17:34:
                    bb:79:cb:d9:41:3d:46:8b:b3:7e:98:ce:9c:c7:82:
                    f2:f2:c4:27:2f:a7:71:3c:79:d7:d5:4b:86:4c:d3:
                    4d:48:11:0a:be:5c:6d:e0:78:ff:da:fa:d9:e9:4c:
                    6e:b8:7e:a6:7e:3c:33:69:77:c8:c6:12:55:06:cc:
                    59:fa:b7:9f:f1:f9:65:bd:54:f1:0a:50:41:75:03:
                    a5:9a:4f:ec:c7:9c:61:75:c6:c2:e7:88:91:4e:cc:
                    79:44:a9:b3:a1:df:d3:63:b7:60:4f:9c:ec:16:60:
                    24:02:28:6a:83:1f:22:1c:0f:fa:4d:8a:89:e7:ef:
                    ec:7c:4e:a2:1d:30:7d:91:61:99:84:83:01:7c:f8:
                    4d:b5:03:11:de:87:b7:b8:df:6a:b3:f8:16:2e:56:
                    32:11:a7:8b:48:b1:29:01:5d:73:7b:43:8e:c8:67:
                    75:8e:0c:ed:33:1a:4c:e1:2b:ce:22:37:c3:6a:42:
                    72:c1:fa:b3:17:14:d7:96:a7:a9:39:77:64:fb:00:
                    ee:d9:55:b5:84:ab:73:01:b2:9a:cd:b8:66:f7:1f:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5C:CA:A0:60:47:D5:62:E4:A0:95:C3:7B:90:26:18:47:6B:95:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71d6789a-4d6d-3824-a6a7-d999706d4197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:73:8e:99:5d:b0:7c:e1:c9:aa:c0:e1:3b:fb:61:60:c1:
         69:e0:fa:77:00:d1:af:bb:f3:92:98:28:84:67:57:01:e1:3b:
         82:ac:88:78:75:85:0f:ce:9c:6c:ab:05:4d:19:89:b2:8c:94:
         d9:bc:c4:65:57:68:f9:04:f5:93:98:39:58:48:ea:36:c0:de:
         bf:61:52:e5:93:f3:c5:60:89:e5:66:41:eb:14:c7:1b:d2:d7:
         00:84:95:e1:07:65:b6:00:1a:4c:dd:c1:66:37:b6:01:27:dc:
         5e:48:e1:c4:9c:4b:0c:43:21:e4:7a:6e:21:e8:31:a0:df:83:
         7f:ea:a3:f2:18:1c:2d:55:eb:b0:e1:57:fd:19:e9:db:56:21:
         05:37:b4:d1:64:6f:8c:bc:8f:f2:89:df:50:52:24:c9:46:29:
         7c:e0:27:31:fd:fb:ba:3f:d7:c7:68:19:b4:28:83:ae:0f:25:
         92:2e:52:6a:57:3f:d5:9e:eb:b3:36:55:12:8d:4f:db:58:42:
         41:33:d2:0b:20:80:e6:bd:a8:e7:c7:35:d9:66:a7:c5:c2:6b:
         27:0f:90:26:2a:e9:28:47:01:fd:8b:75:78:5e:b2:79:24:4e:
         8a:dc:38:cc:64:e6:74:d2:1c:79:d6:1a:0a:6c:c5:0f:6b:39:
         b1:f0:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----