Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/396cb291-66be-3a44-b04c-164318636329.roa
File:                     396cb291-66be-3a44-b04c-164318636329.roa (raw, json)
Hash identifier:          QjlAJUWoRzo+nZstapTbP3KtckMjr2PVoUQfmp2/n1o=
Subject key identifier:   B6:6C:19:4C:CC:F0:8B:69:4B:55:5E:31:9F:89:07:22:88:13:7A:9B
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F43285841E46D0020C6AF200C22F1CF80
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/396cb291-66be-3a44-b04c-164318636329.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 09 Aug 2023 04:35:45 +0000
asID:                     49999
IP address blocks:        208.99.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:00:20:c6:af:20:0c:22:f1:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug  9 04:35:45 2023 GMT
        Subject: CN=f4939d06-4c0b-4f16-ae3b-1ed81000751f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:08:69:72:d4:84:8c:f1:8f:40:15:81:b5:d9:
                    ae:3e:db:fb:b8:97:81:46:f0:38:8a:6c:20:1b:f8:
                    c8:74:1c:ad:60:7c:11:f9:63:36:e5:b3:02:87:e4:
                    9f:0f:a9:e0:37:07:96:ec:66:c9:7d:79:e8:61:69:
                    a8:02:73:e6:2a:9e:ea:7d:c1:0e:e3:13:ae:01:00:
                    3a:e1:af:ed:b9:ce:eb:5d:fe:de:4c:35:a3:94:64:
                    7c:20:72:e5:90:c3:1a:0f:2b:69:12:b2:fd:4e:5b:
                    42:27:4b:9e:4e:96:89:6f:0e:3e:fd:fc:51:f5:55:
                    67:c8:6b:74:0c:af:46:8c:a9:b0:be:94:a0:2c:79:
                    3a:58:8c:66:88:a9:48:a8:16:39:de:b3:01:77:8f:
                    d3:79:a1:4b:9d:c5:75:e0:18:bf:96:c1:e8:a6:3a:
                    20:63:b8:3b:10:e0:a0:8f:8f:d2:e9:3d:90:37:d3:
                    10:08:a0:83:49:cc:15:89:17:9f:19:ef:f3:d6:36:
                    8c:41:30:c1:17:e5:c0:23:11:b8:46:a2:58:b0:be:
                    39:c9:62:29:9b:0f:04:27:5e:a8:c0:c2:4b:7e:4c:
                    c3:41:88:0d:75:df:68:f9:7a:6d:f1:70:dd:35:d9:
                    ee:00:f2:91:aa:94:b1:38:fc:d9:45:dc:9c:47:f6:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6C:19:4C:CC:F0:8B:69:4B:55:5E:31:9F:89:07:22:88:13:7A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/396cb291-66be-3a44-b04c-164318636329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:b2:a2:43:47:f1:d6:49:a6:13:50:cc:3e:2c:e2:37:c3:
         f8:cb:b1:48:ca:f7:c7:d2:74:46:f4:26:17:82:c4:50:22:6d:
         dd:16:6c:e8:f8:88:24:0a:94:65:04:b4:c9:88:0c:4f:80:39:
         01:ce:3d:0e:fc:1f:30:14:84:df:89:fb:37:03:f5:e0:e8:9a:
         d1:16:77:66:6a:99:4e:05:4b:cb:c5:5c:b2:c0:8f:a1:9e:d8:
         b6:90:3b:4f:5f:7a:68:00:38:f1:f1:0b:d8:8b:6e:48:96:9b:
         63:56:f7:81:b6:d1:7a:0a:28:62:f6:2b:ff:d9:68:72:a8:fe:
         41:a0:a1:d3:f5:ec:19:fa:ea:38:d6:61:ba:42:85:51:d6:40:
         79:44:bd:b5:b8:b3:15:78:b5:46:4d:b2:46:0b:7d:17:fa:eb:
         cb:7a:2c:04:d0:8d:0f:42:19:ff:e9:eb:7b:65:23:80:99:b4:
         57:c3:8c:24:b8:2d:8c:ab:db:07:10:dd:48:7a:8a:82:0d:f5:
         11:36:c7:b2:f4:2a:69:40:0a:12:b3:30:0c:93:cb:2b:6b:23:
         3f:d1:55:d8:a7:91:d3:28:11:32:56:e5:70:3f:26:45:2b:23:
         5f:2f:86:8f:9f:9f:70:8c:b6:1a:bb:92:31:bc:98:8a:25:e3:
         54:64:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----