Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/59a2f600-ec95-344e-8873-d4cbc3df2d75.roa
File:                     59a2f600-ec95-344e-8873-d4cbc3df2d75.roa (raw, json)
Hash identifier:          1lLmY/E4s9taY0UrvzHsbutZZAAD8AL+KaLXO70YtCk=
Subject key identifier:   2A:83:E2:7A:89:8E:D2:13:DE:28:E3:F8:6D:C1:96:6C:AC:3E:E8:EE
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F4328584333B0A52F5963F59E0E773DA0
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/59a2f600-ec95-344e-8873-d4cbc3df2d75.roa
Signing time:             Tue 12 Sep 2023 20:34:21 +0000
ROA not before:           Tue 12 Sep 2023 20:34:21 +0000
ROA not after:            Mon 11 Dec 2023 21:34:21 +0000
asID:                     399073
IP address blocks:        208.99.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:33:b0:a5:2f:59:63:f5:9e:0e:77:3d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Sep 12 20:34:21 2023 GMT
            Not After : Dec 11 21:34:21 2023 GMT
        Subject: CN=e7e3aeb3-3600-4734-8fb3-d21ca4aa5580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:54:ea:e6:7a:ad:bc:2b:a1:1b:85:ec:8e:89:
                    c8:1e:10:6b:14:c9:92:fd:59:72:a4:ed:e7:ca:e2:
                    19:4c:87:28:b7:e0:4b:9d:f6:84:28:5f:de:19:f6:
                    d5:19:29:38:6f:10:01:b5:8e:7f:0c:d9:9c:49:f6:
                    a2:8e:a3:d9:bc:9a:69:1a:b2:71:72:20:4e:3f:ce:
                    2c:87:89:83:88:2a:e1:3a:0f:16:85:43:35:92:bb:
                    1a:d0:e8:65:df:89:34:cd:78:cd:51:33:28:56:98:
                    f2:36:68:2a:59:74:2f:dc:c7:d1:0c:58:d7:f7:7d:
                    8e:fb:5f:df:d6:3f:7a:b6:20:b2:ed:05:1f:d4:1f:
                    43:5b:45:6c:36:e3:78:c7:94:4e:8b:08:ef:f3:6e:
                    5c:30:27:30:fc:a6:23:4f:e2:d2:46:09:b6:77:ea:
                    f2:10:9b:6c:07:49:66:04:54:66:cc:84:c4:dc:ac:
                    bb:fc:aa:db:77:4a:be:65:31:ea:ff:67:2d:cb:fe:
                    8f:81:70:c6:23:05:0b:a8:90:fc:4b:87:d8:52:9e:
                    84:f0:fe:34:10:36:e0:23:35:2b:c0:26:c3:98:ec:
                    9a:0b:f5:04:7e:5d:7b:a1:6a:c5:6b:8c:6d:26:d0:
                    05:e0:5a:6b:9e:f6:d3:49:da:11:bc:40:e3:13:50:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:83:E2:7A:89:8E:D2:13:DE:28:E3:F8:6D:C1:96:6C:AC:3E:E8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/59a2f600-ec95-344e-8873-d4cbc3df2d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:53:d1:f9:6f:6d:f9:8d:a4:ce:5a:cd:ce:1f:50:39:36:51:
         b5:1d:c7:43:40:f6:e2:09:12:33:a1:57:7f:8d:c6:42:c2:dd:
         1a:a3:31:ac:03:2b:b8:68:b7:99:c9:75:ff:c6:78:35:f1:b8:
         fc:c1:a6:67:d4:f6:b8:0f:ed:74:d8:6b:12:7d:1b:c4:b4:bf:
         67:ad:c7:ab:a0:ba:99:ae:db:47:79:1f:7a:af:98:81:b0:bd:
         a6:e8:ac:7c:b1:bb:b4:30:7a:5f:2c:cf:ec:46:e7:ec:45:b5:
         c3:6e:6e:a1:29:58:d4:dd:88:74:ca:f4:41:8f:79:12:56:a0:
         8d:ee:23:75:3b:0f:67:0d:f7:3f:10:cd:36:77:e0:b3:71:a3:
         d6:79:67:43:90:80:7d:24:0a:66:af:14:69:af:75:8d:b2:e1:
         ed:30:aa:2c:08:a9:2b:22:d4:bd:c9:02:68:74:0b:b7:40:60:
         b6:32:ef:1d:c2:f0:cb:e5:68:a9:28:2c:43:a7:00:91:6d:5e:
         a8:7b:6c:19:72:4f:09:12:62:35:50:57:76:84:06:7c:b8:db:
         bd:9e:bc:c4:a8:2b:c4:36:7e:1f:29:93:d3:95:47:0d:30:43:
         ba:04:ad:c0:7c:c1:0c:32:4a:f8:1a:2f:6f:b5:1a:33:3c:93:
         fe:a5:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----