Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/9d680eb1-e569-31e0-9a28-806983cf930f.roa
File:                     9d680eb1-e569-31e0-9a28-806983cf930f.roa (raw, json)
Hash identifier:          cblVxIuDFz00FS9XYoMOgLDN0/6Lw0r1FllAiAne7u4=
Subject key identifier:   62:67:7F:10:9F:8F:E8:A1:30:B9:B9:C4:D0:58:80:1E:2D:25:5A:B7
Certificate issuer:       /CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62
Certificate serial:       010D0C9F4328583D552EA16EA8B71A288C4A0300
Authority key identifier: F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/9d680eb1-e569-31e0-9a28-806983cf930f.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 25 Jun 2025 04:00:00 +0000
asID:                     18665
IP address blocks:        204.10.116.0/22 maxlen: 22
                          2602:fd7f::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:2e:a1:6e:a8:b7:1a:28:8c:4a:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2025 GMT
        Subject: CN=d1421eeb-aad4-477e-80fe-44b14cf14f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:23:20:2f:2a:5a:0c:a7:05:23:9a:d4:f7:
                    12:7b:54:17:93:ef:c6:a2:65:33:c8:a0:b8:e8:55:
                    7e:b1:49:b3:25:41:1d:46:53:f5:c1:42:12:b6:10:
                    49:77:53:ac:1e:49:cb:26:51:e8:6b:7f:9e:49:16:
                    a7:6b:9d:55:86:57:a1:1d:36:d9:70:50:0d:a7:da:
                    a7:ab:b7:b2:16:80:91:51:2d:01:64:a8:62:65:09:
                    98:20:a9:63:13:7d:e7:2d:65:97:cc:53:20:e3:d8:
                    af:db:09:0e:f4:aa:50:64:e3:ce:93:30:76:8f:8a:
                    e9:b9:1d:04:38:35:35:f3:88:46:5e:cf:c0:88:db:
                    ea:03:0f:70:03:a4:a2:13:53:e6:c6:d5:9a:64:e0:
                    1e:8c:0c:32:40:75:97:1f:dc:28:ce:3f:c9:89:57:
                    1d:5a:94:4b:12:cf:99:d4:f6:04:df:d6:52:b6:3f:
                    4e:f3:dd:f2:93:80:d6:93:56:c5:42:07:9a:37:47:
                    8e:72:98:4b:13:99:0f:c7:5a:07:af:ee:59:86:21:
                    6b:a9:85:b6:25:2a:30:de:01:8c:c3:6d:51:50:9c:
                    d8:61:a2:dd:63:1c:82:56:d9:87:17:f1:41:1a:c2:
                    a8:4f:23:60:f5:a9:06:2a:70:89:8f:8f:5e:42:2c:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:7F:10:9F:8F:E8:A1:30:B9:B9:C4:D0:58:80:1E:2D:25:5A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/9d680eb1-e569-31e0-9a28-806983cf930f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.crl

            X509v3 Authority Key Identifier:
                keyid:F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.116.0/22
                IPv6:
                  2602:fd7f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:95:a7:ba:d5:15:89:e1:22:38:94:d3:6e:3e:9a:de:e3:
         a6:ce:c3:0b:87:35:6f:40:63:c0:68:4b:94:7a:5a:6d:cb:5a:
         9a:54:9c:f4:98:19:a3:ae:42:5b:a7:03:1d:11:fa:df:2b:e6:
         e3:17:2c:c3:27:5c:70:1d:16:70:60:52:56:2c:6b:4b:20:0e:
         44:48:69:72:29:8d:f6:b0:de:db:f6:99:dc:a7:e7:11:d9:43:
         36:7b:69:68:48:fa:f8:b8:93:2f:b5:58:6d:b2:f3:8d:f2:db:
         db:8e:8e:a6:3e:f2:c4:4b:30:b0:5a:ab:d8:c0:08:67:fc:5a:
         d1:25:6a:81:e3:87:fe:71:ba:e2:4c:62:c0:7e:15:4c:89:5d:
         dd:e1:f7:66:62:af:c4:f4:ef:37:36:db:9e:21:b8:88:8d:ce:
         c8:03:35:c2:d4:7c:26:9f:99:97:6c:36:3c:92:d8:5e:8f:03:
         cf:f3:67:37:e1:d9:07:16:3d:f8:3a:a0:ec:ee:b5:81:5e:cb:
         98:84:36:44:a5:95:bb:7b:99:73:5c:cb:d2:b0:27:c5:cc:39:
         a8:b0:98:55:0b:35:53:1c:5e:f3:3e:a5:2f:9d:e1:78:a5:2b:
         56:23:58:2b:52:89:a4:65:92:e0:0f:76:c2:0d:6b:32:e6:ba:
         71:37:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----