Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/0cc17808-fb10-30ed-8824-232c5ee074b4.roa
File:                     0cc17808-fb10-30ed-8824-232c5ee074b4.roa (raw, json)
Hash identifier:          JXR4ui/qSHFddeuN5c9XOgU/dIpu0S+gwu3KJXlgKPg=
Subject key identifier:   76:31:D3:61:18:EF:15:63:5A:DB:54:37:48:47:95:5A:BC:FD:83:66
Certificate issuer:       /CN=c6830b98-b6ce-461c-8849-244186a13d62
Certificate serial:       010D0C9F43285840E074EF1763542A54272CC400
Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/0cc17808-fb10-30ed-8824-232c5ee074b4.roa
Signing time:             Fri 04 Feb 2022 16:07:36 +0000
ROA not before:           Fri 04 Feb 2022 16:07:36 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     146961
IP address blocks:        208.73.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e0:74:ef:17:63:54:2a:54:27:2c:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62
        Validity
            Not Before: Feb  4 16:07:36 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=0a9469e8-6d42-46e3-bffa-6c67bc8741db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:54:e7:aa:3c:bb:91:46:54:b6:ce:99:5e:
                    35:fd:f0:aa:b9:02:b3:dc:33:a1:0d:7f:97:02:30:
                    39:fc:fd:1f:4c:2e:a9:fe:18:a5:49:2b:2d:33:dc:
                    cb:37:46:3d:e6:fb:7d:6c:35:71:15:7d:61:c2:af:
                    a9:dc:ed:98:87:da:8f:84:fd:6d:ae:96:a1:d8:ef:
                    1b:93:3d:6a:3a:71:bf:43:1f:51:af:77:0e:4b:25:
                    77:bd:35:26:58:87:15:ce:c0:8c:9a:d8:cd:ec:55:
                    ff:cb:dc:9e:b1:13:8b:9a:cc:7e:f9:4e:49:d3:9e:
                    e2:b4:f9:92:69:9c:d4:28:a4:dc:c5:11:78:81:b0:
                    46:70:32:c3:6d:52:61:13:b8:82:b8:5d:17:18:10:
                    2c:5d:7e:e8:ca:27:fb:0f:fe:c1:a6:21:f2:de:15:
                    2d:75:1d:a1:0d:9c:d1:fd:b0:87:7a:61:0a:e2:e9:
                    52:24:a5:17:6e:2b:c1:b7:b0:4e:be:ec:98:91:32:
                    ec:98:98:c7:f6:4c:de:df:d3:c1:56:07:ad:ca:b3:
                    e7:f7:b6:63:66:27:74:ee:a2:73:d4:fc:fc:d4:40:
                    0e:b4:3e:61:db:71:80:27:b5:34:1e:1c:60:92:ba:
                    25:da:f7:12:68:11:5d:41:6c:f4:04:c1:1d:cb:bc:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:31:D3:61:18:EF:15:63:5A:DB:54:37:48:47:95:5A:BC:FD:83:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/0cc17808-fb10-30ed-8824-232c5ee074b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl

            X509v3 Authority Key Identifier:
                keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:ad:1f:18:2f:50:54:1b:31:ff:ef:7e:a0:14:80:07:7a:
         3f:45:4a:38:bc:87:85:7a:9e:c7:df:6a:7a:e2:40:67:9b:97:
         93:c4:f5:2f:9b:76:bb:6e:5c:3a:41:2b:9c:77:ac:02:aa:66:
         75:9f:f0:88:a5:93:f1:35:46:44:32:b6:c6:b6:a0:e0:ea:38:
         b8:66:9b:17:cd:77:0b:ec:ae:c8:7a:88:59:f0:a0:ee:d6:5d:
         9d:36:18:e4:f5:2e:47:8f:76:33:7a:88:8e:0c:9c:53:4e:cd:
         d2:c9:83:61:28:b2:ec:ab:04:fe:77:43:4a:e1:f5:bf:53:d8:
         5f:04:8f:58:20:45:17:09:b8:b6:5d:3e:af:b3:22:88:2a:fc:
         bd:f7:1a:e9:48:c1:73:ec:28:ef:ff:4d:a8:3d:cc:b7:1a:f0:
         1b:4e:c9:3f:79:5e:6d:a9:50:02:98:07:9d:89:58:50:b3:fb:
         ff:ec:f8:e5:d4:db:25:f1:a3:98:cc:7f:b2:7b:f2:c6:ab:76:
         d7:e0:5e:c8:41:82:2a:c1:5b:0d:17:4a:2b:c6:e9:d3:75:c6:
         9b:15:39:1c:cd:41:19:b0:68:ce:53:b7:65:6c:6e:1d:e7:93:
         fe:fa:e4:ec:bb:05:b0:8f:21:1f:65:a7:bc:12:ed:29:1b:9b:
         d5:a5:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----