Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/7a4cf6f7-b4fd-3134-a0f5-b53bb85712a4.roa
File:                     7a4cf6f7-b4fd-3134-a0f5-b53bb85712a4.roa (raw, json)
Hash identifier:          H0x0M0APcDAnBKZdns98C/9HdWvle9m8JgKRTu2e80Y=
Subject key identifier:   56:0A:C9:D4:1A:D6:BD:0E:AF:00:88:B4:BF:DA:80:D3:29:B9:F7:83
Certificate issuer:       /CN=c6830b98-b6ce-461c-8849-244186a13d62
Certificate serial:       010D0C9F4328584128B2C50CA35E9DAC4500FB00
Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/7a4cf6f7-b4fd-3134-a0f5-b53bb85712a4.roa
Signing time:             Fri 04 Feb 2022 16:07:36 +0000
ROA not before:           Fri 04 Feb 2022 16:07:36 +0000
ROA not after:            Wed 11 Jun 2025 04:00:00 +0000
asID:                     14961
IP address blocks:        208.73.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:28:b2:c5:0c:a3:5e:9d:ac:45:00:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62
        Validity
            Not Before: Feb  4 16:07:36 2022 GMT
            Not After : Jun 11 04:00:00 2025 GMT
        Subject: CN=a111839f-bfd0-4fc2-ba96-e6d10475c5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:14:9e:a6:d3:86:9f:01:55:b5:e7:07:9c:
                    65:27:23:e7:a6:d8:0a:a2:92:cc:59:59:bf:58:00:
                    d4:81:a4:77:a2:b9:39:d5:d3:d4:53:c4:f7:7a:68:
                    98:d9:2a:09:11:e9:c9:80:d8:95:8a:0c:d5:61:58:
                    28:af:7f:45:b4:45:a8:eb:66:b3:0a:a0:b2:f1:7f:
                    5f:6d:90:e2:f4:7b:fb:66:74:02:62:07:31:f3:b8:
                    44:29:04:c8:67:28:d8:58:06:c5:02:16:56:33:e1:
                    bf:9c:46:fd:8a:9b:d3:7b:24:9e:87:64:58:9f:db:
                    d5:30:cb:5f:ed:61:3f:95:aa:43:a4:e0:e9:11:87:
                    d1:86:ce:b8:15:25:03:97:f8:42:86:62:05:28:9b:
                    01:fb:2c:dd:ac:cf:02:ab:00:f1:53:7e:cf:61:8b:
                    53:1f:c6:bb:08:04:92:49:ae:f5:07:e1:13:93:3a:
                    73:45:54:f4:87:54:48:d3:8b:fa:d1:3a:d6:e9:9c:
                    ad:bf:b2:ba:37:9a:1a:7c:d7:bf:5c:5a:50:10:c6:
                    e4:0a:17:64:17:7f:f1:16:cf:1e:6b:aa:a7:65:6e:
                    a7:52:2b:2f:5b:7c:75:51:d5:32:e7:1d:85:b9:4b:
                    6f:9f:2c:26:a9:83:39:e1:be:88:a7:a3:d0:80:ad:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0A:C9:D4:1A:D6:BD:0E:AF:00:88:B4:BF:DA:80:D3:29:B9:F7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/7a4cf6f7-b4fd-3134-a0f5-b53bb85712a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl

            X509v3 Authority Key Identifier:
                keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:f1:08:df:7b:00:0d:10:d9:23:cf:ef:81:af:65:0b:1e:
         1b:ab:12:c0:42:b5:eb:47:5a:4a:cd:80:50:98:9f:8f:af:f8:
         9f:3a:c4:fb:d6:53:6f:63:58:a2:74:3a:0d:54:89:68:46:e8:
         1d:d3:9d:42:58:d8:1a:18:03:63:e8:49:7f:d7:61:83:42:ca:
         d3:0b:37:c9:53:09:11:07:8d:b7:03:73:3a:ae:5b:20:6f:90:
         14:5a:3f:56:4d:d6:d3:41:d2:9e:8b:9c:18:87:d8:03:9f:35:
         72:a3:65:ff:95:7f:17:fa:79:fe:d4:6e:89:0e:b0:b0:a1:50:
         91:1a:02:f9:d1:2c:a1:cb:53:cf:b4:e1:1b:22:9d:38:14:06:
         3c:bb:e8:a1:74:ea:22:b9:4d:25:6f:27:da:0e:c4:8e:a0:49:
         1f:1b:1c:1e:8f:06:74:0e:6b:1f:da:57:ce:6d:aa:2f:a2:1e:
         2b:45:8e:8c:90:c1:d3:c8:fb:e2:0d:f7:04:80:0c:fb:dd:63:
         7b:c6:c7:28:e3:9a:bd:aa:3a:3f:d3:c0:61:18:7f:b5:3a:f5:
         ee:16:c9:96:e4:0e:94:70:84:02:0f:03:6a:ee:c7:c1:23:b4:
         ed:2a:46:e5:83:01:97:4d:ec:88:56:bf:04:9e:65:0b:fa:eb:
         48:a0:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----