Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/95008fae-7db4-33e7-b398-dbcf2ad9fbec.roa
File:                     95008fae-7db4-33e7-b398-dbcf2ad9fbec.roa (raw, json)
Hash identifier:          g0s9gTedF2DlfSW/OcTzsRP26L6R2Y9OQuJyQeJGngw=
Subject key identifier:   35:6F:40:38:85:65:E8:FE:1C:9D:44:0A:98:0B:5B:D8:2C:4C:46:5B
Certificate issuer:       /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Certificate serial:       010D0C9F43285842A739244764864D47BC236B00
Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/95008fae-7db4-33e7-b398-dbcf2ad9fbec.roa
Signing time:             Mon 24 Jul 2023 13:00:19 +0000
ROA not before:           Mon 24 Jul 2023 13:00:19 +0000
ROA not after:            Sun 22 Oct 2023 13:00:19 +0000
asID:                     16509
IP address blocks:        208.99.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a7:39:24:47:64:86:4d:47:bc:23:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
        Validity
            Not Before: Jul 24 13:00:19 2023 GMT
            Not After : Oct 22 13:00:19 2023 GMT
        Subject: CN=cfcf3fc2-cbf1-440c-9896-1f1b97081b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:57:41:e9:7c:05:f3:c6:12:cc:7c:06:43:
                    72:32:87:0d:d2:df:3d:6c:c0:57:6b:bd:20:89:a6:
                    da:2e:3a:09:0b:9a:43:cf:22:86:0b:1c:9f:ba:0e:
                    6a:87:11:8b:20:fa:35:fc:15:7d:e8:36:6b:10:84:
                    2a:2e:87:93:98:74:7b:0e:ac:99:64:9a:77:26:79:
                    88:1b:49:d6:13:35:df:63:fb:38:9e:f4:09:a0:af:
                    c1:b1:63:71:16:34:34:d5:b9:ae:d4:d5:71:56:e9:
                    54:50:c1:3f:f3:53:34:7b:72:8e:8a:67:4f:1f:de:
                    93:fe:53:bc:2d:57:72:ed:e4:18:0c:b8:4d:99:2d:
                    e9:3a:c3:60:af:d9:78:35:e1:70:b3:8d:ab:3c:37:
                    15:e0:5c:c1:dc:5d:e2:8d:61:38:32:df:e8:38:79:
                    28:67:3d:a0:33:c7:af:b4:12:59:7f:36:c6:13:f2:
                    33:f5:51:3a:8b:ce:d6:d8:8d:4d:40:48:c7:6b:84:
                    08:90:91:3a:27:c5:a0:29:21:89:c6:a5:b5:60:ec:
                    1d:c3:28:8a:f6:ca:e0:e1:9d:de:2e:69:b5:f3:b9:
                    98:09:cf:d8:3c:d4:5a:c3:ce:5d:3c:b0:08:9b:64:
                    6d:97:3d:97:b3:7a:e2:0d:1b:df:34:1a:30:5d:ad:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:40:38:85:65:E8:FE:1C:9D:44:0A:98:0B:5B:D8:2C:4C:46:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/95008fae-7db4-33e7-b398-dbcf2ad9fbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl

            X509v3 Authority Key Identifier:
                keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:80:e6:fb:ea:03:dc:91:85:6c:23:f9:6f:4c:a1:57:01:
         10:5b:ec:c8:0a:d1:29:f6:26:0d:d5:60:2c:4c:b9:99:09:e9:
         e2:b7:b2:56:94:03:5b:1e:f1:c3:68:f9:35:db:a9:f8:82:1a:
         90:47:c4:0f:25:5c:f0:47:44:0f:49:af:15:27:35:ff:f5:fd:
         2b:31:62:fe:26:34:4b:46:53:e7:5d:56:91:1a:09:84:b2:62:
         60:1e:ae:00:ff:ab:30:e7:22:a8:fa:bd:23:cf:5d:ca:c3:24:
         c1:4f:bb:02:55:56:8b:97:74:7b:98:4a:22:c8:b6:9b:b3:04:
         a3:24:d5:3e:bd:55:87:1d:df:fb:dd:ff:5d:30:61:73:31:a7:
         0b:2d:f8:0e:df:a5:64:af:ed:77:eb:86:b5:1d:da:6d:11:e1:
         44:75:1e:5e:16:74:8a:c4:e5:e9:65:d0:ad:ef:aa:fb:d4:68:
         cd:24:eb:70:36:91:18:b1:21:78:da:85:40:dd:15:c9:69:bd:
         0a:c2:c6:a9:19:d0:42:20:ee:b4:ad:ca:f7:9f:e5:93:ad:75:
         77:64:19:ce:fe:c4:dc:4b:16:a2:eb:93:3d:1f:b8:eb:f3:ca:
         78:4d:b0:9e:24:11:52:85:d9:cf:c8:ab:04:6c:ca:12:db:13:
         e1:f9:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----