Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/66eb9ceb-28b4-3113-b8fd-479d67eb86c8.roa
File:                     66eb9ceb-28b4-3113-b8fd-479d67eb86c8.roa (raw, json)
Hash identifier:          e92/6vjcYFn6lY2ajBRnoIr3CbfTW+Juv5gxvPdzPdE=
Subject key identifier:   08:1F:CD:EF:FF:30:21:8E:E8:02:A4:FF:8F:E6:36:7D:34:F5:F4:8C
Certificate issuer:       /CN=ee195698-fb60-40ef-a454-85fcbf3381b9
Certificate serial:       010D0C9F4328583D6673C33C503CEDFC60D52980
Authority key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/66eb9ceb-28b4-3113-b8fd-479d67eb86c8.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Mon 01 Jul 2024 04:00:00 +0000
asID:                     11607
IP address blocks:        137.216.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:73:c3:3c:50:3c:ed:fc:60:d5:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee195698-fb60-40ef-a454-85fcbf3381b9
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Jul  1 04:00:00 2024 GMT
        Subject: CN=0c546b01-666f-452d-9e0d-0870715e8ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:c0:90:65:0f:fc:d0:2d:10:9e:ba:02:dd:
                    48:7f:53:1e:32:fe:29:95:ab:b5:2d:e2:6b:af:6c:
                    cf:61:99:41:73:c1:64:a8:58:ae:2e:45:c8:69:93:
                    62:40:f8:ea:93:87:b4:0d:39:d1:fa:24:5a:b1:69:
                    9b:36:61:df:49:7d:7c:05:ca:dd:4b:a1:b5:17:09:
                    87:96:9b:5d:01:d1:ff:d6:1d:80:ff:6c:51:0c:13:
                    86:ea:ad:8f:ce:8c:0c:f4:2f:77:c7:7b:52:8c:e0:
                    bb:45:e3:69:f3:0e:42:f9:e9:9c:9e:da:c1:fb:a5:
                    d2:59:b9:3b:79:58:b0:93:f2:f7:05:e3:1a:65:dd:
                    72:f2:7b:57:d3:b8:c9:3d:55:2f:c8:1e:aa:9c:ab:
                    bd:36:db:d5:26:09:a3:55:5c:b9:ac:fe:54:7c:af:
                    71:cb:7f:79:52:d2:68:10:ec:e7:a0:83:8b:ce:a0:
                    77:f1:23:bd:60:ff:3a:e5:ee:69:e3:aa:d6:db:8d:
                    43:52:6c:60:fe:2e:97:c7:17:e0:ca:87:b4:42:b1:
                    98:e8:8a:ae:98:03:85:f8:9e:8c:57:73:67:52:59:
                    bc:40:0b:bf:07:c0:ad:16:82:2f:84:57:38:22:64:
                    77:af:27:d7:dc:9b:6b:00:6e:1b:b5:ce:7d:fc:80:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1F:CD:EF:FF:30:21:8E:E8:02:A4:FF:8F:E6:36:7D:34:F5:F4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/66eb9ceb-28b4-3113-b8fd-479d67eb86c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl

            X509v3 Authority Key Identifier:
                keyid:3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:98:6c:3c:96:1c:75:81:a1:71:cf:1c:9c:e6:16:8a:03:d1:
         76:72:9d:1e:77:66:0c:7f:f5:20:c3:ca:f4:7b:ed:56:86:7c:
         85:74:02:91:2b:e0:3a:1e:d3:83:7d:9e:c8:2d:31:1a:9b:e9:
         4c:81:08:b8:12:e6:18:2a:ff:e2:47:27:5a:f4:09:53:47:91:
         76:e0:46:a2:fb:ce:82:3f:68:e3:e3:9b:74:04:9c:3c:0d:9f:
         c0:3e:a0:61:31:dc:8a:cc:b3:29:87:99:0f:32:ec:fd:40:a1:
         00:e5:fc:a1:af:c5:b9:6e:7c:f9:90:aa:e6:af:74:15:64:34:
         da:01:19:f4:ad:48:05:35:9f:00:48:a0:58:61:c8:76:73:17:
         cc:b2:77:f8:5e:ed:c5:8b:ef:92:39:38:19:bb:d7:55:80:79:
         bc:18:cd:9d:b6:59:82:59:0a:8f:c5:8c:0f:d7:61:41:25:e0:
         42:db:6b:7d:ae:ef:05:42:23:18:79:e9:eb:95:7d:5a:36:6f:
         bc:c5:ba:ac:8d:7a:bb:d6:93:e5:d1:df:07:01:d8:d5:51:79:
         d1:7f:40:cc:10:fc:93:2d:74:ce:14:ae:72:21:7f:77:e2:d5:
         d8:29:99:dc:47:8e:97:7d:60:79:cb:a6:8c:25:42:0a:0e:bd:
         81:ec:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----