Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6681e01b-884b-37e5-b2d3-aa34794f3e13.roa
File:                     6681e01b-884b-37e5-b2d3-aa34794f3e13.roa (raw, json)
Hash identifier:          0xz/WlPUv+rnir6mRgDJTdjcZisJMUk92EUrSmxYYzE=
Subject key identifier:   F4:09:E5:FE:25:2C:A1:2F:9F:C9:44:0B:65:16:0A:C7:45:68:67:E0
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285841E44736524970D4F9945EEC00
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6681e01b-884b-37e5-b2d3-aa34794f3e13.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Mon 07 Aug 2023 21:51:52 +0000
asID:                     33392
IP address blocks:        208.91.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:36:52:49:70:d4:f9:94:5e:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  7 21:51:52 2023 GMT
        Subject: CN=bc970ce7-b898-4db0-a21e-fc05e02a2ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:4e:ef:2e:34:4d:94:c0:f9:ec:bb:f5:9b:
                    b7:8f:16:13:9f:b2:f8:4c:73:9c:08:37:11:68:01:
                    83:95:c5:10:1d:6d:e7:1e:e6:cf:f0:5d:3a:c3:9c:
                    e8:0f:c4:a3:24:ca:f1:c7:e9:96:a4:18:c8:a6:eb:
                    40:a1:ef:f2:83:bd:79:04:42:90:2c:46:3d:43:0f:
                    eb:70:03:8a:33:14:4f:81:93:3c:e1:f5:d2:0c:39:
                    8c:8f:7e:0b:f7:80:5c:e6:78:b7:41:3e:6f:35:fd:
                    e9:d7:2d:2c:58:49:3c:17:e6:11:09:1d:16:b2:60:
                    fe:e5:67:b4:d0:f2:b4:16:56:b3:9c:7d:77:de:e3:
                    14:7e:e9:e0:20:5d:74:29:87:48:44:de:d6:0a:1f:
                    91:b3:1f:79:b5:8b:83:5a:2f:02:76:75:0c:dd:2b:
                    f1:79:5b:d3:23:87:82:b1:1c:18:bb:40:bc:29:9b:
                    bb:6a:e0:28:93:11:9b:12:fa:8a:28:c0:b8:83:00:
                    de:9e:5d:1f:2c:d3:87:8a:62:c5:79:0d:29:7b:ee:
                    d8:4d:12:d2:09:55:a5:60:9e:6f:24:25:ee:62:9b:
                    c3:9a:48:7a:ef:a9:1c:46:c8:ea:f4:88:78:0a:85:
                    dd:dd:09:4e:9b:7a:a1:ff:ee:6a:f6:2f:bf:65:0f:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:09:E5:FE:25:2C:A1:2F:9F:C9:44:0B:65:16:0A:C7:45:68:67:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6681e01b-884b-37e5-b2d3-aa34794f3e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:6b:b0:84:0d:ba:22:91:b4:43:bc:1a:55:d1:bd:3e:93:
         7c:28:61:a6:44:4e:f7:05:13:f6:f8:b9:f9:3c:14:71:20:25:
         67:a3:4d:07:76:42:dd:59:f2:0d:f4:94:30:5f:af:fd:f2:47:
         b7:97:83:63:29:c2:19:16:c0:de:a7:c1:ad:15:2a:41:58:24:
         ba:59:9b:ab:82:5e:36:6a:4e:76:ee:56:c8:22:57:11:62:9a:
         47:7f:54:22:e6:89:4d:07:85:33:af:27:42:8c:e3:54:39:7f:
         fa:34:6e:e4:a2:d8:77:fa:af:40:eb:80:22:67:42:8b:d9:16:
         a9:00:6a:f0:1f:d8:26:80:99:9c:06:6c:b7:ef:9e:39:90:e5:
         ad:7c:1c:ba:75:cf:6c:5a:60:8f:03:9f:9b:ad:c6:58:cb:8d:
         54:04:68:97:52:44:fb:a8:ac:2d:c3:2c:bf:49:f6:b8:05:7f:
         85:e6:ab:c8:37:2e:a3:30:89:b7:4d:1b:4a:32:58:9a:2f:e8:
         79:36:bb:6f:df:aa:83:71:b0:b0:d9:1f:50:5a:e3:72:16:03:
         04:5c:5c:bf:ca:88:d3:de:8c:0f:86:31:8f:a7:42:dd:44:cd:
         39:9e:56:f8:34:e1:97:7b:07:fb:72:ec:16:4f:8c:bd:1f:87:
         d9:41:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----