Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29681d4f-76d5-3bee-aa2b-334f8636e62f.roa
File:                     29681d4f-76d5-3bee-aa2b-334f8636e62f.roa (raw, json)
Hash identifier:          UnpZURZOhLqhmY77twxoB7WmLFEFuwsGUfOeH4T4Zvc=
Subject key identifier:   21:81:11:C5:82:2A:0F:E1:DF:CB:6A:0C:1C:9A:3A:A2:FD:B0:FC:57
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583D3C8AC36575FDEE012147A380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29681d4f-76d5-3bee-aa2b-334f8636e62f.roa
Signing time:             Mon 14 Mar 2022 04:00:00 +0000
ROA not before:           Mon 14 Mar 2022 04:00:00 +0000
ROA not after:            Sat 15 Jun 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.76.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3c:8a:c3:65:75:fd:ee:01:21:47:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 14 04:00:00 2022 GMT
            Not After : Jun 15 04:00:00 2024 GMT
        Subject: CN=c41566b8-236a-44d5-818e-04b1c82dfd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:29:16:d7:bd:1c:6c:84:38:6f:fc:f5:27:
                    5b:d9:2d:5f:99:47:cd:fe:af:36:48:8a:43:00:82:
                    f0:34:3a:b0:5f:df:85:c2:3b:7d:1a:96:2f:73:07:
                    bf:59:19:09:fc:da:71:63:f4:15:ea:c4:c9:a9:81:
                    5f:ec:6c:75:04:3e:e7:8f:0c:be:bd:33:58:fe:26:
                    a2:13:2d:c8:4a:81:a5:bc:56:13:7c:89:7a:2c:79:
                    92:f3:9c:3e:d6:46:49:39:55:05:3e:ad:b1:31:c1:
                    e1:0f:03:9f:a5:ec:ab:e9:c1:70:35:d1:e4:45:1b:
                    58:ec:48:2f:8f:27:66:29:24:1b:b4:5e:65:5f:7a:
                    f4:fe:f7:3e:95:e4:e2:42:f2:38:de:34:81:10:67:
                    bd:10:87:3c:17:6b:b8:99:3f:ea:4e:52:ea:51:11:
                    7d:a6:07:28:d2:da:40:d6:23:7a:2b:ef:8a:b9:45:
                    2e:7a:ca:8b:81:b9:09:cd:7b:18:04:2a:45:8f:b5:
                    b7:66:65:69:ab:7d:c0:b8:15:b8:12:b1:35:3c:50:
                    8a:bf:a9:44:fc:24:31:ae:a3:ea:1c:0e:19:c2:2b:
                    a9:e3:06:54:9b:43:0f:e9:b0:e9:3b:41:08:20:32:
                    d1:99:1b:11:09:8a:1d:20:e5:51:c2:63:6b:b6:46:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:81:11:C5:82:2A:0F:E1:DF:CB:6A:0C:1C:9A:3A:A2:FD:B0:FC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29681d4f-76d5-3bee-aa2b-334f8636e62f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.76.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:08:c2:f4:df:f6:b7:12:e0:6d:0b:60:63:08:0e:98:7c:e9:
         a4:e0:0d:2b:b6:06:9e:f0:80:93:63:c6:fb:41:c2:69:60:42:
         c7:c7:49:06:b8:f1:30:cb:39:d9:c8:da:d5:1d:76:f9:eb:08:
         39:42:33:ce:ba:30:7b:32:54:8f:1f:31:b1:bc:6b:96:cb:f1:
         7f:9f:2e:9f:40:4d:0c:29:e4:5f:cd:f2:9a:db:d7:e3:a0:bd:
         d4:ea:e6:54:99:c3:30:c0:9f:c3:70:af:b9:96:7e:d2:97:c1:
         6b:5d:47:b9:2a:9c:9c:4e:3a:18:0b:bf:fe:0a:3f:5e:8d:52:
         b2:2c:5a:26:b4:90:38:d6:fe:99:a3:fa:59:3f:59:34:4b:74:
         29:21:99:59:53:ea:95:90:a3:f8:aa:9f:3c:62:37:00:90:64:
         34:53:b4:8c:87:58:c8:b7:24:eb:51:6d:eb:24:e3:63:04:b4:
         f7:af:06:6e:43:bd:93:f1:0e:31:52:70:77:9d:9d:e6:06:27:
         4b:08:52:2c:a2:98:c9:2e:2b:a4:e7:de:1d:91:7c:9b:64:1b:
         88:dd:4a:12:9d:a5:49:f2:5a:b8:d3:b7:6e:27:5f:34:7f:87:
         9f:c7:f4:e4:d7:2d:5d:8c:47:1a:f1:38:05:64:c7:91:62:76:
         e3:16:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----