Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b68cead5-f172-3eac-a2ba-8c17bab4b144.roa
File:                     b68cead5-f172-3eac-a2ba-8c17bab4b144.roa (raw, json)
Hash identifier:          IUH/dyEFoSt3cJppCnG6R9ygWsO+XvAOGz5Z4dqn7/Y=
Subject key identifier:   1C:84:9A:0A:36:EF:35:8D:FC:A8:CB:31:77:5A:55:3B:B2:EF:7E:EC
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583E1E337DFDEB0C5BB1ED767180
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b68cead5-f172-3eac-a2ba-8c17bab4b144.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Sun 02 Jun 2030 04:00:00 +0000
asID:                     1239
IP address blocks:        139.177.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 03 Sep 2022 02:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:33:7d:fd:eb:0c:5b:b1:ed:76:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jun  2 04:00:00 2030 GMT
        Subject: CN=9ef39d24-1284-44a6-b866-9ce77c7a8e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:44:5b:89:5a:ee:95:5d:f4:f0:87:4c:55:
                    78:6f:f5:57:37:d1:c6:85:7e:41:23:16:18:e1:a6:
                    a2:dc:51:6c:e4:98:86:18:7a:0c:39:6c:3c:11:74:
                    06:75:5a:9c:bd:c9:3d:66:bc:e5:b5:21:1f:6e:c5:
                    83:dc:db:21:c5:7e:1f:0c:e4:1d:0c:c5:2a:16:d2:
                    3f:10:41:a7:ea:a9:44:c0:bf:5f:6c:7c:e2:3d:f1:
                    07:25:8e:8c:49:ed:41:d9:f7:20:63:dc:ea:50:91:
                    7a:fc:73:6a:9e:fc:73:f1:d8:c2:6d:57:1c:c0:90:
                    58:c0:27:fc:b0:db:4b:32:cc:d6:6e:01:e5:c1:60:
                    16:b6:14:ad:98:ac:a0:9a:37:99:15:d5:87:41:6b:
                    3a:a1:da:2d:dd:39:bb:1e:c1:f6:c3:06:72:ac:af:
                    c1:2b:67:ff:88:d6:62:1f:52:2b:3f:0a:23:4f:40:
                    ca:ef:2c:57:e2:58:af:12:90:ef:49:2b:9a:a3:0e:
                    80:1f:6f:ea:c9:f2:ae:80:a4:1c:3b:07:37:d8:ed:
                    1c:da:48:c4:a3:e9:48:a6:a9:bd:b9:95:ae:b3:91:
                    31:d4:22:1a:d9:c8:7e:01:f2:4b:7b:2b:cc:5f:91:
                    1e:24:d7:86:36:22:14:ce:59:0e:86:d7:49:9f:41:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:9A:0A:36:EF:35:8D:FC:A8:CB:31:77:5A:55:3B:B2:EF:7E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b68cead5-f172-3eac-a2ba-8c17bab4b144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0a:ed:1a:2b:9f:c2:1d:15:83:20:7d:0f:bd:35:90:ab:1b:
         1a:7e:74:b6:26:fd:34:6d:b7:c5:47:f3:d4:7b:06:b1:0e:ff:
         26:99:4e:85:38:6d:62:41:ce:7d:6b:a9:00:07:2f:0c:cc:eb:
         ec:66:fc:e6:05:de:59:49:2d:5e:81:6d:2d:cb:b1:e7:01:8a:
         3f:c9:f0:f0:ae:8c:74:52:9f:b2:0c:37:14:28:5b:c2:46:76:
         c2:14:f7:b7:bd:99:25:e9:fc:63:f0:c2:ab:c6:8b:cf:90:33:
         0f:25:51:f5:7e:87:d4:56:e9:fd:c3:3b:3a:5a:ad:53:a4:6a:
         e2:d6:74:a3:5e:8b:f7:d2:a0:e8:33:b3:a6:5e:2b:7b:a5:97:
         5d:f5:a7:62:1c:1c:64:0c:a1:ee:d2:56:d5:72:e9:f7:d5:15:
         dc:c9:aa:e3:95:ec:de:c5:a0:50:ed:9f:83:3b:6d:63:4e:87:
         fe:d3:81:6f:96:ed:6a:66:25:01:4b:5c:70:7f:de:c9:63:ec:
         75:5a:f2:ee:40:f8:cf:d1:51:4f:7b:58:53:04:25:20:ba:b7:
         3e:9b:f9:6f:2d:8e:6f:a0:79:64:3a:64:22:3e:ad:cc:2f:b2:
         27:5d:c0:42:bd:7b:81:0d:44:1e:ac:a2:61:9d:65:b4:ba:24:
         22:c5:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----