Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/20f9a66f-b76f-3d5c-afd9-8aa562ef853a.roa
File:                     20f9a66f-b76f-3d5c-afd9-8aa562ef853a.roa (raw, json)
Hash identifier:          V+c+hCAL9oDYx9k5r3k74ja0KXLVup4qIOMQ8SZ/9fE=
Subject key identifier:   C5:BF:B6:1F:00:60:D4:4D:68:07:54:9C:3D:6F:03:43:99:AD:2E:F8
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328583FD73D33B02914AD6D1AF27A80
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/20f9a66f-b76f-3d5c-afd9-8aa562ef853a.roa
Signing time:             Fri 07 Jan 2022 16:23:26 +0000
ROA not before:           Fri 07 Jan 2022 16:23:26 +0000
ROA not after:            Mon 10 Feb 2025 05:00:00 +0000
asID:                     212238
IP address blocks:        165.140.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d7:3d:33:b0:29:14:ad:6d:1a:f2:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jan  7 16:23:26 2022 GMT
            Not After : Feb 10 05:00:00 2025 GMT
        Subject: CN=af503d46-dc1b-4a0c-87d0-4d9f956bcc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:dc:b8:9e:32:fa:11:5a:9d:2a:11:bd:cb:
                    e3:22:f0:58:dd:66:bc:9d:74:e7:ca:f0:14:51:63:
                    12:32:a8:78:31:33:ad:b1:c2:48:30:24:97:e4:a4:
                    1d:57:16:fd:a6:1f:24:6b:0b:05:8f:78:14:68:d4:
                    98:10:29:28:d4:89:4f:da:e2:92:c2:70:b5:a5:0e:
                    e3:f8:31:bf:b9:9c:97:4a:77:52:4a:c9:4a:07:3c:
                    22:7c:a8:2b:c7:cb:e7:4c:8f:f3:88:3f:88:de:59:
                    18:48:68:2b:f7:7b:4c:09:65:62:f9:63:50:e9:c9:
                    96:97:03:ae:8d:33:84:01:f3:8b:de:41:ed:c4:bc:
                    96:72:f3:ec:a5:6e:e4:e0:87:e9:fe:4a:a1:89:8b:
                    cf:fa:ba:56:b9:20:cc:1f:01:9e:6d:a0:25:6c:b5:
                    28:41:e3:9f:61:c5:1d:f0:45:38:9b:ac:bf:47:38:
                    2f:bb:ee:8e:24:a3:60:37:3d:a2:5b:c8:7d:68:f9:
                    99:42:ab:3a:85:16:46:22:c4:cf:89:7d:3d:f7:92:
                    1b:60:cf:03:0d:62:71:1b:96:2e:56:75:3b:af:35:
                    f0:80:1f:99:12:32:df:a3:96:2e:4e:e9:39:ec:af:
                    6c:5a:70:4b:82:f2:3d:81:a0:c1:75:02:76:e4:65:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BF:B6:1F:00:60:D4:4D:68:07:54:9C:3D:6F:03:43:99:AD:2E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/20f9a66f-b76f-3d5c-afd9-8aa562ef853a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:1a:0a:58:43:a6:e9:65:f3:a1:38:b6:4c:ea:df:f5:12:
         12:d4:a9:87:8c:17:a8:fb:18:ca:c0:ac:51:d9:b4:28:53:19:
         8a:ae:b1:a1:f9:ac:17:4e:30:4e:4b:6a:d3:0f:83:fd:e6:2d:
         cd:e6:64:24:7c:26:8a:52:40:58:46:3a:cc:8d:38:33:52:65:
         b3:60:b2:5f:ef:68:96:69:ea:f2:0a:1c:d6:79:a2:53:b2:dd:
         ce:f9:1e:57:21:63:26:3e:7f:32:f5:c9:59:a2:f6:ef:f0:b2:
         3a:ec:d6:e0:dd:40:08:26:71:18:66:13:7f:42:67:2e:70:24:
         96:ec:49:a5:1e:e7:20:56:ad:6a:4e:0e:73:67:7f:1a:95:58:
         2b:f7:41:76:1e:64:fe:ef:6a:c2:4a:7a:47:05:72:7f:f6:7d:
         e3:69:d4:3c:1d:c4:4a:de:58:99:b3:1d:88:af:a6:6a:f7:5c:
         ca:21:2a:15:d0:20:96:0c:9b:7b:79:86:ba:ac:d1:3a:85:16:
         29:19:6a:19:c6:df:14:10:2a:8d:a9:0d:c3:41:a9:44:8d:26:
         e7:c0:eb:39:bc:61:3a:2e:d2:87:4e:86:bd:f1:fa:a1:a0:49:
         96:90:cc:e7:39:e2:92:d0:8f:e0:5f:c2:22:cd:54:70:6c:0d:
         03:e9:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----