Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3b47d588-641b-31fd-801b-75bb4dcb7506.roa
File:                     3b47d588-641b-31fd-801b-75bb4dcb7506.roa (raw, json)
Hash identifier:          rLuP2vDdghBfcPENTXJ7DklXmiiXguDiy0NHqtibTfE=
Subject key identifier:   96:EE:3F:5E:53:50:2D:80:7A:4D:E3:6D:F8:3F:87:A0:44:C0:05:CF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583F86706A1733AFCA4900050200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3b47d588-641b-31fd-801b-75bb4dcb7506.roa
Signing time:             Tue 02 Aug 2022 17:30:08 +0000
ROA not before:           Tue 02 Aug 2022 17:30:08 +0000
ROA not after:            Sun 12 Jan 2025 05:00:00 +0000
asID:                     7029
IP address blocks:        67.227.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:86:70:6a:17:33:af:ca:49:00:05:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  2 17:30:08 2022 GMT
            Not After : Jan 12 05:00:00 2025 GMT
        Subject: CN=8d43b0c2-2284-4f77-96a8-128fd44c0283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:5e:63:2f:b8:5e:78:95:40:8e:e1:32:6f:
                    4c:4f:4b:11:bf:c3:1c:a4:d1:b9:f4:55:0c:1f:a9:
                    43:e5:7f:38:8d:3b:ca:ea:91:e2:39:17:f2:82:ea:
                    8c:5a:ca:da:c0:ba:55:16:f1:a3:b4:13:bd:d8:4c:
                    b2:79:00:d8:71:16:b0:d1:d2:79:58:cb:f5:7c:da:
                    c0:d5:ed:1f:8b:62:42:a6:04:4c:de:1f:12:5d:5d:
                    1a:9c:0a:c0:bc:12:3b:b2:b9:cf:f4:fb:c0:7f:ef:
                    12:a9:73:41:bf:0e:2a:05:b5:48:16:8d:16:92:29:
                    74:c0:21:74:86:d3:f1:30:9e:b4:15:7d:7f:c3:6f:
                    59:4a:a5:57:84:4e:2f:a4:97:39:0c:d7:68:e6:41:
                    5b:27:70:31:a0:57:0e:91:68:4a:65:65:ca:da:4b:
                    3c:57:a0:a3:7f:b0:89:15:98:c7:1b:3d:97:da:a5:
                    60:b7:e0:7b:fa:51:e4:81:1a:9a:77:03:ad:a2:2e:
                    80:7e:29:63:cb:35:15:c0:6a:2b:46:12:fb:ac:32:
                    6e:0b:eb:4d:c0:36:b7:9f:be:14:2c:3f:e0:25:2f:
                    11:b0:20:07:d0:cc:64:91:38:30:f3:63:e5:1f:4b:
                    ac:29:15:1a:34:96:8f:fc:9d:54:d1:7b:d4:30:21:
                    4e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EE:3F:5E:53:50:2D:80:7A:4D:E3:6D:F8:3F:87:A0:44:C0:05:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3b47d588-641b-31fd-801b-75bb4dcb7506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:0f:79:7f:30:c9:5b:91:45:f4:af:5b:12:a2:8b:ba:87:89:
         3b:94:70:8c:78:0c:ca:cd:c0:68:ad:32:07:b7:4a:d6:fb:81:
         1b:97:d7:f0:83:36:df:b5:b7:d8:95:58:83:5a:32:40:81:3e:
         6b:b0:18:ac:96:c0:2a:4d:fe:1d:90:82:f9:54:86:d6:c3:04:
         24:dd:41:05:c3:6e:55:7a:4e:38:03:34:b4:0d:da:4a:11:ca:
         cb:3c:30:7f:0f:5c:5a:06:b2:17:d2:5a:be:fb:9f:63:15:dd:
         e3:90:5f:0d:0c:c8:cc:db:fa:3a:a2:64:a9:d5:f3:eb:93:9d:
         cf:ea:d1:74:8e:80:9e:14:f2:76:43:d0:18:2b:2e:e2:3c:f0:
         8b:a5:17:1b:9b:a9:94:cc:3d:9e:06:2d:bf:db:ec:7b:d2:e1:
         36:0d:35:bc:b9:e7:b5:f1:c4:c2:e7:47:0f:61:53:76:1f:6c:
         ee:ca:00:0a:b0:44:5f:9e:2b:55:c1:7f:c2:db:be:34:8d:06:
         d4:46:1e:d6:02:73:82:04:ed:57:40:2a:20:1a:19:56:d2:cd:
         de:2e:20:16:d3:04:dd:2f:ff:d0:af:b9:b0:6b:ed:39:12:6e:
         c0:30:96:f1:97:e8:bd:c8:52:8a:96:2b:d8:c6:c9:ed:d4:df:
         be:ae:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----