Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/498ea934-63f1-35fa-89c6-9f8a277ca424.roa
File:                     498ea934-63f1-35fa-89c6-9f8a277ca424.roa (raw, json)
Hash identifier:          5rdYC7TrTFfEi2xUg2eTw0SRUmcYlmBedJlZ9cMy6JY=
Subject key identifier:   FA:29:D2:5A:23:BC:18:6A:76:EA:35:BF:42:AC:A5:27:6A:A2:0A:BE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840E9274E10EF8E2F46FF87F580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/498ea934-63f1-35fa-89c6-9f8a277ca424.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Mon 19 May 2025 04:00:00 +0000
asID:                     207279
IP address blocks:        184.174.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e9:27:4e:10:ef:8e:2f:46:ff:87:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : May 19 04:00:00 2025 GMT
        Subject: CN=fdba6fbc-b887-4d2d-a96d-4c5c4aca9322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:8c:3a:72:3c:9d:8e:4b:6b:1f:a1:18:d0:
                    0b:e9:c4:bd:80:f2:b7:ae:64:3d:08:c3:0e:c0:9a:
                    ea:a9:d8:77:50:ac:be:af:e1:ce:b9:6d:00:b1:3d:
                    2f:cf:de:46:65:f3:da:c6:e4:d1:45:0e:71:9c:12:
                    10:17:2d:11:48:31:92:80:a9:3b:4c:70:7c:df:a7:
                    07:45:d9:27:82:ea:f3:08:97:1a:8d:84:d5:0f:1c:
                    23:1a:fb:8c:ec:4c:18:52:9a:14:c3:a4:31:72:f1:
                    2d:9f:0f:ef:bc:0e:69:5d:86:fc:df:97:f9:63:8a:
                    55:e5:da:7f:f7:d2:f1:2d:9d:54:4c:7d:a6:40:78:
                    9a:96:fe:75:63:b7:2d:28:b5:44:0e:91:53:5c:4d:
                    50:82:c1:8b:96:28:e7:b3:e8:d7:d2:59:9b:9f:c1:
                    a0:d4:bd:c6:4d:48:70:e5:df:45:2b:de:3b:c6:0f:
                    80:7e:f4:02:ff:62:38:f4:a0:dc:f0:66:93:a7:10:
                    d4:9a:74:de:bf:54:f0:7e:43:89:7d:5d:87:4b:45:
                    2a:38:ac:3d:73:f2:57:67:77:fe:19:73:ee:67:b0:
                    37:d3:09:03:86:57:fd:dc:9c:b9:bf:db:74:fd:99:
                    aa:da:ac:2b:ca:68:3f:da:c9:31:41:d1:02:66:25:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:29:D2:5A:23:BC:18:6A:76:EA:35:BF:42:AC:A5:27:6A:A2:0A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/498ea934-63f1-35fa-89c6-9f8a277ca424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:9b:5b:a5:e7:f4:29:c5:e1:1f:1b:5f:72:e1:59:ca:65:
         f7:8c:b7:79:af:9f:e2:9c:f2:51:c3:ae:6e:32:81:17:be:03:
         e6:ba:97:10:59:7c:6a:f0:78:7b:63:13:60:8d:e6:e5:3b:fa:
         40:07:e4:ed:c9:2a:c0:a1:08:14:6d:d0:35:06:e7:3a:c0:27:
         f8:e6:96:57:d2:f0:3f:f3:69:a1:d3:05:83:f9:48:82:44:2c:
         92:d6:df:f4:1f:1d:05:96:18:9f:65:fa:86:ce:4c:54:ef:c6:
         a1:4d:d1:17:3c:b1:98:28:e6:26:23:c7:9b:7c:72:f4:7f:61:
         e5:37:3b:ec:1f:4e:19:94:c6:1b:17:78:c3:fe:ec:8a:d3:65:
         ae:e3:0b:cd:02:95:48:ed:a7:77:1d:fd:f4:32:d0:d3:2a:8b:
         0b:b5:59:39:6e:12:1e:64:2c:b4:e5:15:33:88:21:49:21:dc:
         f4:8c:4c:a4:3d:b6:fd:4e:36:d7:c7:a5:1f:9c:36:a8:41:29:
         30:1c:aa:5a:00:51:86:e1:b1:d6:2b:d6:bf:fb:0b:e0:57:05:
         64:bf:b8:37:75:6d:0a:0b:c0:12:b7:c8:e6:6a:8a:90:6a:d8:
         9a:53:0d:b4:9a:a9:35:42:02:b0:dd:d6:49:15:53:44:43:4b:
         6e:b0:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----