Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b1a7d71-3a16-3bd1-99f0-56249d63c051.roa
File:                     5b1a7d71-3a16-3bd1-99f0-56249d63c051.roa (raw, json)
Hash identifier:          2GVKQ3BukjdwU+sLHPbv7CuwbUmkOJiiT5sWn+gfAhM=
Subject key identifier:   9C:C0:23:7B:8D:2A:64:7C:14:F3:AD:ED:BD:E0:34:98:EA:B3:C7:0F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858403C17AF5564901E1F0C92EE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b1a7d71-3a16-3bd1-99f0-56249d63c051.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 18 Mar 2025 04:00:00 +0000
asID:                     49999
IP address blocks:        206.206.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3c:17:af:55:64:90:1e:1f:0c:92:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 18 04:00:00 2025 GMT
        Subject: CN=8ab94cf5-559b-44bb-a7f3-83b7679eedc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:5e:98:ce:9e:29:a7:a3:02:3a:bd:88:20:
                    b4:c8:17:e7:4b:46:4b:fe:fd:85:71:78:93:d7:7e:
                    6d:11:fb:bc:e4:dd:9d:fc:af:38:25:6b:b0:b8:7a:
                    39:32:44:3a:d7:de:93:da:b6:8a:01:c7:3a:43:f8:
                    10:d8:8b:ef:31:64:95:2b:d3:be:e9:1d:89:ee:2e:
                    8c:e6:34:1d:ca:ef:60:8f:e2:92:d9:9e:c8:1d:88:
                    f6:ee:a3:4e:e5:54:9e:07:54:8a:08:db:9f:d4:7a:
                    9c:f7:b3:5d:98:1d:68:5d:6f:06:b6:a6:e2:62:1f:
                    e7:d6:b9:3d:f2:90:d4:0b:26:aa:aa:ce:bb:e1:f9:
                    d6:5d:1e:c5:5d:e0:4f:21:a4:00:62:d4:a6:ba:6a:
                    16:75:e7:28:d4:cb:9d:25:2f:ff:bf:10:72:af:50:
                    b9:c2:d6:06:11:8f:04:21:3f:21:7f:ca:ab:61:06:
                    8d:a2:97:25:65:23:b2:3c:3a:e2:35:f5:c1:94:6b:
                    20:39:5a:45:8b:95:f1:14:77:45:59:f2:c8:80:33:
                    47:6a:0c:a2:c6:e6:3e:f9:3d:4f:6f:b5:70:ea:51:
                    90:b4:35:5e:24:27:9f:d0:d7:ea:4a:37:bc:29:7f:
                    20:a7:bf:59:f0:de:e8:13:a0:41:be:2e:40:5c:86:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:23:7B:8D:2A:64:7C:14:F3:AD:ED:BD:E0:34:98:EA:B3:C7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b1a7d71-3a16-3bd1-99f0-56249d63c051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:27:f5:e7:26:69:d2:aa:97:dd:78:0b:9f:f4:e8:3a:52:b1:
         6c:05:86:bb:76:30:0e:82:d7:66:1a:a9:6d:d7:97:be:b5:72:
         54:22:f0:c6:4a:bf:65:ae:8d:ad:f4:e2:dc:e7:27:75:58:77:
         fc:01:bb:34:12:1e:27:23:d9:63:5b:47:cf:fc:04:c2:2f:b0:
         78:b4:d2:2e:e5:66:98:11:a2:4d:da:4c:f9:59:7d:db:2b:fa:
         35:c6:5f:ac:ad:d0:56:13:c6:ce:33:40:09:3d:4a:70:a7:12:
         52:8b:67:5d:3d:a1:af:01:f1:d4:d5:5a:1e:cd:cd:a6:77:3d:
         33:c4:d4:ee:b3:5d:88:e5:b1:f2:f3:8b:fd:55:54:64:65:45:
         95:45:e2:68:7f:77:40:97:40:6c:77:ed:0c:bb:05:81:73:bc:
         eb:e8:34:dc:17:2c:8c:2f:35:c2:23:d1:8b:c6:89:07:f3:19:
         14:2e:55:69:e9:5a:6b:54:a6:08:f1:cb:88:9a:58:6c:d2:8d:
         bc:69:88:0e:68:27:19:62:f5:96:f6:77:d0:ec:a2:5d:09:61:
         71:d6:2d:9f:ea:d5:39:cb:a0:33:7f:b3:d6:8c:47:cb:91:31:
         0d:bb:1d:ad:9f:31:a8:59:38:2b:30:97:22:e4:23:fb:c3:ed:
         fd:f3:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----