Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6e1e6e12-2458-3fe5-ad62-9347b5fe4172.roa
File:                     6e1e6e12-2458-3fe5-ad62-9347b5fe4172.roa (raw, json)
Hash identifier:          B0EtMagQgcxyVt2o9DnBmljSuJ9NGcQn/uK05Nltx3c=
Subject key identifier:   FC:89:48:F1:F5:C3:FA:7B:A2:AB:82:C8:19:75:EF:F9:A1:9D:C8:AE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858413CC36413E7E3BE8321577140
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6e1e6e12-2458-3fe5-ad62-9347b5fe4172.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Wed 18 Jun 2025 04:00:00 +0000
asID:                     61138
IP address blocks:        216.74.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3c:c3:64:13:e7:e3:be:83:21:57:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jun 18 04:00:00 2025 GMT
        Subject: CN=53e2d5d8-f817-4d7d-899e-071cb71d1377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:fb:f5:1a:20:5a:fc:48:fd:75:e1:0f:40:
                    6f:cf:97:8b:41:e0:52:87:62:51:bb:82:b6:b6:12:
                    16:b5:e6:38:c2:60:02:7a:cc:d2:75:b5:2f:fb:e2:
                    45:7b:f0:05:bc:23:5b:41:5b:d0:82:fa:b5:75:8d:
                    f2:03:e1:37:e1:b2:6a:c4:3a:dd:b1:50:3b:6e:df:
                    20:ea:42:a4:53:0c:62:d6:cc:ff:0e:b3:ee:16:da:
                    11:97:87:34:6a:e9:16:47:1f:d6:14:7c:a5:87:7a:
                    bf:4c:5d:20:e6:30:ac:48:4d:78:b2:5a:e7:f7:af:
                    36:5c:8c:54:f9:7a:3c:68:c6:48:d4:64:be:52:71:
                    4a:91:65:0f:71:10:03:5b:3b:98:53:fb:e2:28:dc:
                    60:3a:6f:d1:3f:d4:e8:14:25:2f:f4:30:55:9c:f0:
                    f8:7a:00:e2:6b:07:92:15:8c:da:bb:6c:19:bf:a5:
                    f2:92:f8:83:9e:30:b5:9e:58:e6:87:ca:ab:f2:06:
                    44:ad:70:d0:2b:04:5d:9d:61:c6:29:69:88:9c:01:
                    17:6e:98:df:13:b1:9f:f6:d9:01:84:20:4b:f3:83:
                    d1:84:ba:82:e4:9a:0c:d3:a2:9e:80:a4:8b:55:b5:
                    2d:21:3e:5f:f0:a8:f2:11:b3:bf:0b:69:ca:21:92:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:48:F1:F5:C3:FA:7B:A2:AB:82:C8:19:75:EF:F9:A1:9D:C8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6e1e6e12-2458-3fe5-ad62-9347b5fe4172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:ac:f6:03:b8:27:30:92:38:4e:67:a4:bc:61:25:f6:bc:
         48:d8:c7:bf:ee:d9:e5:33:b1:23:cc:c3:b7:93:6c:f1:e0:f4:
         71:ef:c0:67:de:7c:ee:5c:d7:b0:1a:17:6a:93:74:69:ca:fd:
         1a:5d:5b:c3:1b:c7:4f:9e:64:f5:7c:6a:f5:2e:27:c0:cb:ff:
         cc:52:36:6d:d7:73:1e:38:7a:b6:f1:fc:ab:e5:9a:a0:34:04:
         41:e4:37:5b:96:67:ed:15:72:99:9b:c5:6f:d6:98:21:7a:36:
         36:f8:e3:aa:7d:66:31:6d:da:5f:f3:95:3a:7c:51:32:bb:6a:
         4d:67:4d:b2:35:b7:1e:e5:64:84:92:5c:24:a6:01:66:2b:27:
         b3:d2:65:f4:9d:03:ee:8d:a3:6e:f1:d8:5a:c9:ac:02:5c:a1:
         5c:87:88:06:92:3c:b6:f2:07:18:88:b0:79:25:66:24:bb:fb:
         41:cb:f1:d7:81:ad:2b:d9:2a:d9:05:b5:b9:39:d3:88:b8:43:
         2f:a6:8c:12:91:6a:6c:20:6d:ec:93:5a:98:f7:40:55:e1:26:
         67:1d:75:4a:64:db:1e:01:e1:ae:a5:bb:55:47:db:be:f2:68:
         46:c1:b2:35:b3:26:f7:0e:2d:12:a0:1a:78:e4:e7:da:04:c8:
         8e:a9:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----