Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7584e46e-7250-3673-9588-e1c4d5207b7a.roa
File:                     7584e46e-7250-3673-9588-e1c4d5207b7a.roa (raw, json)
Hash identifier:          Y4c02eDFtQEnmqP6ZCbTjhrCJEunhntzKrrnkGPm7jw=
Subject key identifier:   B6:DD:AC:80:75:81:48:CC:A6:06:DC:86:D8:3D:3E:64:47:6C:67:7F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858410D74797F5087CD07C6B98F20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7584e46e-7250-3673-9588-e1c4d5207b7a.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sun 01 Jun 2025 04:00:00 +0000
asID:                     2914
IP address blocks:        216.74.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:0d:74:79:7f:50:87:cd:07:c6:b9:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jun  1 04:00:00 2025 GMT
        Subject: CN=7765e972-92c8-44cc-963e-035adda1e5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:ab:de:87:c2:70:3a:a7:cd:ef:d2:8d:c7:
                    21:eb:1e:d6:d2:60:89:ba:6b:85:83:76:e6:be:5c:
                    4d:bf:9c:f2:aa:dd:7a:08:79:51:aa:38:0f:b2:95:
                    b3:00:06:93:44:8f:a0:57:4f:14:19:43:9d:d7:63:
                    3c:12:40:3c:08:a1:13:8d:3e:14:c7:9e:c1:39:5f:
                    5e:e7:30:85:7a:f6:07:59:44:52:16:58:93:99:b2:
                    4f:65:e5:69:6a:78:5f:85:31:56:34:0a:87:8c:4c:
                    54:a5:2f:5c:24:2a:b1:67:77:1d:4b:8c:04:04:87:
                    1b:3c:d9:34:8d:f1:cd:e3:0a:e8:4a:90:a3:3c:5f:
                    e7:1a:6c:49:3b:e8:dc:07:28:87:ee:1c:0c:b1:3f:
                    ff:ed:9c:23:16:a0:58:cc:88:85:60:a0:07:1d:65:
                    90:a3:07:ff:9f:30:7d:0b:ba:9a:ac:a1:7f:e9:6b:
                    68:7f:d3:fb:f7:54:b1:ce:f8:6a:4b:6e:ab:31:9f:
                    31:eb:0c:a4:57:6b:72:c6:1d:0d:d4:17:9c:9a:83:
                    b2:cb:77:82:36:3a:22:e1:5e:c0:d6:b6:c1:90:01:
                    c6:16:9c:83:1f:7e:70:2f:8d:b3:10:cd:75:c9:ab:
                    d3:4f:a1:2e:7b:52:2a:52:4b:85:b8:52:a6:37:2c:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:AC:80:75:81:48:CC:A6:06:DC:86:D8:3D:3E:64:47:6C:67:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7584e46e-7250-3673-9588-e1c4d5207b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a8:8c:ff:c6:24:cd:bd:ab:b4:6f:bb:28:81:50:ce:f7:d7:
         d3:7f:68:c1:36:23:d7:db:3b:c2:2f:15:fc:ec:d4:2b:5b:b8:
         bc:e5:d8:bb:93:8c:14:ae:c8:59:56:9e:0b:e0:95:1f:fa:06:
         f2:c1:ba:cd:78:79:92:3d:55:03:d6:5c:0f:41:9f:af:42:b7:
         c6:ee:79:45:4d:d0:c3:1e:c9:0e:6b:b3:27:09:94:6c:43:ff:
         89:e2:19:a6:37:ae:96:1d:aa:d8:5d:0d:6a:46:7d:12:2a:91:
         88:21:9c:a3:63:10:15:24:7d:c1:4d:24:87:97:a4:7e:dc:4a:
         e1:24:d5:57:d0:d4:81:16:6b:ad:88:cf:c4:50:75:b4:b8:2f:
         b6:78:74:44:f6:d0:53:0d:ea:4e:c1:71:40:d6:76:a4:24:27:
         07:4d:d6:aa:76:d5:73:cf:e5:e8:db:24:98:10:48:f1:d5:c5:
         75:58:81:57:b7:73:f9:f5:e0:6f:00:e6:2c:b4:09:4b:d7:fa:
         ac:c5:05:0e:03:45:6e:21:42:01:7d:e8:d4:6a:b2:6b:03:c0:
         36:99:e4:10:66:7a:96:83:95:ac:57:f1:bb:44:1e:13:7f:4b:
         0b:ed:d6:44:9c:4e:81:2e:16:0f:59:ba:65:64:61:c2:1f:c9:
         47:15:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----