Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce3f3a9e-8466-366f-8275-2cd05d37af9a.roa
File:                     ce3f3a9e-8466-366f-8275-2cd05d37af9a.roa (raw, json)
Hash identifier:          K5epCvgxglvZ2a0dDpKNnXE/QOUL58GYt6fKTpJSxWI=
Subject key identifier:   E9:AC:A8:A2:91:86:54:A3:25:15:A7:49:1B:5A:DA:66:F8:CF:79:1D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840473E3C798C88BEFE8E711F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce3f3a9e-8466-366f-8275-2cd05d37af9a.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sat 22 Mar 2025 04:00:00 +0000
asID:                     211439
IP address blocks:        216.10.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:3e:3c:79:8c:88:be:fe:8e:71:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 22 04:00:00 2025 GMT
        Subject: CN=65db3935-d062-461f-b800-ca8a1e6b296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:61:ce:5d:79:fd:91:c0:52:81:3a:30:84:
                    61:e6:36:8e:75:8e:aa:77:be:31:a0:a2:ea:e7:b3:
                    f4:71:67:ea:7b:be:41:87:a7:ea:3f:b4:ea:ad:f1:
                    54:25:88:8b:af:ea:69:95:50:f6:2c:c5:b0:c2:56:
                    59:d9:d4:c2:ba:dd:ab:80:1f:30:4e:d7:f9:82:62:
                    92:51:69:10:91:ac:84:a0:9a:0b:83:54:96:5b:93:
                    32:7e:4a:c4:9a:96:ed:19:c3:85:e7:3a:0f:e0:55:
                    95:4c:be:5e:24:fd:15:e5:25:af:f7:bf:2c:90:46:
                    95:8a:9b:a9:0e:cb:e1:bf:0d:81:c5:74:fe:e6:1f:
                    ff:49:c3:7b:ef:c1:d0:7c:16:c7:4b:c9:ed:ec:72:
                    e3:7b:65:30:af:2e:d3:53:d8:2e:e1:f1:84:13:8c:
                    92:58:4b:39:8f:77:87:f5:e0:82:d1:c0:62:c1:d0:
                    31:c5:8e:b4:08:48:00:99:c8:20:1f:83:99:16:9a:
                    05:ed:2c:a9:15:2c:63:d1:bb:35:a9:75:ff:99:c6:
                    7e:0d:03:ad:61:ae:85:0c:d9:bb:cc:ce:53:e5:68:
                    04:33:1a:46:d5:29:07:29:78:20:4b:f6:1f:aa:c4:
                    ed:a1:37:c9:98:5d:42:55:32:79:b1:64:80:9b:4e:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:A8:A2:91:86:54:A3:25:15:A7:49:1B:5A:DA:66:F8:CF:79:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce3f3a9e-8466-366f-8275-2cd05d37af9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:13:07:06:5b:78:88:65:fa:bd:6b:41:50:e7:ad:e8:cb:ef:
         bd:77:ee:44:b8:fd:81:44:38:97:db:05:57:f4:7d:c4:60:a8:
         3d:d0:11:51:dc:e5:9d:78:6e:9e:51:30:5c:ae:e5:f1:70:20:
         2e:e6:0b:4b:87:e0:8c:c8:6e:8d:f0:2a:8d:68:cb:f2:ac:1f:
         e0:57:ca:9a:cb:a4:01:6f:d9:dc:22:26:d0:57:a3:29:29:a4:
         a0:e8:0c:b4:cd:82:8b:f9:bf:fb:8c:84:c6:76:3c:4a:ee:12:
         ff:41:ec:ea:f6:9f:b9:a2:93:d2:15:47:a3:0f:01:e6:cb:88:
         c7:28:11:76:3e:7e:b3:d1:ce:0e:b0:64:1c:a9:c0:eb:4b:0f:
         4b:1b:b7:72:3d:89:e6:50:00:2f:ce:5e:62:48:ec:fd:0e:36:
         31:19:df:f8:71:3b:8f:1e:31:22:94:ce:ad:a1:8f:7e:c2:0b:
         bc:85:3b:6c:69:b7:12:2d:7f:df:44:c4:e9:ba:68:a2:ab:ac:
         b3:86:0a:66:0f:2d:ee:12:39:1c:85:82:f5:03:e6:e5:ea:7e:
         0c:9a:5d:12:e3:f8:49:d0:f7:4d:23:47:44:16:ff:2e:2e:3d:
         33:42:62:5e:90:0d:07:01:d8:91:5c:84:27:bb:b1:b1:dd:cd:
         af:34:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----