Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eec865c2-d2db-3616-9739-90d7a9ba0cb0.roa
File:                     eec865c2-d2db-3616-9739-90d7a9ba0cb0.roa (raw, json)
Hash identifier:          h7ayQfJfwyDx00buBD2w6v/Xlt1UceQY3PAQCxDcupU=
Subject key identifier:   03:E3:CD:B7:24:D3:CA:86:D7:CB:63:D0:A9:47:F9:2F:8E:93:C5:9B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841888523D91E330465895806C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eec865c2-d2db-3616-9739-90d7a9ba0cb0.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 15 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        216.74.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:88:85:23:d9:1e:33:04:65:89:58:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jul 15 04:00:00 2025 GMT
        Subject: CN=162a2b28-e2a7-49da-b6c8-7e136520170a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:3d:cc:6e:8c:39:3b:e5:35:47:9b:3b:3d:
                    82:6b:53:14:22:4c:66:13:e2:fb:3a:33:d4:1f:31:
                    83:3e:ea:48:b5:16:18:15:57:08:f8:75:6a:f0:97:
                    af:71:82:cd:3e:da:df:0c:08:19:9a:b7:37:0b:68:
                    aa:c3:7a:09:16:c4:0c:49:c9:08:53:e1:c8:1a:85:
                    cc:ac:ea:01:1b:95:a4:07:54:6d:1d:4a:c9:8b:77:
                    34:07:aa:35:b2:c7:7d:5e:4c:43:a2:b2:f3:a8:8f:
                    fa:31:7a:a3:cc:c1:99:a0:05:4f:7f:e7:fd:f2:10:
                    91:b4:b9:7a:ee:03:a2:2d:70:fa:09:78:70:72:74:
                    a6:1b:1e:f8:c2:ba:a6:cb:60:a7:47:7a:e2:cf:17:
                    f8:40:c2:85:ce:a7:11:d0:44:e2:a8:52:eb:f7:6d:
                    2b:c8:7e:b6:b6:da:6d:db:f9:d7:c8:a8:09:4c:0a:
                    76:37:cd:ee:c6:6b:ab:86:42:cb:22:b4:59:c8:82:
                    ce:a5:68:78:a8:6c:34:19:e1:92:4b:1b:1a:d6:9d:
                    fd:67:38:dd:ff:c3:c0:b9:d3:82:42:f4:c4:77:00:
                    6b:07:a5:71:37:d1:81:c4:01:23:8c:0a:94:46:04:
                    49:f5:1b:9c:9d:d4:d9:93:e8:1b:ab:41:4f:6f:c9:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:CD:B7:24:D3:CA:86:D7:CB:63:D0:A9:47:F9:2F:8E:93:C5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eec865c2-d2db-3616-9739-90d7a9ba0cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:c9:a5:cf:ca:7a:47:fa:70:46:7b:ad:0d:b9:9b:7e:27:
         40:c6:3f:fa:06:e0:52:40:80:cb:c6:c3:c2:e6:b0:cc:f2:85:
         a1:21:78:b3:03:47:33:b5:ed:43:25:ea:34:52:f4:4b:ef:d0:
         53:f7:fb:10:87:13:b2:d0:34:80:8b:a8:b3:b2:c3:00:f8:35:
         db:77:fe:9f:a5:90:59:99:48:d1:c5:5c:6a:ca:ef:fc:8b:f0:
         3c:0b:3c:0b:29:68:38:fc:61:b0:b1:8e:62:74:1b:a2:ee:dc:
         de:77:91:fc:9e:ee:76:81:9c:8f:18:c2:59:89:fe:1c:5f:d5:
         fb:e1:77:b8:b1:45:e2:5e:e7:7c:18:bd:fd:69:0d:ad:94:51:
         f8:68:27:9e:6e:cc:de:42:46:0d:ca:3b:86:63:5c:0b:a8:af:
         80:19:ae:a3:df:04:ee:52:eb:b3:ab:27:43:0e:c1:69:d5:c6:
         1b:ce:4c:9f:5a:d8:c6:2f:32:e3:51:d8:3e:3c:85:98:0c:ad:
         46:37:e0:47:b7:29:d7:a8:65:c5:5b:e5:84:ba:d7:cf:6b:3f:
         25:b4:41:55:86:c2:87:a3:04:28:de:f6:e4:90:42:9a:cb:02:
         3c:d1:4d:05:37:02:88:37:0f:04:1d:da:9b:b4:41:6e:d5:71:
         ad:ca:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----