Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8d21696d-0048-3430-af8e-39790ddf2a8d.roa
File:                     8d21696d-0048-3430-af8e-39790ddf2a8d.roa (raw, json)
Hash identifier:          X1QF3D1lto9Q/wsGvhi2oj3qKrkrTbHS0FUKRhAVZsg=
Subject key identifier:   C8:A4:0C:C5:7A:0A:E2:77:B0:A1:10:7A:EC:D6:24:E4:5C:38:2F:94
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328583CC6C1C54EE223BDC06E80DC40
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8d21696d-0048-3430-af8e-39790ddf2a8d.roa
Signing time:             Mon 31 Jan 2022 05:00:00 +0000
ROA not before:           Mon 31 Jan 2022 05:00:00 +0000
ROA not after:            Sat 30 Jan 2027 05:00:00 +0000
asID:                     14618
IP address blocks:        169.150.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c6:c1:c5:4e:e2:23:bd:c0:6e:80:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan 31 05:00:00 2022 GMT
            Not After : Jan 30 05:00:00 2027 GMT
        Subject: CN=8faaa673-0969-4cf4-ab2a-0f521bdda1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:87:75:bd:16:ec:d3:90:11:f8:72:04:9f:
                    ae:2c:19:29:fd:d8:64:02:e6:09:63:03:32:32:b9:
                    21:00:2d:6f:61:25:b1:ee:b0:6a:df:e9:a6:04:3f:
                    c6:9f:e1:a1:23:55:0a:48:89:96:45:b9:39:82:70:
                    51:7f:98:a4:f3:1e:ea:e4:d4:1b:19:77:ab:30:ef:
                    61:97:07:63:5d:af:07:13:29:1d:c5:50:17:ca:78:
                    71:59:d7:61:5a:87:75:3b:8e:01:64:36:70:33:94:
                    0a:b8:bb:ee:c1:4b:a8:64:3f:43:ce:3a:c5:c9:c2:
                    f7:e4:b4:fd:2b:e7:23:dd:32:a1:fa:ef:77:bc:bd:
                    ec:18:15:43:30:46:bb:b8:81:6b:f1:98:af:9a:58:
                    26:f6:de:2d:61:32:51:82:f4:3b:96:d9:9a:0e:c1:
                    2b:3d:b5:f6:7f:c4:85:12:9e:f8:43:41:fb:b7:b3:
                    18:be:3a:08:b4:ec:7b:19:c0:69:9c:2b:dd:fb:2b:
                    29:0f:4e:44:2f:f9:3f:f0:79:84:07:2c:45:27:e0:
                    a7:32:d9:0a:87:84:4c:da:ab:5a:9f:de:5b:d2:e7:
                    9b:0a:d2:9c:5d:05:a6:0a:54:6d:86:ea:cb:e3:41:
                    0e:97:ea:d1:ec:56:fc:cf:f3:d0:21:87:7a:6e:d6:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A4:0C:C5:7A:0A:E2:77:B0:A1:10:7A:EC:D6:24:E4:5C:38:2F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8d21696d-0048-3430-af8e-39790ddf2a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4a:1b:02:4b:05:b2:40:3c:a9:8b:86:6f:5b:04:77:c3:15:
         0f:0d:cb:74:07:3b:c6:81:12:84:d7:1f:db:03:f7:17:49:69:
         9d:ff:13:33:66:1a:88:ae:92:ca:da:2f:64:22:12:11:04:26:
         54:1e:5d:92:87:61:e3:45:d7:29:ba:c9:ab:f0:95:39:d7:42:
         c6:a1:6b:0f:62:65:89:5f:bb:75:6c:ff:ab:92:e1:16:e0:2d:
         b3:16:35:31:cf:f5:ba:ce:9d:eb:3e:9c:58:21:35:ce:d7:d3:
         08:d8:11:48:25:5c:ab:d1:01:28:45:25:24:9a:37:82:3f:65:
         a9:a2:c9:32:2a:29:d3:d8:90:02:d5:79:4b:63:7e:3b:96:8e:
         34:38:1d:16:de:bb:1b:d8:f8:35:98:7e:6a:c5:06:9d:69:d1:
         be:45:4a:37:0f:96:6e:cf:79:7a:05:0a:95:d2:3f:12:eb:2a:
         ce:ea:9e:b8:7b:bf:f8:4d:ef:bd:f2:1f:98:a4:b5:7b:3d:e1:
         f9:90:1b:78:85:28:e3:7b:74:bc:2b:43:cf:d8:55:8a:80:3c:
         c9:50:78:46:44:54:2f:0e:54:8f:a1:34:5f:75:88:73:32:e9:
         66:a5:24:68:71:23:ed:f7:6d:41:73:4a:ac:c7:dd:ff:1c:a2:
         ee:3f:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----