Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/ddbd2bc6-5813-3d1e-ba37-9b21e1bbee91.roa
File:                     ddbd2bc6-5813-3d1e-ba37-9b21e1bbee91.roa (raw, json)
Hash identifier:          uYxORxN4dS5rQWcqGbcHhSZFJkN/oo1qSMF1B7apF9Y=
Subject key identifier:   DF:C5:FA:16:EA:EF:72:17:AB:D3:C8:AD:52:FE:70:7E:48:E1:5F:1B
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328583CC6C1ADD7E2648016EBD93600
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/ddbd2bc6-5813-3d1e-ba37-9b21e1bbee91.roa
Signing time:             Mon 31 Jan 2022 05:00:00 +0000
ROA not before:           Mon 31 Jan 2022 05:00:00 +0000
ROA not after:            Sat 30 Jan 2027 05:00:00 +0000
asID:                     16509
IP address blocks:        169.150.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c6:c1:ad:d7:e2:64:80:16:eb:d9:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan 31 05:00:00 2022 GMT
            Not After : Jan 30 05:00:00 2027 GMT
        Subject: CN=53346639-76b7-435f-bc7b-a11f585e395e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:6b:bd:7b:23:3e:ba:27:a3:5a:93:19:43:
                    00:88:23:73:2e:45:e3:d2:c3:33:f1:27:f4:95:05:
                    32:40:3f:21:40:8b:a3:f4:27:f5:ea:f9:d0:cf:2f:
                    d2:6c:31:9f:52:12:16:f3:26:9c:28:ad:2e:77:14:
                    dc:c8:39:c6:96:73:c3:dc:eb:aa:1f:94:48:c3:15:
                    79:28:42:f3:74:fb:51:75:f1:34:9c:e1:3a:69:2f:
                    7c:e4:a6:2e:58:71:10:38:16:1c:2d:e9:4b:74:ae:
                    e9:06:3b:49:e1:22:94:25:d6:c2:5d:f7:c0:fd:e4:
                    a4:32:0f:70:74:9f:1e:e4:04:9d:8d:22:2f:d9:ec:
                    af:f6:73:62:09:0b:1d:07:d7:4e:6c:2a:4c:d8:c5:
                    61:ba:56:e1:5d:4c:55:a6:94:be:ed:73:25:63:3d:
                    f9:c3:23:2f:98:64:26:f7:71:6b:e6:a7:dc:a1:d6:
                    5a:fd:ae:4d:8b:96:12:12:cc:c6:ee:6e:f7:25:83:
                    02:55:a1:1a:3d:f8:79:b8:ff:ca:01:3e:3e:32:96:
                    68:db:1d:7d:4b:8c:0d:e6:7d:1b:4e:93:02:17:27:
                    6a:ec:6a:34:b9:03:55:59:73:20:44:b6:cb:0b:65:
                    81:2e:89:30:ec:a2:f1:5d:73:0c:de:4f:b9:90:67:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C5:FA:16:EA:EF:72:17:AB:D3:C8:AD:52:FE:70:7E:48:E1:5F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/ddbd2bc6-5813-3d1e-ba37-9b21e1bbee91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:cf:e2:f1:62:b6:ce:a9:17:f4:82:59:31:76:92:47:0b:
         06:1e:bf:94:cd:c7:33:34:df:f8:50:89:7c:94:b4:da:90:24:
         7d:90:91:0c:f5:aa:7c:47:70:63:c3:1d:bc:c7:12:7a:99:20:
         f0:fb:5a:52:bf:61:39:ee:79:de:d7:3a:bc:1c:00:19:96:bd:
         b8:40:34:4b:4b:18:7e:91:0d:f4:04:6b:a1:cf:4c:bc:4f:33:
         77:a2:8e:1c:a3:bd:39:f3:6b:a9:82:85:13:58:4d:b5:c1:bd:
         2c:a4:90:67:4e:9c:2e:f7:0d:b0:75:44:9a:55:4b:bb:96:54:
         87:aa:24:a6:09:9d:3a:88:42:b3:68:cf:97:31:95:4f:bb:70:
         69:3f:f3:97:53:65:4b:0b:28:15:a2:91:4e:b3:7f:f0:3f:8d:
         27:a9:1f:33:ae:36:e8:cf:99:45:a7:2f:45:ca:39:06:63:b4:
         ea:c9:c0:60:ac:86:d7:9d:4a:95:d0:73:6b:f7:6c:c3:91:a2:
         07:cd:e9:79:51:b4:5e:7e:ee:9c:45:f7:96:be:bf:aa:5a:a8:
         41:29:98:b2:1a:96:dc:47:88:2a:3c:37:b2:6f:4d:eb:cb:79:
         51:97:12:11:15:f3:a8:2b:87:f8:c0:1b:6b:7b:d1:8d:71:68:
         39:3a:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----