Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/490850e9-6b99-31a3-a206-a6672225990b.roa
File:                     490850e9-6b99-31a3-a206-a6672225990b.roa (raw, json)
Hash identifier:          bBGcom9RFMI9QN1I+1WKseP4sYPYMnY64V93YQnsF64=
Subject key identifier:   8A:30:57:EB:F8:6A:2F:BC:93:DC:C4:33:80:A3:2F:FE:09:8F:08:6A
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328583DCDEFBA64DFBEACA0D0DD6680
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/490850e9-6b99-31a3-a206-a6672225990b.roa
Signing time:             Fri 31 Dec 2021 12:00:00 +0000
ROA not before:           Fri 31 Dec 2021 12:00:00 +0000
ROA not after:            Sun 31 Dec 2023 05:00:00 +0000
asID:                     398712
IP address blocks:        23.234.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cd:ef:ba:64:df:be:ac:a0:d0:dd:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Dec 31 12:00:00 2021 GMT
            Not After : Dec 31 05:00:00 2023 GMT
        Subject: CN=731a9f8f-792c-4030-bf98-fd161203a1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:65:cf:17:88:dd:41:26:05:eb:d8:3e:08:2b:
                    fa:10:56:fa:10:ce:3e:b1:66:e1:59:4c:43:86:51:
                    29:40:f6:85:5c:08:68:45:30:dc:ce:70:92:11:24:
                    9e:8a:fb:d9:4f:3f:a5:ae:15:07:9f:9e:8c:3b:dd:
                    98:87:92:aa:2c:17:d8:33:0d:64:2f:2c:f9:84:9d:
                    1b:a8:cc:2e:20:67:8d:91:20:56:23:a3:f5:9a:fa:
                    30:d5:d3:41:79:dd:e8:42:f6:f0:6b:6a:98:5b:fb:
                    1b:88:63:f4:ae:2d:b0:af:8a:8f:9b:65:c1:95:a5:
                    f9:d0:1e:85:81:8c:69:8b:6b:14:ea:e5:4b:82:25:
                    8e:61:c0:d9:56:c0:77:08:83:6f:e3:91:4a:bb:e8:
                    f3:f6:42:e1:c3:78:26:08:ab:cf:ee:07:9f:8a:7f:
                    2b:1f:ad:41:8e:83:f0:85:37:58:48:a9:a0:5d:28:
                    47:26:18:69:e1:ba:53:45:ea:50:cd:28:f1:f9:37:
                    53:a1:0b:b9:bf:57:a4:8d:f4:33:1d:2a:50:a2:3f:
                    30:0f:06:19:12:65:d7:f8:3c:1a:1b:87:03:44:38:
                    e7:ee:95:4c:51:c2:56:c9:4d:52:0d:fb:e1:48:ea:
                    03:9d:95:4d:55:ce:e6:25:47:e6:7e:88:ab:c8:44:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:30:57:EB:F8:6A:2F:BC:93:DC:C4:33:80:A3:2F:FE:09:8F:08:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/490850e9-6b99-31a3-a206-a6672225990b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b1:11:04:fb:4d:d1:a5:eb:6a:d3:0a:58:45:4f:af:6e:eb:
         e2:12:52:e2:b1:e4:a3:10:3e:df:a0:51:4e:8f:b0:85:a7:00:
         56:44:88:6f:d5:a6:b3:df:8b:ce:3a:49:05:bc:8c:2c:37:32:
         87:cb:a2:b5:8f:eb:07:ad:f7:07:ae:88:05:f5:17:1a:72:f9:
         2f:27:8b:95:d7:39:e1:96:96:17:47:6a:7a:35:11:3b:70:94:
         6d:47:ae:f2:60:7f:47:1f:de:db:13:6f:1b:2c:1e:8e:22:46:
         e9:78:67:61:80:64:53:be:c3:9c:4d:f3:de:97:29:76:d9:c5:
         f9:95:78:f3:20:3e:cf:3c:8e:c1:04:ef:6b:12:51:c4:60:79:
         5c:3b:31:99:eb:1b:eb:55:d7:a7:06:a5:5c:82:fb:14:49:ec:
         ab:2f:53:92:5a:68:9f:46:b9:1a:c2:3d:8b:48:c3:01:23:93:
         79:02:ad:b9:49:04:15:ca:97:d3:f1:9c:a6:6f:36:61:a8:4c:
         9a:bd:9f:2f:49:b7:4a:a6:41:23:3f:3d:23:a7:37:4a:53:95:
         b6:a6:ab:2e:2f:f5:0e:6b:8a:63:c2:21:e9:3b:56:65:8e:92:
         a4:9b:b5:81:64:47:2a:43:29:fd:cd:ba:06:cc:f9:d2:5f:0a:
         49:b2:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----