Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd81859f-8ae1-3a40-9e53-f2d6a8309c2e.roa
File:                     dd81859f-8ae1-3a40-9e53-f2d6a8309c2e.roa (raw, json)
Hash identifier:          UI4SV2sxOHNuy6dhm9DIWyUzg6Fp88pJbHXqBE0J0rc=
Subject key identifier:   7C:C7:A5:70:FF:B2:53:7A:84:73:8D:5D:BF:E6:47:7D:C4:89:8D:11
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583F419F9A53ED8E75587CC76540
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd81859f-8ae1-3a40-9e53-f2d6a8309c2e.roa
Signing time:             Thu 07 Jan 2021 14:36:59 +0000
ROA not before:           Thu 07 Jan 2021 14:36:59 +0000
ROA not after:            Wed 18 Dec 2024 05:00:00 +0000
asID:                     209737
IP address blocks:        209.142.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:41:9f:9a:53:ed:8e:75:58:7c:c7:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 14:36:59 2021 GMT
            Not After : Dec 18 05:00:00 2024 GMT
        Subject: CN=df67809d-5c79-4e77-9858-0274866a2ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a3:87:3a:a6:35:9f:65:b2:fc:56:9d:94:8c:
                    6d:36:64:02:5a:53:cd:62:1c:d6:38:eb:f7:77:b3:
                    e0:6d:d9:48:19:d8:d8:df:ac:6a:72:3c:85:42:18:
                    80:b3:d5:44:0b:ef:6c:e8:0a:24:38:55:23:52:35:
                    fe:37:04:87:11:fa:6f:18:51:5a:fe:ad:ac:be:bf:
                    80:d8:6e:ee:c4:c9:68:c3:55:b3:1f:8b:8c:c0:19:
                    8a:7c:73:09:ce:ec:76:31:39:a8:9f:64:40:3d:d5:
                    18:65:c3:8d:25:c2:ec:95:71:7b:20:9f:e9:9c:4f:
                    82:7e:b7:f6:a1:a9:35:8f:63:92:d9:24:ac:b1:5c:
                    e5:b7:60:9c:86:1a:95:e5:7e:87:bf:e3:9c:2e:cd:
                    b9:d5:66:49:b8:c7:cc:98:e7:20:a2:a4:09:03:d8:
                    c8:d0:97:6b:8f:b2:0f:e6:17:c4:bf:3a:b7:b7:6f:
                    ee:cf:8a:f6:3b:85:9b:f0:8d:e0:99:2e:bb:37:21:
                    c4:85:6d:4e:9d:6a:d7:7b:36:85:1a:b7:8e:fc:2e:
                    03:07:22:c9:51:99:d8:30:91:8b:16:1a:57:91:8c:
                    07:cd:71:58:f6:72:4b:66:f3:86:8c:b0:bf:2f:4d:
                    f9:12:0e:14:e3:c3:1b:d1:e6:04:50:22:6d:cb:62:
                    89:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:A5:70:FF:B2:53:7A:84:73:8D:5D:BF:E6:47:7D:C4:89:8D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd81859f-8ae1-3a40-9e53-f2d6a8309c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1f:1d:db:3f:5c:90:e8:1c:6a:e1:d8:d4:73:0b:bb:d0:3b:
         81:53:9f:ac:33:b4:83:ed:80:9e:3d:1e:23:af:f0:e5:61:46:
         b5:47:7f:63:f6:2b:00:19:a4:ed:d7:b6:dc:11:6a:38:00:9e:
         07:68:d9:4f:1e:34:9f:bb:63:f1:f7:56:d3:b2:89:2c:a5:97:
         f4:29:75:b8:57:dc:53:0b:fd:69:dd:f3:0a:e0:40:f3:11:0f:
         7e:9a:2f:24:1a:74:38:5a:c8:72:26:66:e5:24:77:be:7f:54:
         ee:21:90:03:b2:54:42:9c:8c:34:d9:70:2f:46:98:5c:6c:7e:
         c6:59:14:96:09:95:c4:22:08:6b:0a:89:0c:33:e2:14:ca:c3:
         eb:d2:66:1d:ae:29:26:9d:9a:32:2d:8c:db:83:54:1f:8c:50:
         ab:c3:9b:d5:99:d1:dc:88:14:67:e4:2e:06:31:e8:c4:21:c8:
         e3:d5:ee:6c:82:23:5c:f5:26:93:d5:8b:25:13:11:bc:9f:e2:
         28:34:ac:5e:55:11:62:fa:70:67:c9:08:65:10:88:b1:3f:f4:
         b9:46:ef:37:93:2c:bc:b4:aa:b8:f9:48:f9:e1:c4:ca:5c:d6:
         0f:95:c3:fd:d0:e0:27:f4:48:a1:cf:16:cd:1d:b4:e3:e6:52:
         a8:b3:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----