Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/484657e0-a0ef-3160-bf9b-ae314c7aa4d5.roa
File:                     484657e0-a0ef-3160-bf9b-ae314c7aa4d5.roa (raw, json)
Hash identifier:          ISJxV8LWyTM6FCLcdti0vjM5ixaZG5E5kdF2dwyLXB8=
Subject key identifier:   8E:9D:1A:6F:AD:F5:5C:EF:68:C3:6A:26:C0:DC:7B:10:96:B6:E0:8B
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328583D89734FB76E6028D1B29E5280
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/484657e0-a0ef-3160-bf9b-ae314c7aa4d5.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Tue 31 Dec 2024 05:00:00 +0000
asID:                     22364
IP address blocks:        66.119.64.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:89:73:4f:b7:6e:60:28:d1:b2:9e:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Dec 31 05:00:00 2024 GMT
        Subject: CN=c4ac0ba9-d24b-432f-abf1-53c909674eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:25:ea:b5:de:d2:bf:bc:10:41:e4:6d:e1:
                    1b:58:10:2f:51:d7:88:86:2e:ef:0b:c2:a8:1e:a4:
                    de:04:a8:b3:82:63:d1:32:7f:9b:f3:53:7a:fa:37:
                    25:71:6a:0b:57:35:d0:a8:23:a0:91:c7:bb:cb:01:
                    9d:85:6a:08:69:79:36:56:c3:01:50:93:a6:59:2a:
                    e6:a9:d3:9e:08:94:87:3d:d1:75:8f:d6:e2:36:0e:
                    6e:cf:26:aa:fd:a4:1f:13:c0:d0:25:ba:14:72:26:
                    6d:32:46:8e:c6:d3:90:d8:3a:d0:2f:7b:f3:d9:78:
                    e2:1c:93:f6:43:32:bb:25:47:1e:1d:f6:11:2b:54:
                    8d:f6:2f:47:1a:c9:b5:7f:76:82:e8:39:4f:d5:d4:
                    fd:dd:97:86:de:e3:55:7e:53:78:dd:92:fd:55:71:
                    fe:ca:e5:7a:b4:d0:e4:c9:26:80:bd:d7:3a:e3:b6:
                    fa:30:6c:d3:aa:92:77:c2:aa:e5:0f:6a:02:a8:e2:
                    06:6a:19:35:37:4c:8c:e2:c4:f5:bf:8c:c7:77:b2:
                    42:0f:db:da:45:a3:a1:62:e6:6d:56:23:e5:4e:29:
                    bf:ba:3f:7f:6a:6b:b3:57:ad:a6:04:9b:c1:ab:47:
                    cb:36:0d:72:77:88:5a:08:2a:6e:ce:a8:5c:95:63:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9D:1A:6F:AD:F5:5C:EF:68:C3:6A:26:C0:DC:7B:10:96:B6:E0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/484657e0-a0ef-3160-bf9b-ae314c7aa4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7c:92:08:39:ec:11:08:03:4b:fc:b3:02:48:ec:3f:68:f9:
         c6:a0:d5:47:52:f2:44:0b:1b:21:08:43:09:f5:6d:6e:1f:a0:
         f9:6d:d5:8f:3b:76:0f:b4:91:17:3a:8d:28:82:5f:9a:a6:76:
         3d:63:af:a9:4f:e5:8c:74:ef:37:a5:7d:e0:fc:ee:03:22:f6:
         d5:f9:74:4a:39:5f:0f:f8:2f:9d:c4:ec:83:69:1e:34:1b:bf:
         11:82:ef:0b:e4:5f:f0:38:b3:50:ca:fb:2a:c2:a8:6b:ae:6b:
         3d:fa:d5:e6:25:c1:59:31:0a:d2:2d:45:88:05:34:e8:5d:b9:
         6e:f9:e3:f4:c9:5c:d6:30:6f:ec:cf:86:8c:87:3a:dc:ba:e2:
         d1:31:a4:68:03:69:1b:06:34:17:ba:5e:a1:64:b1:f5:4c:44:
         5e:b8:96:6e:3b:7c:84:08:b3:5e:e6:b3:57:ee:86:19:08:2b:
         a5:71:4b:d8:ef:66:1c:72:10:80:43:19:dc:22:ae:03:75:b6:
         73:aa:06:20:7a:9e:55:44:02:1c:ad:4a:54:bb:4c:5f:9b:58:
         5b:9f:ed:df:74:f5:37:2e:82:fd:29:37:26:9f:e4:c0:79:4c:
         01:e2:a3:c7:19:0a:93:e3:4f:bf:3f:5e:65:57:fc:08:86:84:
         12:36:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----