Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/08c315db-a940-3bac-93ab-3c0b59e0d563.roa
File:                     08c315db-a940-3bac-93ab-3c0b59e0d563.roa (raw, json)
Hash identifier:          emmZCCelRzWxukBzSyaNpdMUFxDiSjMI/QDmFm1YrcA=
Subject key identifier:   A2:AF:CA:E7:04:13:29:DD:0E:77:10:9E:F3:7D:A9:84:78:1D:E1:C9
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328583B37DC5B0F9CCC31553B59A380
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/08c315db-a940-3bac-93ab-3c0b59e0d563.roa
Signing time:             Thu 20 May 2021 04:00:00 +0000
ROA not before:           Thu 20 May 2021 04:00:00 +0000
ROA not after:            Thu 14 Dec 2023 05:00:00 +0000
asID:                     0
IP address blocks:        131.153.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:37:dc:5b:0f:9c:cc:31:55:3b:59:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 20 04:00:00 2021 GMT
            Not After : Dec 14 05:00:00 2023 GMT
        Subject: CN=66e9942f-3d88-47ee-b52f-1ac59028b76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6b:e0:73:18:48:85:a0:23:c2:4b:81:2b:2f:
                    d4:cb:83:d3:62:f2:e6:35:5e:e2:56:a6:86:0e:f7:
                    e0:dc:21:6c:e5:ad:39:6b:48:93:8f:63:d0:69:61:
                    0f:92:d4:76:8d:df:64:54:aa:57:97:f2:27:0a:8e:
                    d4:c0:9a:92:99:08:c6:4d:a4:5c:b0:f4:d5:ff:42:
                    25:96:87:fc:70:b4:87:d2:2c:47:c1:d1:90:2f:07:
                    ba:be:75:6b:84:d4:84:49:4d:92:4e:86:6a:3b:e5:
                    d5:d1:9b:66:eb:a6:c3:28:6f:80:48:49:e7:a4:bc:
                    2b:a7:45:7f:9f:bd:3d:6f:58:3a:96:0e:2a:b5:3a:
                    44:7f:f5:0e:ea:b9:5d:b8:d9:9c:2b:e4:12:b7:0d:
                    ed:47:52:cd:44:b7:23:ec:ff:c6:95:74:92:05:ad:
                    cb:fb:07:98:92:2f:0c:69:ff:e6:63:0c:15:22:c2:
                    ad:e4:1e:49:0d:02:e6:10:3a:60:b8:02:b4:79:bf:
                    1d:13:93:5e:cd:5c:67:a0:8e:db:30:09:a3:e0:18:
                    fb:b9:cb:e2:a0:c7:5f:81:b1:6e:b7:f1:58:e2:e1:
                    ab:b4:67:71:4f:95:25:32:5b:65:48:51:6d:cc:cf:
                    dc:ad:7e:24:ba:f1:f1:f1:34:1e:ef:a6:1b:fd:46:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AF:CA:E7:04:13:29:DD:0E:77:10:9E:F3:7D:A9:84:78:1D:E1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/08c315db-a940-3bac-93ab-3c0b59e0d563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:5d:5b:fb:19:cd:a3:5d:91:d5:46:80:a7:29:a5:ac:0d:
         dc:6b:f6:90:fd:47:82:46:da:b0:63:bd:21:63:08:ec:16:ce:
         1e:93:16:76:70:27:95:1a:70:97:53:3f:37:ab:e0:d2:bb:71:
         87:3e:c2:ac:b3:cb:b8:fb:10:52:9e:a4:23:83:96:c1:29:bf:
         1e:74:f0:a4:83:7d:42:17:b3:42:97:a2:16:55:99:43:77:f6:
         6f:38:7b:6e:af:cd:6f:f5:e5:85:38:40:85:1d:69:31:a1:a0:
         5a:d4:eb:e6:e2:a4:63:53:8d:6d:be:a8:4e:90:7c:b9:3f:b0:
         68:2a:6a:fd:75:97:9f:c5:63:ec:ae:1a:4b:3c:b6:c8:35:33:
         09:9c:19:ea:da:07:47:e7:52:a0:ea:47:7d:e7:45:d9:fe:f5:
         ec:4c:c6:64:19:70:ff:72:91:7a:58:4f:9d:bc:32:06:67:93:
         33:10:c7:cc:4b:2e:58:27:a5:50:cb:aa:d3:a5:c1:a5:c0:a6:
         61:2a:ba:63:41:68:a3:d8:99:8e:9f:3c:96:35:f5:6a:d7:8b:
         66:40:0f:85:79:2b:9b:ac:b3:a3:75:c9:e1:bc:a0:31:6f:85:
         8a:cd:b9:cc:d7:ad:d0:89:03:22:5e:5e:7d:6a:88:b8:6a:d8:
         f8:6f:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----