Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/283340b2-f5b5-3070-875f-be5cc3bb9497.roa
File:                     283340b2-f5b5-3070-875f-be5cc3bb9497.roa (raw, json)
Hash identifier:          nruy7BBFWC1LNN0etyHkcdsURvZ9bM3Y4KHnKrCvD9U=
Subject key identifier:   A6:56:CB:E8:A6:0B:61:E8:FC:45:27:69:F4:B6:B5:AD:46:4A:50:08
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328583D028096DF18A7E48A1875CA40
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/283340b2-f5b5-3070-875f-be5cc3bb9497.roa
Signing time:             Thu 18 Mar 2021 04:00:00 +0000
ROA not before:           Thu 18 Mar 2021 04:00:00 +0000
ROA not after:            Sun 26 May 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        173.0.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:02:80:96:df:18:a7:e4:8a:18:75:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Mar 18 04:00:00 2021 GMT
            Not After : May 26 04:00:00 2024 GMT
        Subject: CN=521f0cf3-f480-43ce-a570-db288d504604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8f:67:55:83:b5:b0:ee:0c:0a:78:fe:70:67:
                    65:bd:33:82:9d:a9:4d:70:da:72:03:bc:33:8c:47:
                    a0:b5:e4:43:d6:1f:0b:15:31:66:64:0a:20:d4:29:
                    2c:83:d2:92:d6:2f:9d:79:29:a9:ce:d8:3b:7a:79:
                    3a:09:75:c8:58:72:5e:c6:32:28:d9:2e:e3:8d:c9:
                    15:4f:0d:3f:b9:72:12:88:bd:c9:61:83:ec:2d:1e:
                    4c:34:d1:b3:08:bc:41:96:20:63:c4:e4:04:6e:40:
                    1e:41:b0:a9:80:af:85:e7:36:87:e6:e7:8f:d2:2c:
                    d2:d9:49:49:15:47:68:69:23:b1:b3:aa:29:50:e9:
                    38:2d:1c:4f:09:cd:bc:2b:54:de:60:aa:44:48:80:
                    4c:e3:68:0b:77:dd:3a:27:de:ce:6c:0e:c1:f5:ad:
                    3a:61:e6:1f:c4:83:33:05:d7:8e:98:dc:e2:4a:fd:
                    ee:e1:79:1a:18:5d:4d:bd:b6:da:58:17:e0:77:b0:
                    b8:b7:fd:22:01:e9:14:c9:a0:5d:1f:81:37:6c:9b:
                    8b:49:dc:89:5d:c2:c0:6d:c8:75:73:3a:7f:b8:5f:
                    8c:2b:20:8a:56:82:19:a9:cd:75:c1:28:b0:a9:1e:
                    8e:4b:48:2d:ed:e0:ae:7f:a1:14:16:b1:75:da:26:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:CB:E8:A6:0B:61:E8:FC:45:27:69:F4:B6:B5:AD:46:4A:50:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/283340b2-f5b5-3070-875f-be5cc3bb9497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:fc:e4:0f:aa:c5:71:3d:5b:3f:0c:1b:6e:4d:e7:14:da:
         91:b8:16:39:7c:e2:a7:c6:59:48:d4:c6:5d:d1:e8:38:ca:4f:
         90:43:0c:54:f2:c0:d9:0c:8f:44:d7:67:88:66:e8:9d:18:d5:
         f7:8f:ed:2c:b8:e6:66:0d:05:f0:61:8b:07:23:c7:0d:2c:fe:
         f8:9e:9d:46:d7:a8:24:c6:0e:8b:f7:97:df:77:94:8a:2c:7f:
         ed:61:d5:68:ab:65:2c:1a:73:7c:01:7b:28:c9:03:ab:ca:1e:
         e1:e4:7e:e2:8c:fc:ab:10:92:0b:ea:dc:a2:9d:bc:ee:af:62:
         e9:02:3e:1e:f0:b0:a8:c9:8d:af:18:b5:a7:9d:37:16:ed:bd:
         fe:c1:ce:9b:e6:8f:dd:19:d0:7d:5b:53:7e:01:2c:c3:fa:59:
         ac:26:e1:86:46:ab:d2:c9:2e:e8:1c:ea:62:89:e1:45:57:37:
         50:02:57:15:61:d7:36:f3:b8:35:56:d6:3a:1d:e1:fa:88:23:
         30:d1:4d:62:9d:5a:d2:04:e0:87:80:5f:e5:39:63:df:39:95:
         29:1f:8c:68:21:99:65:d6:fb:03:43:9e:48:01:74:0d:4e:1d:
         61:78:89:af:7d:48:da:2d:ef:9e:c3:8a:51:d7:01:22:6b:1c:
         a5:e7:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----