Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/281abb9f-f4a7-3774-9534-f952483efed1.roa
File:                     281abb9f-f4a7-3774-9534-f952483efed1.roa (raw, json)
Hash identifier:          k6PcSarl7jNqmlDTO8zkFExTBrr81lo34WDJzSCZTt0=
Subject key identifier:   42:0F:80:78:2F:40:DF:2D:8C:99:F2:B7:25:08:9A:ED:88:A4:CA:D1
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC8E8F274F4C803A68AAA00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/281abb9f-f4a7-3774-9534-f952483efed1.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        216.129.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:e8:f2:74:f4:c8:03:a6:8a:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=98272f72-d601-47d6-9542-948b3b322125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:7a:9a:cb:27:45:40:14:32:bb:c5:02:f1:
                    e3:6c:df:a3:27:81:9a:55:7f:ec:51:e2:e2:0b:5d:
                    fc:39:b4:10:3b:7f:3a:58:b5:9a:f3:e3:e3:81:82:
                    62:0a:42:a8:10:bf:43:ca:c9:d3:60:a7:de:dc:54:
                    00:84:65:e4:ca:11:42:cc:7f:c9:9e:2f:51:18:66:
                    c5:81:38:f1:4d:2a:43:7a:b4:a6:3f:fa:d5:a7:88:
                    87:10:4a:f6:63:6b:ed:13:46:4a:f1:20:f6:2a:4e:
                    87:45:6c:29:62:aa:08:65:fe:59:fe:8d:ab:37:be:
                    49:85:02:6e:17:72:78:0e:79:14:48:ed:73:19:43:
                    41:10:67:e7:56:17:dc:87:47:f6:e2:ef:6f:81:af:
                    cc:3d:39:55:58:d1:69:1a:72:10:a9:66:46:41:76:
                    16:bd:06:83:bd:42:c4:2f:ea:e7:02:16:3e:f0:dd:
                    1b:7c:90:8c:d7:27:a5:7b:75:5a:f7:68:47:1e:12:
                    d2:b9:f4:98:1c:45:a3:10:dd:cd:a1:52:57:5e:b0:
                    c5:2c:c1:a2:32:79:33:23:4a:e8:ef:0d:59:5e:0b:
                    b3:d6:4f:9e:ab:10:1a:25:4f:ce:a8:3a:7d:66:01:
                    f9:b9:a6:e6:f1:59:95:d4:b8:04:31:7c:ac:8e:7d:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0F:80:78:2F:40:DF:2D:8C:99:F2:B7:25:08:9A:ED:88:A4:CA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/281abb9f-f4a7-3774-9534-f952483efed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:43:e5:2e:b2:0c:bd:b9:e3:43:43:58:55:7f:5f:63:bb:
         84:00:5d:11:8c:e2:39:12:5b:e2:79:fb:33:12:5d:63:51:8a:
         95:db:32:c2:01:d7:37:33:4c:0e:c9:de:3f:ef:d0:5e:16:db:
         8a:8b:9a:d3:90:94:3b:50:97:f6:3b:4f:e7:1f:61:50:f4:ec:
         cf:c5:19:48:d6:fa:28:05:83:86:87:ea:14:c9:a7:ae:20:d5:
         50:c3:35:99:c5:26:8f:55:9a:35:5b:a1:1a:ad:11:e2:b6:c2:
         de:80:07:e7:69:54:fe:2a:ce:0f:21:91:a2:dd:03:66:86:6a:
         10:e2:b4:00:ec:a9:de:74:98:d0:99:21:03:67:61:4f:6b:78:
         6b:88:c1:0d:1f:88:a6:b2:7a:17:d3:9f:f8:ef:e2:51:bb:f4:
         57:47:8c:63:f0:19:ea:47:e0:5e:42:e0:2c:a6:9a:04:4a:36:
         d6:9f:75:41:26:f9:d3:fd:4e:6a:11:3f:27:fb:ff:07:ad:4e:
         a8:8a:29:c9:20:a6:88:6a:29:6c:bc:d1:ba:83:19:15:16:31:
         fb:19:2d:a9:f2:a7:76:a1:b9:a7:aa:62:b6:e2:a0:02:73:71:
         24:4d:f7:ae:4f:c7:5a:de:8e:47:68:53:98:ab:b9:7c:37:69:
         2f:35:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----