Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4a9d767e-a483-3572-8e63-279a40884cc2.roa
File:                     4a9d767e-a483-3572-8e63-279a40884cc2.roa (raw, json)
Hash identifier:          H4Vzw1WNsaWmK7zbcdI293IGhhtKHYKynjd0Fa2xXD8=
Subject key identifier:   79:14:22:C1:7C:1E:3E:BD:34:00:92:3C:F0:DD:F2:6D:62:2C:65:67
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC88FEB73EF13273E538D80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4a9d767e-a483-3572-8e63-279a40884cc2.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        74.85.64.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:8f:eb:73:ef:13:27:3e:53:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=d126fe63-1080-457f-bafe-81491291932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:57:e8:f4:24:ca:b7:c7:7a:8f:ca:1c:e8:
                    2d:84:e9:f4:c1:4e:3c:93:3c:dc:3b:ea:ab:0d:0e:
                    4d:92:01:ab:0c:0f:8c:7d:f7:8e:26:3d:05:c8:1c:
                    f2:83:50:41:b1:8d:82:8e:c5:dc:38:de:55:85:50:
                    c9:42:dc:b7:a0:38:c8:66:dd:69:19:06:a0:d3:64:
                    98:5f:3e:e3:d0:f2:7c:db:1c:e2:52:ca:93:a2:52:
                    a6:48:5b:4d:7d:28:8f:63:bb:e5:e8:68:00:62:fc:
                    08:1e:5d:a9:cd:c5:b5:e8:60:41:bb:25:97:b1:60:
                    b2:c6:36:62:a5:15:fe:22:0e:b2:71:40:93:e2:ee:
                    bb:f3:89:45:61:90:49:31:42:51:2e:61:8f:ef:16:
                    09:b1:c4:73:a5:cd:37:ee:2a:40:01:63:fd:96:50:
                    66:cb:18:fe:1f:49:0a:f2:80:67:33:19:51:70:1a:
                    b6:ed:ef:07:db:b5:eb:d5:ff:34:02:a4:79:bc:df:
                    5d:f9:f8:7d:9c:cb:ad:a9:6c:00:2e:e9:69:2c:fd:
                    3b:3e:7f:59:bc:87:02:d7:03:48:81:24:b4:eb:97:
                    5b:67:51:c6:a7:df:ba:eb:de:d9:39:67:d0:8c:ac:
                    7a:de:06:95:35:8a:c3:18:f3:fb:61:70:14:b3:44:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:14:22:C1:7C:1E:3E:BD:34:00:92:3C:F0:DD:F2:6D:62:2C:65:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4a9d767e-a483-3572-8e63-279a40884cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:14:b3:4c:5f:41:56:b9:fe:55:31:91:a9:cf:a5:66:68:52:
         f2:72:a8:c4:be:83:85:04:95:17:84:41:4c:f6:e3:63:80:ed:
         23:5a:8e:17:72:b5:01:2c:d3:23:bf:1c:63:9a:df:e7:a2:8e:
         0f:82:18:9c:24:a6:dd:14:b5:02:1a:1a:5c:47:49:e0:c9:08:
         91:60:78:e7:65:81:17:82:e4:8a:fe:8b:2f:ac:6b:c8:a9:46:
         06:85:ad:7f:20:19:44:38:75:0f:2b:28:22:98:36:07:23:e1:
         bc:66:bd:de:3d:63:c5:c5:2a:f2:ae:2b:ab:60:7b:8c:9c:db:
         d1:5a:0b:5d:cc:b5:40:e0:ac:fb:70:c3:5e:e9:1c:2b:a6:96:
         6f:1e:86:4b:77:da:67:f1:7a:13:e4:4d:e3:d5:30:08:60:50:
         f8:74:a9:db:9c:ba:82:04:ca:03:02:2b:72:fe:8d:28:09:18:
         be:30:ab:9f:10:83:ad:23:7e:a9:80:d8:63:31:ad:98:b9:56:
         75:9b:25:12:b5:a8:a6:21:9e:5d:84:f4:29:09:eb:54:2d:b1:
         8a:17:67:a9:12:1b:c6:cd:a9:04:61:2f:ff:bd:91:67:cd:08:
         3a:69:14:17:d2:d5:dd:cc:f4:b5:13:db:e1:fd:db:fa:d0:47:
         16:46:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----