Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b92a5fb5-e2fe-33f9-8d6c-155356f8d23b.roa
File:                     b92a5fb5-e2fe-33f9-8d6c-155356f8d23b.roa (raw, json)
Hash identifier:          aNX6Z29QmFIo1PZ09B6qaOyTUQ1LjwCXxCwH1dwcH+8=
Subject key identifier:   2D:46:29:BF:46:F3:9C:98:13:C9:14:AB:72:E3:56:9C:08:AE:4D:DA
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC8E30B140F755FCF15A140
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b92a5fb5-e2fe-33f9-8d6c-155356f8d23b.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        199.189.96.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:e3:0b:14:0f:75:5f:cf:15:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=743cc917-6648-4bf7-8ab7-97690a324a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:44:5a:49:cc:0a:df:dc:3c:c0:34:d5:f8:
                    81:09:b9:44:47:dc:67:68:47:72:47:11:b1:48:56:
                    35:2d:e0:af:5e:45:33:9c:81:7c:5b:bb:db:49:8e:
                    95:3b:17:e5:9a:b2:6d:e7:51:e5:70:e4:09:89:50:
                    a2:ce:62:48:34:cd:66:b6:f6:35:b8:f0:4b:40:41:
                    10:79:04:fe:c3:a1:15:a0:35:a4:a2:21:35:eb:79:
                    56:2c:d3:03:57:58:d4:af:88:7b:db:65:4e:42:38:
                    fa:4a:77:67:94:94:19:c0:5c:61:63:b5:6b:13:4f:
                    cc:62:ef:df:1d:7f:5f:58:66:98:e4:59:2f:70:0d:
                    eb:a5:45:bf:b1:f4:73:1c:be:8c:72:42:49:d6:c7:
                    4a:44:f2:45:91:fb:c2:04:7b:7e:09:bf:a3:22:a7:
                    b9:e7:70:c9:b4:a9:1e:33:86:0b:f3:c6:95:f5:0b:
                    ab:50:8c:06:09:e5:f4:4b:bb:d5:8c:21:09:6e:fc:
                    bd:9e:68:3f:e7:5e:3c:c9:79:68:f9:b4:66:68:d9:
                    d0:c6:5b:a7:83:4e:c3:4a:97:c9:cc:6f:c8:31:b8:
                    d8:f1:01:3d:65:bc:b5:55:b8:bb:7e:e7:14:39:d1:
                    5d:3b:6d:a9:3b:08:0c:25:48:e4:6a:c2:5e:04:2e:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:29:BF:46:F3:9C:98:13:C9:14:AB:72:E3:56:9C:08:AE:4D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b92a5fb5-e2fe-33f9-8d6c-155356f8d23b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:f4:bd:e0:59:63:a4:e2:fa:82:5c:ad:e3:d4:cb:5c:98:
         14:0a:e9:19:ba:3a:82:b8:d2:4d:8f:fe:12:eb:04:04:99:c1:
         13:30:54:1b:d9:ed:1b:a9:90:65:d0:ac:60:36:02:3a:fc:37:
         0f:f1:e3:07:03:a0:d3:1f:3a:7d:0b:ef:52:42:3c:82:8b:05:
         ef:33:2d:14:65:13:7a:15:95:8d:15:ed:57:cc:bc:bf:3a:0f:
         13:c7:7b:02:df:2d:d6:33:97:3a:03:12:44:8a:46:0d:8b:4f:
         98:82:b2:97:ac:4b:ce:3c:09:a5:9b:36:ac:7d:49:ac:76:2b:
         5f:3f:ab:d0:2a:a0:07:b7:06:16:ba:15:c3:58:8a:9d:75:f1:
         ed:a3:d6:f8:bd:c3:b8:66:2e:75:b7:ba:e3:93:1a:02:5b:d8:
         a4:89:71:c2:6d:67:1e:9a:04:c4:fa:68:ee:1f:60:fa:46:87:
         84:d6:77:eb:b3:31:eb:0c:e7:8a:5f:8b:ad:a9:5d:0c:a4:4d:
         26:48:e1:9b:e7:c9:0b:16:b0:91:60:60:8b:b8:f3:f4:6c:70:
         76:c2:60:cc:41:21:c8:9a:c7:99:c9:53:0b:ac:2f:66:bb:cb:
         65:45:16:ea:9d:94:7d:35:f0:d3:48:a2:03:cc:39:c3:71:29:
         33:15:53:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----