Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f88c7f93-3cf7-35ca-a88b-da9cfc3df2f5.roa
File:                     f88c7f93-3cf7-35ca-a88b-da9cfc3df2f5.roa (raw, json)
Hash identifier:          Ft2gIRZuKg+zYVA57OUQGGBQgM3t/3E5tgOGTwvdNzE=
Subject key identifier:   F1:3D:63:F8:CF:61:0E:93:1A:0A:AF:5C:31:F1:D3:E3:7C:B0:F4:79
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC896430FA57E3D202FD600
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f88c7f93-3cf7-35ca-a88b-da9cfc3df2f5.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        104.152.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:96:43:0f:a5:7e:3d:20:2f:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=14f77300-d367-446d-a90a-b37f2289d828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:50:35:54:ee:6b:94:b0:6f:c8:7b:21:c6:6a:
                    c6:29:ba:88:35:54:ae:c9:6d:3a:91:e2:eb:d7:82:
                    9a:3a:f0:60:0c:e2:57:97:85:10:d5:72:1b:17:fd:
                    3e:69:2c:87:e8:54:c0:19:78:ed:66:95:a2:47:dd:
                    9b:98:0a:0c:aa:84:8b:e7:3c:99:b6:ed:0b:f7:a8:
                    11:1c:ef:26:26:df:19:86:2f:db:68:a3:88:34:24:
                    e3:b1:2e:f6:aa:31:88:48:e0:80:81:5b:72:fc:5b:
                    17:60:d2:d7:98:26:0e:51:e1:3e:29:03:c7:90:bf:
                    b6:30:70:39:23:d6:e5:f1:1a:68:f7:2a:9f:0c:bb:
                    f7:fe:eb:d4:44:07:20:74:b3:0a:55:2e:22:56:09:
                    ff:2a:e1:cd:7f:91:2a:e9:94:12:2e:ac:b2:61:d1:
                    ec:74:28:88:0c:08:7e:24:86:04:18:32:1a:ae:9d:
                    d4:30:c9:ec:2e:70:68:5e:d9:9e:c6:95:bc:c4:76:
                    31:a2:e0:29:ae:03:07:73:8b:bf:c8:16:b8:fa:28:
                    e1:66:47:7f:9d:2d:23:4a:30:22:8a:c2:37:2e:29:
                    a4:e0:a3:32:03:d5:b3:84:e5:7d:a8:cc:fa:c0:8b:
                    08:5f:e4:8b:f0:4d:61:2b:41:b7:af:4a:42:98:cc:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3D:63:F8:CF:61:0E:93:1A:0A:AF:5C:31:F1:D3:E3:7C:B0:F4:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f88c7f93-3cf7-35ca-a88b-da9cfc3df2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:99:bb:2c:14:46:6b:86:b0:22:c6:cf:bf:36:e8:a4:69:
         4b:09:79:30:5d:2e:8f:08:40:3e:2a:75:7c:52:c6:42:86:d5:
         27:79:f7:0c:2a:aa:b0:9a:f3:e3:4a:73:f9:43:ee:e2:20:1a:
         e7:17:c7:7e:de:92:9e:37:17:86:22:c5:a0:09:b8:3f:87:dc:
         23:17:2e:98:89:0b:a1:a6:df:e3:bd:1b:5e:e6:b8:9a:e2:ad:
         31:14:67:21:e8:63:b2:47:f2:0c:7d:3e:f6:98:31:b0:aa:3c:
         4a:07:6b:62:76:73:43:8f:13:73:dd:0f:f0:d6:bd:5d:9f:f0:
         38:aa:24:ba:c5:66:12:d6:c6:51:eb:a5:e7:0c:90:7c:ca:6c:
         14:21:31:36:23:4e:50:86:6a:45:3e:9c:46:a4:3f:33:e5:ab:
         63:67:8e:ee:93:e3:88:5f:e8:96:49:f2:12:67:26:21:ba:a5:
         c0:83:63:a1:9b:58:e8:e8:25:c2:4d:8c:6d:74:e9:f3:5a:11:
         fb:c4:31:46:34:bd:f3:ba:cf:63:72:ae:6e:ea:3f:e5:e7:f1:
         a5:35:dc:fe:a5:94:fa:cc:18:96:c2:69:26:2a:82:fc:8c:38:
         85:a5:9e:3f:56:42:ba:1b:48:d8:90:b2:d7:bd:d7:e8:db:85:
         a3:34:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----