Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/94c52dcb-9657-366b-a355-17898b52c235.roa
File:                     94c52dcb-9657-366b-a355-17898b52c235.roa (raw, json)
Hash identifier:          EWckkB1lg6oljUZtfSfLr74+lkDmGaZjnkexDwglkCY=
Subject key identifier:   51:41:88:03:04:44:1C:25:8E:A3:5A:A9:71:D3:5C:CE:A9:6D:33:02
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328583D14C679CE87248EC0789EF440
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/94c52dcb-9657-366b-a355-17898b52c235.roa
Signing time:             Fri 06 Aug 2021 04:00:00 +0000
ROA not before:           Fri 06 Aug 2021 04:00:00 +0000
ROA not after:            Sun 02 Jun 2024 04:00:00 +0000
asID:                     395111
IP address blocks:        142.214.160.0/20 maxlen: 20
                          142.214.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:14:c6:79:ce:87:24:8e:c0:78:9e:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Aug  6 04:00:00 2021 GMT
            Not After : Jun  2 04:00:00 2024 GMT
        Subject: CN=7478f8db-f258-4a3d-a79f-eccfa5a26fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:9e:a2:2d:ec:ea:6a:5b:1a:bc:ff:77:df:
                    bb:b0:23:71:05:57:67:07:2d:c6:53:1c:a0:d2:da:
                    3e:a0:c3:ad:a6:e6:88:6d:56:a0:44:79:3c:1f:ce:
                    2d:e4:7c:b7:59:61:c2:59:18:27:44:60:68:c1:b7:
                    b7:10:a1:8a:08:f9:a2:e3:f4:8a:18:b2:92:ba:8c:
                    c2:a5:61:e0:6d:e7:07:92:f2:04:42:12:ca:cc:f7:
                    a1:8b:37:41:11:a0:42:f5:4d:91:84:b0:62:df:af:
                    28:88:a8:2c:c0:12:85:e1:7b:6f:0b:01:db:04:64:
                    6b:5d:ab:fb:57:1c:8d:81:7f:44:00:28:94:f7:49:
                    9f:e7:6e:09:22:5a:3c:ee:3d:f2:5e:a8:13:d1:85:
                    6b:25:26:28:2f:f0:95:e4:29:ab:b6:02:02:88:19:
                    e9:1b:51:03:e3:46:e6:11:e9:31:a1:ee:97:93:31:
                    b5:08:64:75:41:23:34:8b:ff:ac:38:5c:82:0a:76:
                    7b:ae:b9:8b:66:da:9d:6e:24:55:a1:d6:96:85:d6:
                    58:8a:d2:49:9b:82:f4:d3:37:c1:ff:61:55:66:27:
                    fb:6e:d1:2a:11:85:2d:47:09:6d:52:fb:b0:00:c5:
                    5e:18:c0:d5:3e:77:1c:07:f7:23:0e:1f:76:ec:38:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:88:03:04:44:1C:25:8E:A3:5A:A9:71:D3:5C:CE:A9:6D:33:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/94c52dcb-9657-366b-a355-17898b52c235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:35:5d:3c:5d:de:b0:c9:53:99:d8:b7:7c:69:4e:85:20:
         d5:0e:fd:f8:00:a9:ff:33:db:a7:0a:70:03:2d:33:57:b1:77:
         d6:d2:dc:b9:4d:14:53:d4:63:d1:5f:16:13:2e:66:93:52:ac:
         93:37:3f:82:43:65:3e:ff:b5:12:3e:cd:fa:69:88:61:16:7a:
         0a:c0:57:03:dd:ea:af:53:02:7a:f4:84:ad:f7:25:2a:7f:e8:
         b1:2b:95:74:ea:23:c4:dd:81:ef:e2:4e:f2:ea:50:73:e2:c4:
         dd:d4:84:d1:32:74:c9:88:b0:be:b2:05:52:80:37:ef:e7:43:
         26:99:d5:87:64:25:7e:8a:4f:33:8f:a0:3c:c1:88:20:f5:b5:
         d0:b0:b3:c7:bd:53:65:81:fc:23:4b:f7:d2:1f:80:11:50:b8:
         ce:f2:ef:2a:fb:20:b1:9c:2c:0e:da:d1:06:80:10:5d:e4:6a:
         2e:99:19:92:f5:5b:08:91:d7:29:df:cc:ae:9b:3a:c2:7a:69:
         e8:60:62:12:9d:65:e4:38:a2:11:da:ea:60:b4:02:32:3d:99:
         b1:7f:0b:03:3e:33:91:d6:7d:78:0b:30:46:dd:9f:02:75:7d:
         97:ee:53:a9:9f:08:a6:29:14:6b:8d:0a:40:c3:b8:72:e3:10:
         5a:d7:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----