Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d3247ac-52b3-3eac-acc8-0ef6299d27e9.roa
File:                     2d3247ac-52b3-3eac-acc8-0ef6299d27e9.roa (raw, json)
Hash identifier:          oYIukf59+WxfUXApWX0/nqO0vX/b203pAT2zg/FfYUM=
Subject key identifier:   A9:1A:B2:1E:6C:55:AA:F0:2F:73:ED:44:F9:15:E0:BA:F9:4D:DE:2E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583E058C06787FE1B4B406B3AD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d3247ac-52b3-3eac-acc8-0ef6299d27e9.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     47065
IP address blocks:        208.87.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:05:8c:06:78:7f:e1:b4:b4:06:b3:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=e930976f-be4a-4342-b313-77589147ec20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:36:85:7f:cc:62:8e:78:ab:33:b5:0e:5a:
                    2f:81:bc:4a:7d:94:e9:ec:02:12:8c:c4:11:b4:b9:
                    73:8f:b6:90:1c:d7:52:ad:b4:40:28:65:e8:06:64:
                    2d:47:d8:ac:71:a4:83:50:1a:c3:93:55:74:8b:be:
                    e6:8a:09:e6:26:c8:d7:98:78:67:2a:21:2b:dd:be:
                    36:49:1a:75:dc:b3:fe:fa:81:3f:45:11:77:67:4f:
                    e0:74:ff:08:26:39:6b:62:ff:8a:9f:85:a9:ca:c7:
                    f9:6e:6a:8e:d0:5b:ca:bf:4d:7d:9f:ac:20:7f:f6:
                    40:e0:94:75:ae:96:de:fc:8a:b1:e7:b8:c9:00:10:
                    a6:1a:fc:46:8d:fd:0d:78:54:61:34:1f:97:8c:a4:
                    ba:bc:af:bf:8e:5b:80:46:51:b8:2a:f6:cd:89:07:
                    5a:73:17:ce:57:51:c3:e8:d9:2a:d3:a7:5c:c6:84:
                    e1:7f:05:c5:a6:5a:35:2b:3b:34:35:c4:7d:23:fa:
                    17:ed:d3:56:38:5c:70:8b:49:8f:fe:35:4e:e3:a9:
                    16:94:ac:53:59:94:59:b7:87:ea:14:a5:8c:5a:8a:
                    70:f5:10:3a:d9:9d:df:97:e1:0e:af:63:0e:a8:68:
                    01:24:27:25:01:ae:e3:c8:15:70:96:52:f8:1a:22:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1A:B2:1E:6C:55:AA:F0:2F:73:ED:44:F9:15:E0:BA:F9:4D:DE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d3247ac-52b3-3eac-acc8-0ef6299d27e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:74:1e:03:f0:dd:31:d8:14:a8:b7:c0:bc:c5:d5:78:16:24:
         94:77:e8:fb:10:96:16:a9:90:37:db:68:4e:ef:b0:53:7d:bc:
         13:ef:60:7b:02:fc:99:d5:dc:32:fa:9f:1e:d2:40:9c:96:42:
         b3:a9:8f:70:c4:14:23:34:04:95:33:8a:85:64:b5:46:96:a7:
         62:5d:b5:80:89:9a:70:6f:45:c4:76:d4:75:93:42:72:93:a9:
         d8:ee:16:8f:99:ff:fa:eb:3a:70:d5:67:53:db:41:35:ec:23:
         9b:69:ed:03:76:1d:36:36:9e:2f:35:d2:d2:3d:59:2b:3e:15:
         81:57:ad:52:45:dd:1c:6d:14:4d:f2:74:0b:34:1d:8b:04:36:
         6d:8a:78:41:37:77:b7:80:b4:4e:6f:37:15:23:d2:0a:74:18:
         eb:d7:a7:b3:34:fb:95:d3:55:d6:8f:c6:b0:4b:be:50:12:86:
         44:75:85:f5:bf:9f:8f:48:15:08:82:35:0a:8b:11:9f:98:49:
         d8:6b:bf:5e:73:90:b1:d2:7a:d2:72:f4:b4:82:32:4c:8d:58:
         65:68:02:7e:7e:98:01:87:a0:98:29:da:f1:8d:b2:85:76:92:
         46:31:0c:5f:20:50:1a:9f:4d:ae:80:f1:fd:91:26:24:f0:6f:
         8f:f0:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----