Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/578dff1f-0135-3c2b-a894-ba1e5ecf327c.roa
File:                     578dff1f-0135-3c2b-a894-ba1e5ecf327c.roa (raw, json)
Hash identifier:          hPm5AD7MDi+fjLfgnDxO7+8vYRcvCG9zyUWXpVZfxk4=
Subject key identifier:   33:36:26:70:BE:94:7C:3C:3C:51:62:17:99:5A:18:55:78:2F:7D:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583E03837A7D42269E8EA2AD5080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/578dff1f-0135-3c2b-a894-ba1e5ecf327c.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        173.50.208.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:03:83:7a:7d:42:26:9e:8e:a2:ad:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=22b32a7f-c887-420c-b915-9231d8471178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:78:9f:f4:c4:80:54:77:27:5d:fa:c6:c2:
                    7a:0b:52:ab:b4:ee:14:a1:64:d8:3d:28:5b:2b:dc:
                    fb:e4:fe:d0:59:99:50:44:0d:ac:f5:0f:ab:93:3b:
                    65:a9:1c:fc:2e:da:8c:9b:e3:40:dc:86:3e:8d:35:
                    24:1b:4b:b0:42:03:4e:ba:6b:77:6f:bc:3f:7e:c3:
                    02:db:94:51:e0:f3:01:19:dc:96:93:c7:6f:a4:0a:
                    fc:e9:32:d1:86:df:a8:67:e3:d6:70:aa:d7:3f:98:
                    91:d8:ec:ca:08:33:77:fc:ba:6f:77:40:c4:e4:f8:
                    ea:0f:41:16:a4:1d:4f:b4:88:f5:61:2c:e8:1a:16:
                    19:df:cd:e8:1d:4f:ec:f1:50:f1:6a:e4:cb:10:4d:
                    21:30:ba:22:40:f3:23:26:d2:5a:31:b6:7b:cb:8a:
                    61:9e:01:59:1d:50:67:ca:c2:e6:2b:35:b3:d9:ff:
                    3a:88:e4:5e:6a:e8:d4:5d:bb:9e:be:16:da:ba:73:
                    df:af:34:5a:ec:2f:b2:99:d4:f4:09:75:8a:f2:b7:
                    7e:d1:58:55:5c:7a:6f:e1:78:78:b0:5e:28:e1:90:
                    a4:b1:d5:d7:73:78:f6:59:b0:0d:72:7a:44:ec:c0:
                    18:fc:a6:88:7b:a9:b4:b9:33:75:3b:c7:99:74:32:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:26:70:BE:94:7C:3C:3C:51:62:17:99:5A:18:55:78:2F:7D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/578dff1f-0135-3c2b-a894-ba1e5ecf327c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.50.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:a2:f5:f5:e1:16:2f:49:3f:c3:a2:bd:b7:fe:9a:4c:1f:
         ef:f8:a2:b7:9c:c8:18:e1:e6:c0:08:72:92:da:ec:4e:dd:56:
         86:53:d8:a3:b9:b6:9f:dc:a7:93:e6:d3:15:b9:09:8a:40:96:
         86:f6:fd:8a:62:e3:50:41:97:64:65:8e:f4:24:c0:8f:08:cd:
         3d:7b:3e:a5:b1:40:26:97:4f:bc:c4:df:b8:c0:1b:7d:cb:bb:
         cc:68:2f:c7:6a:3f:8c:53:f4:ef:c4:1a:2a:db:d9:00:13:1d:
         53:39:e3:e3:49:bd:49:76:c7:40:77:20:04:e2:cb:f7:6d:ac:
         a0:3e:42:0f:d0:ec:72:dd:3a:29:b8:ea:d3:48:04:50:8f:8d:
         35:8d:cc:0f:db:69:66:b8:26:d4:25:3b:11:0c:a0:9f:6c:1f:
         95:7a:66:30:f9:81:e2:06:9b:7a:0c:35:95:00:b3:5d:dc:20:
         3b:81:dd:34:fa:82:7e:16:02:5b:47:69:97:22:5d:2b:aa:fb:
         46:48:87:0e:95:9a:9c:ad:e7:94:aa:4a:ee:e9:c9:86:f9:5d:
         f0:00:0d:9d:62:ca:37:1c:44:cc:8a:cb:a8:b0:97:e4:17:ea:
         0e:15:5e:2c:ca:1c:e6:e5:dc:e4:d0:88:44:bd:78:e6:fe:f7:
         80:50:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----