Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94d381ef-0fb8-3c6c-bb40-ef3f5aa8a2b5.roa
File:                     94d381ef-0fb8-3c6c-bb40-ef3f5aa8a2b5.roa (raw, json)
Hash identifier:          xIRvGuhgcUKsHM60fKBU8iw1Jw920gbbhhQp8XtJlAs=
Subject key identifier:   E9:EF:29:B8:3B:0A:34:91:C1:FC:E8:85:2B:F2:63:46:3D:3C:8F:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583BCCD481A19E59621850C06580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94d381ef-0fb8-3c6c-bb40-ef3f5aa8a2b5.roa
Signing time:             Wed 03 Nov 2021 04:00:00 +0000
ROA not before:           Wed 03 Nov 2021 04:00:00 +0000
ROA not after:            Fri 01 Nov 2024 04:00:00 +0000
asID:                     701
IP address blocks:        71.161.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:cc:d4:81:a1:9e:59:62:18:50:c0:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  3 04:00:00 2021 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=41131cf9-5220-48d2-90f8-40e57673e924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:e6:3b:2e:9a:1d:2a:55:c4:5c:64:e0:53:
                    20:63:65:09:53:04:d5:5a:24:ca:96:92:37:c7:7e:
                    4b:6e:b5:62:28:57:3b:8e:20:09:1b:9b:45:de:73:
                    60:5f:d8:d1:c9:3c:74:42:da:c3:cb:f4:5c:2a:0b:
                    6c:46:cd:52:53:f0:43:f2:a6:3b:46:e1:12:18:2b:
                    ec:43:06:d2:e1:11:9c:c0:86:26:38:ac:3d:ec:29:
                    96:29:59:ea:d3:7e:01:8a:90:f6:73:e4:cc:26:1b:
                    25:6f:e5:b6:da:b4:ea:4e:b4:b2:3b:25:b3:24:db:
                    55:e9:3b:12:39:80:9e:7d:47:3b:11:49:77:c9:e8:
                    8e:a4:f4:12:e3:18:45:44:c4:32:60:23:40:5e:54:
                    de:2a:32:1c:8d:49:20:bf:5f:92:77:b0:82:db:74:
                    97:9f:ee:48:f1:31:72:63:09:5a:e0:8e:16:5a:8f:
                    c0:be:c4:8b:78:a6:a5:6e:09:88:c5:af:cf:c3:34:
                    61:7f:0d:de:2c:0d:73:14:e7:54:16:83:4d:fa:57:
                    f0:3c:a9:93:59:95:d9:eb:60:b6:76:fa:2e:2a:79:
                    ab:f3:fe:76:1e:08:2e:45:b0:f8:1c:4b:63:66:c6:
                    1b:77:b7:9a:4e:83:13:70:11:02:fa:67:7b:ad:01:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:29:B8:3B:0A:34:91:C1:FC:E8:85:2B:F2:63:46:3D:3C:8F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94d381ef-0fb8-3c6c-bb40-ef3f5aa8a2b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.161.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:4c:ff:29:e6:d5:7c:db:0d:c9:98:99:c7:94:f5:c9:4b:
         df:5a:eb:3a:75:dd:2b:7b:4f:31:f7:1b:c6:30:1a:96:52:3d:
         13:2d:0b:a6:f8:09:60:4d:fb:fe:16:22:f1:cd:cb:3b:2a:91:
         be:14:9d:ae:9b:47:a3:ef:ff:c9:5d:2a:01:9a:67:f0:7c:50:
         46:a8:4d:d5:7a:ba:a8:07:da:0e:13:53:41:5a:03:0c:39:0d:
         3d:9f:57:7f:75:0a:c0:6c:22:97:67:bb:db:ff:24:24:c9:c5:
         04:93:d9:87:08:17:97:5f:92:ad:25:b9:31:90:6f:02:e3:28:
         cd:b5:98:7e:5f:01:fa:23:2d:c1:2b:8f:d7:9d:71:a3:bf:22:
         c9:62:18:57:0f:ea:31:d9:75:0f:26:a3:06:84:c1:f1:a0:33:
         7e:c7:42:5c:7a:e7:68:14:1b:d6:8f:f4:07:91:64:e9:f0:21:
         2b:71:4e:94:db:9e:9c:aa:75:67:65:fe:d0:e2:de:94:87:a7:
         4a:d1:a6:c7:8d:8e:79:de:6d:d2:d6:4c:1a:93:21:34:e5:10:
         b1:ec:3b:c9:11:34:40:fc:b2:c7:c3:b0:a4:70:51:9e:19:eb:
         75:27:9f:f1:d1:2c:cf:96:4a:53:da:3d:3e:25:85:4b:ef:e6:
         b6:06:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----