Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8117a2c-de87-38b2-a9be-8238d81a0d93.roa
File:                     f8117a2c-de87-38b2-a9be-8238d81a0d93.roa (raw, json)
Hash identifier:          TufbHSWubcUPUyPr4wEu0qEmaj8t3DF6O/USdC8q8PU=
Subject key identifier:   F4:C7:2A:DA:4F:0B:74:AA:A6:2E:5A:08:04:82:A3:E7:46:47:1D:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379EAE810DDE0E7AF4DDE100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8117a2c-de87-38b2-a9be-8238d81a0d93.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        68.191.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9e:ae:81:0d:de:0e:7a:f4:dd:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=07edb6d2-7f04-4e48-a786-74fcc2fad9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:ce:bc:95:6a:25:3d:79:03:01:e5:74:8b:
                    1e:5b:90:e4:62:83:bc:c3:9b:92:da:1d:88:e1:78:
                    b9:ef:8c:36:6c:4d:ad:fd:82:fa:8e:ca:e8:05:77:
                    15:8a:cd:ce:28:78:01:a5:b7:44:7c:e1:d6:71:38:
                    af:7e:6f:e8:e5:c4:27:8c:f5:2a:33:67:e1:e0:b0:
                    13:a0:d1:0e:4c:aa:49:f9:af:9a:3b:3e:8d:c8:5f:
                    d7:1c:05:ab:10:8a:e2:d4:fc:ad:47:44:64:4f:4a:
                    7d:2d:4a:07:29:a6:cd:12:0e:ef:28:ac:4d:e6:17:
                    1d:e4:1d:33:02:f1:39:6f:df:6a:54:f9:20:d1:af:
                    00:49:67:cb:ce:37:f2:0a:f5:5c:d9:51:a3:7f:4d:
                    79:80:19:31:f5:b0:bb:63:2f:c6:ca:52:c5:30:d4:
                    26:4e:66:94:ff:69:0c:d6:09:5b:58:28:c9:b7:43:
                    bf:88:32:56:a8:6c:7f:ce:f8:5d:4c:c6:bc:1d:9a:
                    bb:46:48:d0:f8:f1:e7:08:e5:6d:69:9c:76:ca:21:
                    fb:b7:fc:1f:3b:32:03:27:cf:c0:65:70:4c:63:44:
                    cc:dd:27:dd:75:9e:a7:da:35:97:52:b6:03:f0:01:
                    c3:42:3c:ad:f8:5c:b3:bb:e9:d4:89:6e:dc:2b:69:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C7:2A:DA:4F:0B:74:AA:A6:2E:5A:08:04:82:A3:E7:46:47:1D:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8117a2c-de87-38b2-a9be-8238d81a0d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:5d:fb:75:df:86:a6:b1:a5:c0:c9:80:03:21:ad:b4:8b:d6:
         aa:5b:20:ed:84:5a:33:67:03:27:df:c4:b9:71:c8:d1:29:c0:
         e6:05:3e:d8:74:c9:65:ee:e3:16:bd:84:8b:5f:f7:3a:de:d7:
         5a:5d:ec:c2:93:45:72:74:03:be:f0:60:d5:71:b1:c2:47:31:
         89:6c:4c:fd:1a:bc:a7:bd:60:7a:ff:7a:41:b7:40:15:2e:24:
         8d:11:21:ea:9f:9f:c6:51:27:00:73:64:fa:12:62:95:ea:bc:
         14:f4:fd:d2:da:71:19:c2:1c:58:85:32:dc:e5:fd:84:9b:69:
         21:58:d2:f8:ad:04:c8:39:0a:66:f6:7c:6c:7f:74:8d:77:f9:
         fd:ce:65:f6:c1:ae:8b:91:a0:21:eb:61:ce:68:77:e5:5c:31:
         2b:01:82:9f:d0:b9:50:99:c4:56:4d:c3:d0:ec:03:c8:0c:81:
         76:c8:92:04:41:01:f7:07:f2:44:99:b8:ba:12:3c:65:a5:82:
         e4:74:d5:f3:bb:25:cd:b0:d7:8d:d7:d5:e4:5b:a5:f1:05:a0:
         18:ee:47:8a:aa:60:04:96:3c:16:5d:0d:d7:d7:7b:f2:f9:7f:
         7a:a5:1d:a0:7c:8c:02:6b:ed:4c:d1:10:4c:ef:93:08:e7:5e:
         7d:d0:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----