Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/009c4925-c357-3ce2-8c59-ee81ea3436ed.roa
File:                     009c4925-c357-3ce2-8c59-ee81ea3436ed.roa (raw, json)
Hash identifier:          FA6VQCWPYmab4QWPmzeC24KhfIKpu8dk1jP77FJFqPY=
Subject key identifier:   84:5B:22:F9:6A:5A:5A:DD:78:F1:20:20:64:AB:CC:5F:2B:3B:AA:68
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328583E193238C9BD601652609820E0
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/009c4925-c357-3ce2-8c59-ee81ea3436ed.roa
Signing time:             Fri 30 Apr 2021 13:37:47 +0000
ROA not before:           Fri 30 Apr 2021 13:37:47 +0000
ROA not after:            Tue 03 Sep 2024 04:00:00 +0000
asID:                     174
IP address blocks:        64.112.76.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:32:38:c9:bd:60:16:52:60:98:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Apr 30 13:37:47 2021 GMT
            Not After : Sep  3 04:00:00 2024 GMT
        Subject: CN=5ba0dccf-d343-4847-9834-2f0bd3129000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:22:ac:63:7c:36:60:86:c8:9e:85:d1:85:
                    d8:76:5f:c0:54:dd:1a:d9:63:4d:c9:d6:9e:70:14:
                    5d:28:9a:de:51:96:d9:a9:1e:d4:7e:56:28:fa:ce:
                    04:d2:c7:21:2f:14:0b:bf:75:c1:19:74:73:de:ae:
                    e3:50:9a:36:1d:dd:18:80:34:9a:86:b1:9d:1d:3f:
                    25:8d:5e:fa:3e:b7:d2:4b:1a:9f:aa:c7:81:79:d9:
                    8b:20:67:5a:5d:02:6a:ad:12:17:61:39:e0:7e:0f:
                    0f:1d:8d:a1:f0:09:29:3d:d4:51:31:0e:17:97:7a:
                    9c:75:1e:e7:5f:ee:ec:85:11:04:b8:33:44:8b:93:
                    31:49:71:7f:b6:7a:0a:db:d0:c3:b1:ff:4c:67:ec:
                    2e:4c:b0:1c:04:ca:c7:c3:1e:d4:be:ab:0f:90:aa:
                    bb:78:1b:98:a0:75:96:64:fc:c5:4a:48:1e:38:39:
                    f2:42:ae:d5:23:7c:43:a9:39:b0:26:c7:14:24:7b:
                    31:83:a0:c4:b4:3b:ce:4e:fe:c8:df:08:65:da:19:
                    01:d6:92:7c:d4:54:f4:50:3f:13:9d:4e:c3:51:0c:
                    c8:1a:19:bd:c1:3b:ec:8d:5e:c2:fc:e7:fb:c3:1e:
                    8d:fb:40:f9:f7:4c:3a:4c:11:0b:8d:ee:96:3f:90:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:22:F9:6A:5A:5A:DD:78:F1:20:20:64:AB:CC:5F:2B:3B:AA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/009c4925-c357-3ce2-8c59-ee81ea3436ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:f2:cb:c4:69:6e:6e:fa:48:b5:d3:60:37:2c:44:22:81:
         c6:63:48:72:fc:5c:3b:e2:23:2f:24:1d:43:b8:21:46:41:d8:
         53:67:f4:51:6f:47:25:ca:e3:d8:d1:07:0f:fb:45:45:3e:cb:
         ad:5c:39:09:d4:de:38:e8:55:ef:56:47:87:51:f0:0b:2b:ab:
         0d:da:95:ea:b5:c9:da:1e:0c:bb:9f:ed:8e:b2:83:6b:f9:f4:
         e2:ff:9f:28:43:eb:bd:dd:7d:5b:0c:4e:94:6d:ba:3f:ad:23:
         95:b6:dc:3f:43:61:c7:b8:83:80:5f:95:13:7a:e3:91:9b:6c:
         e7:f5:10:01:e7:49:84:da:91:58:f6:ef:c2:4f:b0:0b:83:e8:
         9b:e5:04:db:10:46:aa:53:a9:65:8e:c4:89:56:05:d8:84:be:
         9c:53:ce:dc:a1:56:ce:65:33:46:85:e0:37:3a:ac:26:4d:d9:
         be:fe:60:f6:8c:15:4d:3e:04:20:51:75:37:57:4f:2b:f9:f6:
         b5:d1:8e:74:07:6c:76:d0:f7:19:fd:ca:7e:e6:e7:ad:16:60:
         7f:62:a9:c5:64:e3:ce:cc:ef:04:38:93:91:b4:bf:9f:51:ab:
         40:07:47:8d:24:a3:67:f8:04:b1:97:da:d4:bb:3d:a4:07:fd:
         3e:47:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----