Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/df08493d-1319-353a-b758-08e2abf31653.roa
File:                     df08493d-1319-353a-b758-08e2abf31653.roa (raw, json)
Hash identifier:          9wPjbz5U4uw9Gq876jirF6SMjsJ5rZa3QMdTdrNfcxI=
Subject key identifier:   7F:08:4A:69:AB:D9:10:E5:30:3D:22:6B:9A:B5:8D:14:61:32:B4:FC
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F43285842A3091B6D578033EE254CEB00
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/df08493d-1319-353a-b758-08e2abf31653.roa
Signing time:             Sun 23 Jul 2023 01:00:17 +0000
ROA not before:           Sun 23 Jul 2023 01:00:17 +0000
ROA not after:            Sat 21 Oct 2023 01:00:17 +0000
asID:                     11272
IP address blocks:        207.179.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a3:09:1b:6d:57:80:33:ee:25:4c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Jul 23 01:00:17 2023 GMT
            Not After : Oct 21 01:00:17 2023 GMT
        Subject: CN=022001b9-7436-4e62-a38c-efc246172d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:e8:9a:6a:29:c2:88:38:3b:56:7c:47:0e:
                    36:51:4e:83:41:7e:d5:01:7a:37:76:33:f8:10:3d:
                    ee:c5:0d:06:0a:bf:31:a9:d7:95:a4:f2:6b:b2:86:
                    2a:f8:18:60:7d:54:b8:80:32:67:d3:fa:c4:ae:1e:
                    9a:e5:15:4b:e7:1e:dc:59:27:c2:8e:c3:cd:79:24:
                    8d:65:c0:93:73:72:d2:8a:4b:91:7f:f9:a5:05:dd:
                    b4:75:3f:7f:43:bf:35:f3:53:2b:7a:ae:1c:4d:1c:
                    12:17:41:de:69:21:86:12:4a:06:bc:d9:44:a1:ed:
                    02:ff:f0:68:da:dc:c1:bf:0c:73:cb:f3:c1:f4:8f:
                    a6:3d:01:7e:ee:0b:9d:8c:39:ec:bd:a0:1d:a4:bd:
                    a5:a5:2c:63:fa:8d:53:aa:81:7e:0b:5d:76:dc:bd:
                    c1:46:d1:da:d2:5a:74:b9:60:4d:cc:0b:c9:0f:de:
                    b7:54:04:62:7c:04:06:12:99:ce:c9:2a:b7:dd:8a:
                    28:47:6f:19:b7:23:56:89:ee:21:eb:c2:fb:49:f6:
                    72:b5:43:02:40:d4:53:48:44:ff:d3:d3:cc:5e:40:
                    d5:22:c0:e1:fd:cb:67:18:e0:d9:54:86:23:74:ea:
                    3c:de:f7:10:7a:36:7a:13:a3:d4:7f:7f:d1:c8:c1:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:08:4A:69:AB:D9:10:E5:30:3D:22:6B:9A:B5:8D:14:61:32:B4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/df08493d-1319-353a-b758-08e2abf31653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:bd:02:17:b2:1d:31:3c:ea:f9:a1:8e:d3:2b:3e:23:e2:79:
         7d:d6:91:bc:67:ee:f5:26:e0:61:fa:60:6f:bf:65:f6:e0:40:
         79:b7:a1:3c:34:aa:52:0a:98:6a:eb:8f:66:7b:84:11:dd:2a:
         70:27:e7:bc:0f:8c:aa:9e:d5:a3:5c:2a:4a:35:82:d9:5e:50:
         b0:43:70:c2:20:e5:f1:f1:a8:bb:b8:7a:87:50:67:d9:0f:7b:
         5e:43:5f:46:e2:f6:c4:6b:49:8f:8a:71:3a:0b:74:1f:d1:23:
         47:b3:26:64:d5:2d:34:fc:ff:57:a0:c3:83:59:7c:58:9b:dd:
         29:53:2c:20:19:53:87:e3:39:f9:35:ee:02:ec:12:e9:62:9d:
         eb:39:5a:d0:c1:40:bd:8e:80:31:a8:8d:52:4e:45:90:00:68:
         ce:e4:06:9d:8d:e6:d9:2f:24:1b:83:55:30:81:44:16:41:4f:
         dd:31:e0:db:8d:d3:f4:1d:4d:8b:a6:86:52:81:71:54:b0:bd:
         07:c7:44:1d:06:79:6a:13:97:56:73:b7:14:3d:ce:76:9b:16:
         0b:a8:de:b8:02:c2:35:0b:24:27:cc:b3:30:64:79:5b:b5:1c:
         80:7e:e0:71:35:b1:62:8e:59:d2:82:ae:c9:b9:fe:e6:96:af:
         09:e0:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----