Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/2ffb9d88-332a-367c-b953-2bbf530c76f9.roa
File:                     2ffb9d88-332a-367c-b953-2bbf530c76f9.roa (raw, json)
Hash identifier:          j/ucAOIzm/Zp8ZrvQnlMCMgh4s28DANLyyuKZh9BmlQ=
Subject key identifier:   2F:DF:72:DD:4C:AC:9E:5D:EC:0E:E9:67:AF:AE:BF:29:2D:B5:F4:F2
Certificate issuer:       /CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
Certificate serial:       010D0C9F43285842163F096AC06CFFD5E72F8178
Authority key identifier: 15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/2ffb9d88-332a-367c-b953-2bbf530c76f9.roa
Signing time:             Fri 02 Jun 2023 14:40:03 +0000
ROA not before:           Fri 02 Jun 2023 14:40:03 +0000
ROA not after:            Thu 31 Aug 2023 14:40:03 +0000
asID:                     54048
IP address blocks:        23.247.228.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:16:3f:09:6a:c0:6c:ff:d5:e7:2f:81:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
        Validity
            Not Before: Jun  2 14:40:03 2023 GMT
            Not After : Aug 31 14:40:03 2023 GMT
        Subject: CN=a794d89f-a7f6-479f-97ae-345ecafd7291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:0f:f7:9a:fe:11:4b:ac:62:bc:ae:f2:27:
                    37:e4:62:5d:0a:1c:fe:dd:e4:78:96:dd:19:bc:b4:
                    94:f4:ba:b0:2f:8c:f0:ff:a0:12:50:ff:fc:2d:c5:
                    d2:ff:a4:2a:bf:c5:43:e8:15:77:9b:95:63:f2:81:
                    01:04:6c:ef:8e:57:05:cc:3c:d6:7e:84:dd:c8:77:
                    83:e4:1d:3e:7e:75:16:28:06:cb:5d:80:69:02:39:
                    f1:0a:b1:c5:c0:8d:33:8e:7d:52:5a:b5:b5:de:71:
                    9d:ff:45:a2:69:ea:06:1f:e8:ae:ef:a3:19:34:06:
                    07:d7:65:ca:54:50:b9:82:e8:d9:5e:95:d4:2b:9d:
                    53:ca:db:09:41:1e:9c:fe:c0:30:fb:82:94:67:f2:
                    4c:5c:2e:52:e5:0b:cd:01:6b:72:9d:02:d3:c4:cd:
                    5d:8f:f3:ca:54:94:cd:ad:1f:2f:2c:1c:5f:ee:ea:
                    dd:58:30:39:69:cd:27:94:7d:80:9b:1a:fb:76:4f:
                    0c:43:69:c1:fc:02:40:20:45:65:bd:54:99:44:8d:
                    cb:93:a0:1b:94:22:71:1d:ae:86:94:a9:f0:7e:ff:
                    08:36:23:71:e4:b2:12:b2:30:f1:36:08:2d:c1:12:
                    23:13:73:5a:1b:98:2a:d3:2f:96:2d:4f:05:00:9c:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:72:DD:4C:AC:9E:5D:EC:0E:E9:67:AF:AE:BF:29:2D:B5:F4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/2ffb9d88-332a-367c-b953-2bbf530c76f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.crl

            X509v3 Authority Key Identifier:
                keyid:15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c0:58:58:12:be:57:84:fa:55:dc:57:fc:62:41:09:09:70:
         57:39:ea:ef:12:34:22:4e:5d:2a:83:86:22:ea:a0:4f:18:39:
         9f:98:3d:24:c7:75:5b:13:b1:fd:3b:27:bb:58:a6:2c:52:55:
         1c:8f:ca:3d:60:dd:9c:f0:d5:1e:16:68:c1:8b:b4:09:16:52:
         a1:a4:1b:64:b9:25:49:c6:56:3b:d4:cb:85:b5:c3:db:35:b6:
         ef:6a:10:fc:84:eb:31:6e:ab:27:bc:24:41:9a:a2:36:38:09:
         b6:bf:dc:43:40:33:3f:c8:69:af:cf:fb:48:08:a2:cb:6c:85:
         54:f5:7d:a0:62:85:6e:16:aa:d7:ab:21:9e:2b:12:79:88:65:
         2f:d3:61:89:1a:f0:29:df:e1:20:2e:be:6e:12:3b:40:c7:c5:
         31:ef:6a:bf:d8:6f:7b:b2:be:14:00:30:96:5f:75:16:a3:14:
         25:4b:85:c9:69:d0:e6:ef:94:c2:cf:8d:8f:f6:00:ae:59:4a:
         f7:17:2b:cc:b2:04:0d:6a:0d:e9:0b:aa:dd:10:2f:72:94:e6:
         66:6d:93:8b:cf:0b:72:09:4a:01:bc:c6:a2:16:1a:7d:b2:9d:
         d9:c6:54:32:6f:2e:8f:35:fd:db:2d:22:71:72:ed:54:1e:9d:
         02:87:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----