Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/fe6c7bf0-38ae-3a69-9c5e-36ccc26aa75a.roa
File:                     fe6c7bf0-38ae-3a69-9c5e-36ccc26aa75a.roa (raw, json)
Hash identifier:          gx8EsVFP+iTwDs3km7qppFEvEQCw47iAUAF9G6ZcIUM=
Subject key identifier:   34:58:75:89:F9:82:CC:B7:C0:F0:10:C8:43:EA:B1:D9:EE:C6:A5:BE
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584105638ECA8A8066463C5F83D0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/fe6c7bf0-38ae-3a69-9c5e-36ccc26aa75a.roa
Signing time:             Wed 11 Jan 2023 12:57:08 +0000
ROA not before:           Wed 11 Jan 2023 12:57:08 +0000
ROA not after:            Tue 27 Mar 2029 04:00:00 +0000
asID:                     54538
IP address blocks:        165.85.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:05:63:8e:ca:8a:80:66:46:3c:5f:83:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jan 11 12:57:08 2023 GMT
            Not After : Mar 27 04:00:00 2029 GMT
        Subject: CN=e937eb80-f53b-4ff5-8fb1-f75287d787dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:2a:d1:a0:46:1f:b1:3f:ef:4c:8e:64:66:
                    c4:c7:17:37:cd:c9:75:df:20:d5:9e:ae:30:43:26:
                    d5:59:58:33:5b:93:66:51:44:92:00:e9:94:47:fe:
                    e1:50:a1:b7:36:75:6a:e2:a8:f8:1d:3f:8f:ba:a0:
                    1e:ac:0e:c5:58:a4:1a:9a:43:fd:8a:da:74:73:f3:
                    b1:06:f9:17:c8:a6:3b:f6:62:81:1a:0e:4f:4e:68:
                    72:13:02:97:f0:08:27:e6:5b:f1:6f:13:96:8f:8b:
                    bd:ec:e0:c3:22:89:54:bb:4e:20:94:e7:e6:f9:bb:
                    73:0b:af:fd:35:c8:8f:fc:80:e4:91:af:51:1c:50:
                    ef:f4:1a:9f:ae:84:20:99:c4:94:6c:dd:b5:a0:5c:
                    79:0d:18:ab:c8:51:4d:97:5c:2e:ed:cc:73:75:77:
                    3b:6b:9c:58:a5:21:93:50:a6:56:ef:72:c4:64:4a:
                    03:f8:ab:f1:f9:86:97:02:48:7e:c4:3a:e2:a3:d7:
                    a4:e6:39:bb:9b:00:d0:a0:0a:8a:6e:7e:06:7f:51:
                    49:6a:18:55:be:6c:a7:ed:e6:bb:b3:f7:e9:c0:6b:
                    90:4e:72:23:13:b7:11:d7:6e:7a:d1:31:8e:37:81:
                    35:6c:d0:71:56:44:6b:c9:dc:b2:65:8c:84:cf:86:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:58:75:89:F9:82:CC:B7:C0:F0:10:C8:43:EA:B1:D9:EE:C6:A5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/fe6c7bf0-38ae-3a69-9c5e-36ccc26aa75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:96:f3:8f:43:91:c4:fc:ac:0f:8f:74:f0:ae:70:2b:13:0e:
         8f:cd:df:cf:8c:be:bb:f4:5c:09:13:0a:7a:47:5b:77:9a:6f:
         ef:e6:2e:9f:43:1a:21:ae:e7:74:cb:75:0a:c7:5d:0c:1e:5a:
         b8:ef:45:73:91:71:b4:20:ab:fe:39:c8:11:ab:89:c9:2d:90:
         0f:1d:6b:9e:97:4c:9c:81:0b:16:1b:76:5e:77:82:f3:e8:4d:
         6c:8e:5a:07:01:3b:15:1c:09:89:79:af:7f:81:67:ec:00:58:
         23:4d:3e:6d:8f:ff:93:0b:9e:e1:ae:d0:5f:12:81:1b:ac:f1:
         40:ee:68:55:52:93:ac:84:74:07:b3:f6:f1:0e:b3:66:f1:e7:
         74:08:fd:e7:5f:3a:42:36:8f:09:8f:97:8b:8a:e2:29:05:c5:
         b8:d9:44:0e:66:f0:67:0e:40:61:37:67:0e:12:a2:e0:56:59:
         b0:be:e3:12:55:51:3e:dd:d8:fd:ff:33:a0:a5:59:ef:60:51:
         58:a8:90:43:99:43:0d:ce:1f:dc:8d:38:da:93:32:08:0c:86:
         a7:16:fb:bc:c6:df:fa:ce:62:72:96:a5:05:b3:e2:ce:b5:81:
         9a:a5:74:64:06:1e:b5:cc:d2:85:1c:83:2f:5d:d5:09:99:c1:
         56:94:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----