Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/855c7b3e-5d7b-3bf9-b21c-f59a26efa3e8.roa
File:                     855c7b3e-5d7b-3bf9-b21c-f59a26efa3e8.roa (raw, json)
Hash identifier:          0EHVryNEQOPDTpY/TXWfbLiOza54eCvT4442UFyH+jI=
Subject key identifier:   50:B7:E0:B0:76:C1:FA:60:76:A5:FA:6C:E4:39:40:E1:C6:A6:68:C7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842ACCE8332284981893B6841E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/855c7b3e-5d7b-3bf9-b21c-f59a26efa3e8.roa
Signing time:             Wed 26 Jul 2023 13:00:20 +0000
ROA not before:           Wed 26 Jul 2023 13:00:20 +0000
ROA not after:            Tue 24 Oct 2023 13:00:20 +0000
asID:                     834
IP address blocks:        108.165.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ac:ce:83:32:28:49:81:89:3b:68:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 26 13:00:20 2023 GMT
            Not After : Oct 24 13:00:20 2023 GMT
        Subject: CN=e72835da-3a64-40cd-9e93-4421b9368b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:bd:70:6e:12:5b:ee:d0:c8:9c:95:77:77:
                    db:66:f5:76:dc:98:9c:86:60:4f:f9:06:62:20:f4:
                    fd:a5:8e:90:2e:a2:62:85:b1:ce:55:3f:46:c6:a5:
                    f8:9e:5a:84:d9:b2:09:c5:b7:7d:cd:f9:32:f6:db:
                    7e:85:b3:5d:27:b2:be:4d:fa:33:7b:33:42:29:a2:
                    23:27:ec:2d:9c:86:9a:8c:77:36:5c:85:07:56:63:
                    a8:31:0a:76:5e:00:a2:98:80:6c:01:d4:79:0b:8f:
                    b1:c1:82:88:4b:cc:60:4f:4b:ba:f3:85:4f:ca:c9:
                    b1:e1:a3:24:dd:f6:ad:87:e7:35:e1:5a:fb:6e:7b:
                    b3:f2:0a:ea:7e:fa:e5:b7:bc:51:9b:f6:24:91:2a:
                    5b:eb:65:e5:e3:fc:4f:2e:6d:e8:6d:e9:52:29:9f:
                    75:75:51:1e:b2:d7:9e:83:82:b1:a0:a3:14:15:ef:
                    2e:82:71:35:15:da:98:91:d8:d7:6d:a9:34:42:75:
                    75:c5:3d:47:b8:15:a8:66:27:fc:6e:07:a9:58:8f:
                    f7:40:ac:de:54:e0:3a:23:7c:ea:b4:29:e1:33:5b:
                    0a:52:c6:f3:0b:e2:6d:33:a9:cf:1f:5d:30:3c:0b:
                    25:ab:c5:d7:31:fc:e4:e3:87:9a:72:a3:b3:eb:95:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:E0:B0:76:C1:FA:60:76:A5:FA:6C:E4:39:40:E1:C6:A6:68:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/855c7b3e-5d7b-3bf9-b21c-f59a26efa3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:56:21:aa:01:13:1f:0e:fe:6c:2a:70:37:20:c1:ed:e4:
         09:35:5d:22:40:8b:8d:47:1c:c6:b7:1e:ba:19:87:1f:32:5a:
         0e:02:9d:7e:d4:69:2d:9b:a5:2f:25:6c:94:9d:7d:34:ef:99:
         91:d7:d4:c3:fb:91:7a:0c:85:9d:de:b1:8e:62:ec:e8:8b:9d:
         21:c5:44:a8:83:c7:95:56:7c:36:05:0e:a6:f3:4a:1e:38:d7:
         6c:dd:75:63:e3:7e:3d:04:39:d4:51:10:bb:1d:df:c5:f2:31:
         db:d9:48:82:a1:51:df:23:88:be:b7:74:62:48:4c:d1:ff:10:
         9d:7f:52:3b:c4:b0:56:85:85:a7:9d:82:fe:98:87:5a:54:d6:
         d3:c4:75:80:6a:d7:04:03:ed:5c:a4:eb:4f:3f:42:73:00:5b:
         cb:ce:4c:59:d6:29:bc:c0:16:28:5e:6f:49:1b:8a:75:85:8e:
         e9:1c:a4:91:fa:4a:a8:cf:30:d1:2b:5b:32:c9:c8:6d:dc:5e:
         64:f6:13:48:d2:a0:45:e1:2c:72:a3:28:a4:36:69:2a:ac:73:
         1e:e0:07:c6:de:f3:95:21:ba:02:ef:d5:26:9c:60:1f:e6:65:
         8a:e2:47:fd:b4:91:29:f4:4c:19:77:ce:73:6b:b7:33:5f:6a:
         4b:fe:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----