Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0f357c7d-fa7e-3675-a5d4-c793cd761f28.roa
File:                     0f357c7d-fa7e-3675-a5d4-c793cd761f28.roa (raw, json)
Hash identifier:          1ehItEj+HV5x0apIa7+eBtmh2bGXFnSaDxqQDTFZDsA=
Subject key identifier:   BA:3D:D5:6D:CE:16:9D:37:7E:56:2D:35:5D:31:D4:1D:32:C7:59:5A
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858430B1B01C2B85ADE7159508C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0f357c7d-fa7e-3675-a5d4-c793cd761f28.roa
Signing time:             Tue 29 Aug 2023 07:40:30 +0000
ROA not before:           Tue 29 Aug 2023 07:40:30 +0000
ROA not after:            Mon 27 Nov 2023 08:40:30 +0000
asID:                     209378
IP address blocks:        172.94.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0b:1b:01:c2:b8:5a:de:71:59:50:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 29 07:40:30 2023 GMT
            Not After : Nov 27 08:40:30 2023 GMT
        Subject: CN=0f87ac42-09e8-4c7d-ba10-9a6b103f41e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:d6:53:36:0f:a1:c9:24:e4:00:4a:20:86:
                    17:45:71:d5:32:b5:54:b6:93:b3:f6:df:7d:cd:53:
                    bf:a4:a5:42:60:e0:73:73:6b:f2:8c:d3:5f:18:53:
                    65:6b:90:e4:41:50:52:3a:6b:07:23:4e:27:69:1a:
                    69:3b:90:d3:d4:a9:a4:80:5c:94:f8:4c:55:a0:50:
                    1c:fa:5c:83:e4:63:b6:a7:c8:b9:a2:a9:1a:52:87:
                    2e:30:58:0f:23:a4:a6:ea:a5:5f:67:2d:cf:87:c1:
                    bd:be:a5:83:47:7c:5b:a0:b8:51:0b:e3:1f:64:70:
                    11:c1:a5:1c:9e:6b:fd:0f:47:df:2b:61:10:98:3b:
                    36:bc:e6:1a:08:19:ff:56:65:9d:f5:33:9a:a9:61:
                    b7:22:19:9e:33:7a:ca:59:66:34:a4:b4:2c:22:c0:
                    e8:e0:2b:10:15:e5:b4:55:6a:5e:d4:83:73:cd:70:
                    fb:0f:57:3c:62:8e:d5:f2:31:00:03:a0:4d:5f:38:
                    f9:c0:a7:4a:64:d5:e0:72:eb:58:9f:37:09:d6:ba:
                    53:19:a3:0d:e0:e3:4e:cd:0e:d1:b4:ac:9d:49:2e:
                    9e:8f:29:76:f5:34:6e:16:1c:93:ca:ec:50:00:43:
                    f8:eb:11:c9:32:fd:62:33:73:49:bb:9a:65:7f:ee:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3D:D5:6D:CE:16:9D:37:7E:56:2D:35:5D:31:D4:1D:32:C7:59:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0f357c7d-fa7e-3675-a5d4-c793cd761f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:f6:da:ac:d4:8c:14:71:0c:b1:96:a7:4d:d0:d8:b7:99:
         9e:ff:a6:7e:ac:d4:77:90:e9:07:48:ca:f3:f7:7a:c4:c4:27:
         1c:4d:be:5e:9d:03:36:77:1b:e3:f9:e7:1a:5e:bd:70:26:8e:
         2f:be:14:be:1d:09:7e:12:56:5f:40:a4:c2:e6:a0:72:42:1a:
         f9:58:16:43:ef:da:bd:79:de:d8:65:1e:0d:f3:0e:33:c9:fd:
         59:f2:bf:13:7b:ec:3e:f3:cc:e2:41:6b:f0:c9:b2:25:1d:82:
         81:17:21:af:66:14:c4:0a:75:79:a6:4b:ee:a2:d8:f4:22:7f:
         49:81:31:5c:85:77:57:02:f5:1e:16:e4:12:76:92:86:02:5f:
         0a:9f:8e:85:64:6f:7a:9f:54:6c:42:32:7c:4b:2f:66:19:4c:
         27:94:c4:48:2f:ec:d7:0b:6b:d3:6b:36:47:38:4f:f2:46:56:
         8e:8b:91:4c:ea:71:e1:45:26:9b:ce:d8:17:ea:5d:b8:01:5f:
         5b:c2:40:d2:cc:00:92:20:8a:ab:15:0d:22:e0:ad:8d:98:2e:
         a7:7b:cf:63:cc:68:7e:e1:05:04:46:b8:fa:9f:b2:fe:82:a9:
         12:ed:7a:c2:b0:ea:0c:9b:94:f6:14:76:d9:b4:be:ae:4c:08:
         28:18:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----