Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c10d3942-0f07-3588-abe3-810f5de04f7c.roa
File:                     c10d3942-0f07-3588-abe3-810f5de04f7c.roa (raw, json)
Hash identifier:          H16m07XZlF5qDTIJJy6s7wpBhDqLW1UBme7JVb2CkQQ=
Subject key identifier:   B5:DF:14:36:49:C9:79:0A:80:82:91:E3:DA:AC:79:07:56:FE:F0:6E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842DC442652C886341A823ECA00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c10d3942-0f07-3588-abe3-810f5de04f7c.roa
Signing time:             Sat 12 Aug 2023 13:00:23 +0000
ROA not before:           Sat 12 Aug 2023 13:00:23 +0000
ROA not after:            Fri 10 Nov 2023 14:00:23 +0000
asID:                     9009
IP address blocks:        172.111.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:dc:44:26:52:c8:86:34:1a:82:3e:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 12 13:00:23 2023 GMT
            Not After : Nov 10 14:00:23 2023 GMT
        Subject: CN=b085ebab-f128-4bd0-9a56-d2bb378962d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:14:93:6b:34:08:aa:49:b9:15:e6:28:fb:
                    37:c0:b6:2e:b0:e2:bd:45:d0:04:d4:d8:a4:98:4b:
                    6f:44:56:92:9f:78:2c:ef:53:a5:db:11:b3:29:7c:
                    de:a0:b6:6d:ed:ae:b5:c6:6c:84:ca:92:cd:a8:06:
                    bf:34:b9:13:9f:17:e4:04:8d:dd:a8:58:23:93:84:
                    5b:5a:7e:21:b3:92:07:9b:f9:7f:2c:d0:d9:2f:81:
                    90:33:e1:6f:b1:81:71:cb:1a:db:b6:34:3e:0a:ea:
                    39:76:ab:f9:78:e8:be:17:76:11:fe:4f:53:0b:15:
                    2a:e0:9a:29:ee:35:df:ff:f6:26:18:0f:6e:62:05:
                    8a:c6:8c:34:06:c6:f6:5f:10:b9:2d:42:5e:79:c3:
                    3c:17:67:b3:62:7c:a2:fc:37:08:12:b1:b8:ba:a7:
                    62:0e:0b:60:6c:5a:6a:b2:81:b9:9f:22:69:ba:b0:
                    b4:db:6d:87:36:a7:0a:6c:18:1e:99:38:7a:5b:8c:
                    00:95:38:5d:7c:93:1b:c3:d9:e6:5e:04:56:0d:3a:
                    0e:c1:62:ee:75:9a:06:52:10:d6:0b:f5:ce:51:cc:
                    8e:8f:5f:43:d7:d3:58:2d:42:00:d9:68:84:e9:30:
                    25:c0:dc:d9:f5:38:0d:5e:e7:a1:ba:8e:d2:89:ba:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DF:14:36:49:C9:79:0A:80:82:91:E3:DA:AC:79:07:56:FE:F0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c10d3942-0f07-3588-abe3-810f5de04f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:26:ff:eb:ad:1d:8e:ff:99:b2:cd:67:70:e8:13:c3:3a:97:
         5e:0d:ba:b1:1a:f6:8c:0e:09:c1:91:50:8d:21:1a:c1:33:84:
         65:7a:16:dd:cc:87:2a:8e:67:ce:e6:65:22:6c:6a:db:84:f8:
         e3:aa:4b:51:7d:3d:62:74:f4:7c:42:8e:e5:6c:1e:1b:2a:ba:
         00:9f:fa:85:e5:c0:2b:cd:7f:0e:01:4c:5d:6b:3f:64:65:0a:
         7d:9d:82:0f:43:87:a8:08:87:94:a3:db:1c:6d:01:3e:fd:94:
         45:20:f5:5d:a0:64:7c:06:51:27:c6:5b:f2:69:fa:1d:58:eb:
         4d:16:45:2f:92:a9:81:04:13:b3:48:38:36:b5:77:cf:02:9a:
         f1:79:ae:0f:5c:bf:c5:cb:fa:0f:35:20:31:97:63:24:61:10:
         4d:95:8c:83:74:59:e8:99:f4:3d:d9:96:e1:33:66:5c:5c:d7:
         02:3a:3b:70:8f:b9:4c:a5:35:24:79:01:88:c8:7e:2e:9f:f3:
         53:79:87:75:4c:66:92:1a:0e:82:a6:d1:4a:cb:fa:da:7b:f7:
         92:5b:4c:2c:ac:84:23:22:0d:1b:ee:5d:82:b9:d2:4e:35:7e:
         19:96:2e:7f:a7:39:1f:73:e0:ed:f0:0a:21:ee:b3:c7:f9:25:
         24:7b:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----