Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa
File:                     d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa (raw, json)
Hash identifier:          RzrI0m1LP2yN8DwQOhw98JPM+sf+nmILOn9dzGtmAuc=
Subject key identifier:   60:5C:26:96:29:1B:C2:6E:F1:F2:77:3D:A6:14:0B:12:56:2E:BA:FF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584324D9EDF7D7D04BB26E0CDC20
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa
Signing time:             Thu 07 Sep 2023 13:00:23 +0000
ROA not before:           Thu 07 Sep 2023 13:00:23 +0000
ROA not after:            Wed 06 Dec 2023 14:00:23 +0000
asID:                     3223
IP address blocks:        45.74.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:24:d9:ed:f7:d7:d0:4b:b2:6e:0c:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  7 13:00:23 2023 GMT
            Not After : Dec  6 14:00:23 2023 GMT
        Subject: CN=629dc11f-f603-4175-bbdd-01418cce14f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:32:91:c4:4d:e3:73:2e:61:4a:fe:54:fe:
                    15:3f:4e:a3:e9:ae:f5:8e:ff:95:ed:69:3b:3c:12:
                    52:1e:41:41:48:27:1c:71:90:d8:4c:87:9a:cf:ac:
                    b7:2d:1f:9c:ee:5e:da:ef:73:cf:d0:24:1c:6a:d0:
                    e4:b8:17:66:ef:e3:b6:2a:6b:d2:3f:25:de:1c:67:
                    9d:fc:5b:97:27:35:69:9e:60:7f:d2:5a:5a:95:6b:
                    b6:26:73:98:6e:69:57:10:5a:78:9a:8a:e4:a1:33:
                    9b:89:67:76:1d:65:af:1a:1f:86:31:10:cd:15:41:
                    81:44:dc:87:3f:9b:e0:e1:f1:a9:78:4e:be:6e:13:
                    98:ff:71:c6:7c:ba:e0:5c:29:4a:85:db:c9:8b:5c:
                    29:c3:68:23:7a:c3:41:42:6c:aa:5d:bc:9f:e4:a0:
                    3a:60:fc:dc:ff:98:5d:d6:34:47:ab:20:ef:3b:d2:
                    8b:7d:49:14:34:98:a5:3a:ef:11:4b:8d:0c:3c:65:
                    73:00:75:a3:72:e3:53:92:16:da:08:10:3e:d6:e4:
                    5b:52:c0:09:7e:57:7c:2e:57:32:3a:b9:f1:81:ef:
                    48:1c:e4:d8:1d:91:6b:df:03:90:36:c9:08:d4:87:
                    34:54:e6:dc:30:12:74:a7:a9:71:4b:30:0f:d5:45:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5C:26:96:29:1B:C2:6E:F1:F2:77:3D:A6:14:0B:12:56:2E:BA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:88:ec:e8:03:87:19:05:07:79:3a:0b:f7:a9:a9:1b:1f:94:
         49:c3:43:91:ad:56:c3:42:1d:56:87:1c:02:53:aa:94:92:ea:
         5c:67:a7:01:c9:41:5a:f6:a5:25:12:a7:24:5a:60:85:3f:9d:
         46:c0:b9:1c:86:51:85:cf:71:f6:37:7b:68:eb:61:c7:23:f0:
         bf:2f:6c:e2:1a:45:44:8b:4a:a6:78:70:7c:9f:c6:d1:87:9f:
         75:ef:8a:76:a6:4f:97:b2:af:2e:dd:f5:3c:5d:fb:0a:63:87:
         64:56:58:2e:4c:ac:52:4e:9d:d9:68:4c:78:bd:03:f6:31:71:
         bf:75:91:82:32:1b:bc:55:76:f6:fc:08:b4:30:88:16:e8:66:
         8f:2b:7f:19:72:90:e4:01:16:c0:21:45:57:c7:f9:ee:f7:23:
         2e:74:c3:d8:42:e3:00:1f:43:aa:b0:ed:60:48:d3:b8:2c:20:
         7b:68:5a:30:ce:7b:7b:f7:5b:54:a3:b6:54:49:cf:6e:c2:ae:
         a8:5b:78:1c:c6:0e:a6:ad:cd:f0:40:a4:87:64:65:de:9d:63:
         22:82:52:ac:bd:40:20:58:af:73:fb:74:34:e9:c4:38:85:00:
         e7:23:1a:01:38:82:d1:29:1a:85:c4:df:38:3b:d0:25:34:34:
         a1:30:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----