Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ed61db78-62af-3d25-81b0-cf8da4f0de57.roa
File:                     ed61db78-62af-3d25-81b0-cf8da4f0de57.roa (raw, json)
Hash identifier:          wDpW1s+GV+WkYt5UFAHl7eSlIDtLvQax0uEG1SS1CuY=
Subject key identifier:   12:6A:D1:EE:91:CD:D3:A9:EC:63:8D:9C:2D:F3:FE:69:F6:BD:9E:4C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584306246AB59E3905A0121CA080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ed61db78-62af-3d25-81b0-cf8da4f0de57.roa
Signing time:             Sun 27 Aug 2023 13:00:24 +0000
ROA not before:           Sun 27 Aug 2023 13:00:24 +0000
ROA not after:            Sat 25 Nov 2023 14:00:24 +0000
asID:                     35913
IP address blocks:        172.94.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:06:24:6a:b5:9e:39:05:a0:12:1c:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 27 13:00:24 2023 GMT
            Not After : Nov 25 14:00:24 2023 GMT
        Subject: CN=44ee33c6-14db-4479-8a05-29f108338168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:34:53:7f:c7:68:76:05:87:08:9c:2b:9b:
                    d4:6d:eb:78:25:f6:dc:62:fe:16:76:c8:b6:4d:18:
                    6a:a9:dc:5d:59:af:c0:41:b7:1a:e2:4d:a6:24:67:
                    c7:88:f6:e6:45:bc:2a:8c:1e:61:dc:ff:d4:b9:63:
                    16:ef:ff:b9:bf:c2:de:c9:2f:d6:74:18:4d:fe:d1:
                    c8:d1:44:e4:89:9e:7e:1a:77:66:82:47:e4:29:09:
                    dc:da:a1:23:e3:9b:05:c4:04:35:55:a5:ba:15:01:
                    f1:4e:e1:ac:05:c9:2b:4e:6e:a2:76:5e:aa:c8:ab:
                    3e:3d:8c:53:da:42:c3:d0:1a:eb:a0:28:4d:c8:ce:
                    a4:8f:11:e7:ba:70:49:cb:7e:3c:68:e3:e7:8c:4b:
                    55:c8:ba:2d:20:68:f1:c2:f0:04:c5:d0:a7:a7:24:
                    65:6e:c3:e5:0d:7b:c6:a4:e7:f9:00:77:ec:94:f7:
                    d5:dd:e6:4e:18:58:86:89:2c:46:bb:ab:aa:f9:6e:
                    76:9c:52:88:6e:35:3a:98:23:bf:47:a3:cb:ee:ef:
                    8a:7c:36:d3:0d:c8:a1:4a:e2:36:47:91:e5:e3:70:
                    20:cb:6c:66:be:65:65:c1:cb:72:d3:a4:cc:ad:76:
                    fd:39:e3:46:51:8a:bc:ad:3d:76:e0:7b:01:cb:08:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6A:D1:EE:91:CD:D3:A9:EC:63:8D:9C:2D:F3:FE:69:F6:BD:9E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ed61db78-62af-3d25-81b0-cf8da4f0de57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:45:23:9b:22:ad:4d:db:c4:4f:95:d9:18:9d:4d:9b:58:2a:
         7f:d0:82:14:03:f8:ae:aa:21:57:d2:ad:96:1e:ee:42:87:0e:
         19:17:6d:d0:97:f0:da:c9:49:a8:8d:4a:ad:41:ae:60:cc:63:
         33:f8:ce:d0:c4:94:2c:6a:d4:51:44:b9:81:27:fe:1e:88:49:
         ff:7a:00:3d:9f:85:7e:00:f4:0a:73:db:2d:e0:8d:be:d1:70:
         42:97:21:e7:66:40:da:35:0f:c0:1b:5c:ba:fb:41:fe:39:63:
         e0:a0:0f:2d:e6:87:39:65:a7:1e:a6:80:91:1f:bc:e8:dd:7c:
         16:d5:29:d7:65:d4:7d:04:da:54:d1:fe:dc:34:5c:02:43:0b:
         18:eb:6a:22:20:25:c0:f0:61:83:4e:d9:93:dc:e9:3e:af:db:
         af:db:e1:39:aa:de:76:27:65:f0:c9:10:4b:4e:fc:72:ca:d8:
         e2:2f:f4:f2:96:93:a7:c5:06:3d:79:5f:c8:cf:eb:6c:a5:05:
         a0:f7:2c:fe:01:bb:5a:bc:43:08:cb:b7:0f:d0:82:43:40:7c:
         1b:7d:d6:30:7e:9b:2c:40:94:70:4d:56:89:dc:97:f5:25:97:
         95:e8:92:ca:ea:ca:29:aa:68:37:97:89:14:0c:93:cd:bd:b1:
         36:83:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----