Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab839cde-ccca-396b-96c9-ce4e5ef50c2b.roa
File:                     ab839cde-ccca-396b-96c9-ce4e5ef50c2b.roa (raw, json)
Hash identifier:          bGECaoQcEsYVGSDYiEPHR5VNHSW5p4DZdSsgUUJBp7E=
Subject key identifier:   77:AC:BB:FD:C8:E2:B0:66:78:AC:6A:82:5D:19:21:F0:E5:2E:A7:58
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841F00F2AC502FF78B6DE852F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab839cde-ccca-396b-96c9-ce4e5ef50c2b.roa
Signing time:             Fri 19 May 2023 22:22:53 +0000
ROA not before:           Fri 19 May 2023 22:22:53 +0000
ROA not after:            Thu 17 Aug 2023 22:22:53 +0000
asID:                     15731
IP address blocks:        104.253.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f0:0f:2a:c5:02:ff:78:b6:de:85:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 19 22:22:53 2023 GMT
            Not After : Aug 17 22:22:53 2023 GMT
        Subject: CN=b357d377-58e5-479d-a150-0b8e79cbdb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:90:73:88:14:30:5f:56:71:dd:ba:b1:48:
                    3c:6a:88:33:00:3a:9d:57:10:6e:0e:1c:64:38:38:
                    10:e0:ba:9d:ad:09:fe:a2:25:66:d3:bf:b0:7a:3a:
                    93:0c:4e:32:78:f1:57:de:9e:a0:2b:e7:73:ba:45:
                    32:e5:e6:55:f9:1c:14:aa:b8:6c:b7:4a:cb:89:5b:
                    8c:3c:a1:6d:12:73:25:20:60:eb:51:6e:c1:45:a2:
                    cc:f4:d2:18:51:7e:e4:37:35:f5:af:30:0d:f6:dd:
                    e0:e0:3c:b4:aa:67:1e:81:1d:2d:5b:04:b9:76:27:
                    60:67:44:5c:7b:bb:aa:3e:75:37:06:da:cd:58:73:
                    37:7f:a3:f3:3f:c4:18:1c:5f:1b:d8:e2:2d:b5:5e:
                    f7:b2:f8:14:ae:f2:65:8a:9c:a6:6f:13:fc:00:bb:
                    e8:16:38:b8:e8:2f:08:1b:b4:ea:65:0a:b5:c6:4e:
                    f9:e8:68:92:af:71:8f:e9:61:13:77:09:99:dd:34:
                    12:0a:17:13:25:f2:12:99:3d:ae:df:f8:c9:1b:c2:
                    b2:df:9f:a3:fa:c8:e0:50:43:28:7e:80:ca:2c:3f:
                    5d:c2:7d:b9:09:b5:38:29:65:d1:59:71:0a:2e:b9:
                    c1:aa:d3:0c:31:66:2a:50:e1:78:8a:4d:4c:d3:99:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AC:BB:FD:C8:E2:B0:66:78:AC:6A:82:5D:19:21:F0:E5:2E:A7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab839cde-ccca-396b-96c9-ce4e5ef50c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:75:72:63:b5:5f:2d:a4:b6:0a:9e:77:40:ab:da:af:38:74:
         9d:c2:ed:68:80:e9:2b:ca:0b:96:e3:ca:de:79:fc:48:fb:1a:
         d9:ca:1e:ec:23:e1:f0:30:ef:b6:7b:f1:77:5c:0e:77:21:47:
         1a:71:52:91:9e:6b:33:83:2e:c6:64:88:3d:9a:c3:90:81:11:
         ec:74:80:70:2c:a1:65:de:63:de:eb:63:eb:4c:63:d1:51:88:
         cf:b4:ca:45:07:f0:8c:83:6f:f7:50:b6:a1:dc:6e:12:34:60:
         c0:a3:47:2a:4b:55:ba:f0:22:b3:1c:64:76:97:47:d3:9a:d6:
         a8:de:f1:ca:fe:f9:06:97:70:57:b1:41:0c:98:4b:73:bb:89:
         c1:73:a6:da:0e:0b:71:9a:cf:55:1c:40:62:8d:39:7a:83:09:
         50:d1:2f:c1:8d:c3:75:67:3a:0c:dc:7e:df:86:00:3c:07:c9:
         d7:bd:c0:1c:67:07:8f:15:7a:48:75:db:dd:d5:f7:02:fc:29:
         55:35:eb:f6:1b:5a:4c:16:90:49:bf:73:63:c8:10:97:d7:07:
         76:dd:ef:f0:b7:4c:f3:1a:cf:d6:11:f1:4b:57:e5:fc:c9:35:
         37:08:4a:1c:81:72:06:ff:dd:f8:ff:a4:fc:c8:b3:86:eb:77:
         d5:23:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----