Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/1f4391a1-4dc6-3166-8bc8-867c57e22c31.roa
File:                     1f4391a1-4dc6-3166-8bc8-867c57e22c31.roa (raw, json)
Hash identifier:          Ssn2AENaJ4JZDqs1meH59L35Ju9+1Hmum7jO/4j41Kg=
Subject key identifier:   C8:6D:69:77:64:C4:24:42:12:EB:0F:A8:16:DD:A0:04:A5:8D:93:75
Certificate issuer:       /CN=3e0f242a-aaee-4297-9937-b33329a8c34f
Certificate serial:       010D0C9F43285842C6ADB4757076B6773878AB80
Authority key identifier: 29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/1f4391a1-4dc6-3166-8bc8-867c57e22c31.roa
Signing time:             Fri 04 Aug 2023 19:25:19 +0000
ROA not before:           Fri 04 Aug 2023 19:25:19 +0000
ROA not after:            Thu 02 Nov 2023 19:25:19 +0000
asID:                     16509
IP address blocks:        104.207.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c6:ad:b4:75:70:76:b6:77:38:78:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0f242a-aaee-4297-9937-b33329a8c34f
        Validity
            Not Before: Aug  4 19:25:19 2023 GMT
            Not After : Nov  2 19:25:19 2023 GMT
        Subject: CN=b4cd430b-f9f6-49b6-94ec-e6875eed6b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:66:71:9d:84:7e:fc:b2:ff:4f:e5:6e:ed:
                    be:9a:16:69:83:eb:6b:0c:bf:1c:b6:14:29:6f:48:
                    9c:76:05:96:e2:57:67:9e:0f:e0:63:01:1c:d7:47:
                    ef:8c:a6:84:7d:5a:4c:9d:42:d9:67:c9:ff:fe:c3:
                    53:f3:11:bc:39:76:8e:f3:bd:e7:6e:fc:0b:cc:19:
                    29:a1:44:01:a6:46:30:b4:33:59:91:67:91:9e:43:
                    ba:05:b4:8a:ce:60:77:6a:de:d1:eb:bb:9e:e8:51:
                    9e:1d:10:b0:51:db:0d:bf:6c:73:6f:b8:65:b4:52:
                    08:db:7f:60:76:86:01:21:44:30:3b:95:0b:1c:97:
                    98:33:ae:f0:94:62:9b:ef:54:b2:84:40:b3:c1:98:
                    33:c4:0c:26:54:08:84:f3:46:91:4d:f7:6e:bf:4a:
                    f7:59:64:84:ad:d7:48:53:22:be:a2:68:f0:80:ac:
                    69:21:49:5f:6e:90:b8:d0:ec:73:0d:17:80:b3:f5:
                    e8:4d:99:6e:ee:8c:d5:fd:3d:4d:71:8d:ff:29:a0:
                    5d:d3:ef:c6:8a:b4:cb:5a:0c:1e:68:04:10:d8:9b:
                    a5:27:f1:ec:a5:91:7f:ed:15:c1:a4:99:1c:38:dd:
                    a2:b4:18:ca:70:79:21:cd:0d:f5:ed:51:5c:a0:60:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:69:77:64:C4:24:42:12:EB:0F:A8:16:DD:A0:04:A5:8D:93:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/1f4391a1-4dc6-3166-8bc8-867c57e22c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl

            X509v3 Authority Key Identifier:
                keyid:29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.207.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:28:f1:1b:3b:9f:f3:31:cf:e2:55:9b:b5:2d:a0:71:00:
         16:d2:c9:20:89:6a:03:ec:06:f6:e0:40:5a:3b:a6:ef:33:86:
         2c:99:8a:9f:77:d6:5d:57:b0:bd:23:f9:c5:a7:12:68:77:8d:
         7e:8f:fe:05:12:9d:aa:1a:73:1d:03:8c:a3:4d:18:5d:52:6f:
         1b:52:24:f0:8b:fb:19:93:52:87:ca:e1:ca:c6:d1:7e:15:e9:
         81:bb:cb:93:be:82:0d:68:fb:57:fa:89:72:34:c8:78:68:3f:
         8d:3e:80:40:be:a6:0b:39:df:31:a6:fd:14:85:54:ad:b3:c9:
         9f:79:53:77:ad:a0:d2:de:19:a3:3b:84:f4:ee:d2:44:0f:4e:
         ec:6d:a1:bf:b4:5a:c9:1c:30:e6:81:8b:0e:a4:b7:f1:27:54:
         b7:54:cf:fc:b2:3e:ea:b4:6d:3d:46:aa:b5:97:95:64:58:98:
         17:9c:ac:d2:4c:13:04:ca:34:e2:ff:11:87:14:21:29:a3:10:
         aa:52:32:07:26:c8:32:a0:e5:b7:47:94:11:75:d2:bb:19:c2:
         c6:b6:d7:cd:3b:f7:c3:60:08:5e:65:3b:57:fd:e5:ad:69:ae:
         6c:50:77:ec:2f:10:35:26:a3:0f:3b:15:cc:53:cc:b6:de:3a:
         b1:de:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----