Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0579bc04-3f52-3c34-8262-284678eebb96.roa
File:                     0579bc04-3f52-3c34-8262-284678eebb96.roa (raw, json)
Hash identifier:          8bGH4Y93fhuA8dtZl+7qhIt2mEAzYYdaJBCdznug0X0=
Subject key identifier:   6A:FE:F6:F7:7F:79:94:B0:52:6B:60:C9:89:6E:0F:F2:32:D1:60:BE
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858437FE2BC90DD55A88784A73C80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0579bc04-3f52-3c34-8262-284678eebb96.roa
Signing time:             Tue 10 Oct 2023 03:36:42 +0000
ROA not before:           Tue 10 Oct 2023 03:36:42 +0000
ROA not after:            Mon 08 Jan 2024 04:36:42 +0000
asID:                     20422
IP address blocks:        107.182.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7f:e2:bc:90:dd:55:a8:87:84:a7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Oct 10 03:36:42 2023 GMT
            Not After : Jan  8 04:36:42 2024 GMT
        Subject: CN=c7fc963f-66c9-4113-8182-6dc30a25b47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:47:d2:f8:20:79:8c:66:e4:2b:b9:be:e7:6e:
                    fc:ba:93:ac:63:75:56:f8:88:f3:e7:75:e6:8e:29:
                    eb:2d:72:b7:48:63:71:15:2c:4c:f6:88:90:9e:b0:
                    1c:3c:12:f8:b0:36:d5:58:16:3a:8c:10:11:ef:12:
                    0d:b2:f4:2a:bd:69:87:50:b8:7b:73:b5:38:75:5d:
                    57:8b:cb:72:fb:7e:54:e9:0e:9f:59:b9:55:dc:55:
                    4c:27:8d:8c:63:ff:ae:89:c3:be:a3:da:34:6d:6d:
                    3c:e5:91:92:fa:ce:69:ef:ee:d4:41:e4:ad:4e:8a:
                    66:2f:00:94:b9:07:c0:94:06:a1:b5:6f:5b:b6:97:
                    5c:90:79:07:04:8b:99:6d:b8:fd:0b:ee:06:54:97:
                    2f:f4:c8:e5:af:cc:8d:4e:59:ad:46:06:47:2d:12:
                    0c:a2:58:07:d5:09:48:ed:aa:e2:bb:23:b0:0a:00:
                    60:9d:14:b7:1c:2b:58:d4:ef:f9:b8:46:37:f5:cc:
                    bd:5c:ce:7f:2c:54:9c:91:c7:34:87:fc:0c:6e:99:
                    fe:18:b9:8b:18:52:52:af:ee:43:e8:1a:50:be:a7:
                    e3:ff:2d:d0:20:14:c7:b4:c2:24:35:09:ad:fb:69:
                    d7:c0:53:87:70:d5:d0:f3:ea:25:84:4e:68:78:c4:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:F6:F7:7F:79:94:B0:52:6B:60:C9:89:6E:0F:F2:32:D1:60:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0579bc04-3f52-3c34-8262-284678eebb96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ef:c1:87:44:2f:88:1d:b8:f9:49:87:38:28:bf:f8:aa:fd:
         69:32:b1:01:ec:10:69:75:92:9c:28:73:81:8a:8e:77:2c:16:
         98:38:cd:51:c6:5e:58:6c:92:bd:e4:a1:6d:21:f9:8b:78:75:
         98:41:bd:1c:24:9d:c6:50:2a:7d:f3:71:0b:93:be:61:0b:01:
         9b:25:c3:7a:79:5e:a1:61:52:13:6f:44:c2:af:36:75:41:ff:
         97:10:b7:f5:7a:83:b1:e3:ae:64:81:52:4f:44:1f:9b:3d:fc:
         e0:99:e2:81:7a:f7:3c:c0:e4:39:4e:86:6e:90:20:00:03:58:
         de:f1:37:9a:20:3d:73:4e:f0:47:83:50:e8:3c:a4:bf:80:1b:
         79:c1:29:5d:f2:44:6c:de:0d:2e:b9:49:9f:67:6b:4c:cc:68:
         92:f3:d2:34:77:28:73:8e:c1:e5:0d:27:4e:3b:30:3e:c9:20:
         bf:f4:ff:30:33:48:65:b3:38:f4:56:a3:fb:42:27:ff:61:f7:
         89:ee:31:7d:8b:27:2d:47:53:85:9e:49:0f:87:aa:cf:6c:95:
         d8:6d:c9:72:93:76:4b:ff:99:3a:de:69:02:30:d4:ce:64:e2:
         e8:c5:c0:c8:a8:c5:88:48:df:43:c4:db:ea:a8:0c:12:6e:9b:
         0e:f2:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----