Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/d1f4fd24-d4b9-31a1-85b8-3f717ab95465.roa
File:                     d1f4fd24-d4b9-31a1-85b8-3f717ab95465.roa (raw, json)
Hash identifier:          LBeEqRdh8toAwQIK2oJX2dxmGyDfi2MVDCPmAy4iyyI=
Subject key identifier:   5D:3D:72:02:EF:F3:91:EB:37:B5:37:2A:C3:7B:FC:AB:3F:7A:4D:2A
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285843337EF409A0563E56436A11E0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/d1f4fd24-d4b9-31a1-85b8-3f717ab95465.roa
Signing time:             Tue 12 Sep 2023 18:54:13 +0000
ROA not before:           Tue 12 Sep 2023 18:54:13 +0000
ROA not after:            Mon 11 Dec 2023 19:54:13 +0000
asID:                     36113
IP address blocks:        208.67.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:33:7e:f4:09:a0:56:3e:56:43:6a:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Sep 12 18:54:13 2023 GMT
            Not After : Dec 11 19:54:13 2023 GMT
        Subject: CN=1919c81b-b061-47b8-8cc3-7dbb82865692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:5d:09:bd:3a:99:7a:46:7f:05:e6:62:2c:
                    14:67:c3:05:44:dd:89:bc:6b:27:d3:70:4b:ef:f9:
                    6d:81:1a:0d:87:f2:84:6e:25:98:41:76:bf:09:93:
                    3e:1d:bb:3d:ff:a4:74:f3:aa:52:72:1b:66:ff:58:
                    f1:7a:8b:30:38:4c:35:d7:19:38:f7:b8:2b:00:10:
                    3e:bb:2d:0f:33:27:b9:14:9e:b3:93:54:83:31:81:
                    ab:ca:ad:70:60:a5:ff:64:8f:47:12:df:07:1e:9d:
                    31:0e:92:3b:1c:00:36:74:b3:13:a3:bb:81:f9:4f:
                    10:71:49:22:23:f0:72:ae:ad:a6:3e:5f:18:5a:28:
                    7f:57:1f:d1:19:4d:ec:d5:2c:61:1c:0d:8e:47:40:
                    a4:18:ef:7c:02:4c:5d:f0:4c:b4:85:f6:22:aa:29:
                    70:23:84:eb:51:df:ea:ff:5d:d8:0b:f2:6f:d7:4d:
                    e5:b3:23:4d:09:4a:be:7c:74:34:97:d7:3d:b6:2d:
                    c1:ed:00:02:54:c8:d3:a9:3c:74:0f:4a:23:fd:2e:
                    cb:a0:0d:c6:fe:34:1b:a2:16:55:0c:dd:58:18:dd:
                    8e:3c:f2:5c:4e:dd:fb:ea:c3:9f:0f:7c:c1:1a:e6:
                    2b:9f:5c:26:52:a3:84:68:71:ae:14:ed:0e:82:4c:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3D:72:02:EF:F3:91:EB:37:B5:37:2A:C3:7B:FC:AB:3F:7A:4D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/d1f4fd24-d4b9-31a1-85b8-3f717ab95465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:a5:e4:04:4d:67:0b:5e:a2:2b:11:ff:09:57:1b:74:d5:
         0e:3c:a5:90:9c:26:25:b8:b1:8d:5a:02:96:8d:95:8e:9a:43:
         38:79:b6:4f:d8:9e:d2:5a:16:6e:53:57:3c:e5:41:50:ef:2e:
         17:c8:d5:59:4b:12:19:be:c0:d6:23:af:9c:3f:b4:77:25:ef:
         c3:73:0f:6b:b0:d5:73:01:31:3e:8a:47:7d:b0:52:5a:41:bb:
         f1:84:6f:0a:22:a7:29:8b:dc:6c:62:44:fa:7b:6c:19:47:6d:
         1b:af:96:d2:4f:00:b1:70:c1:94:fa:fb:cb:34:ad:37:7b:71:
         50:ad:12:ab:bc:a8:be:de:52:d5:6b:af:d6:b3:23:65:6b:d8:
         70:a4:4d:d9:b1:64:a9:2a:e7:2b:0b:62:7c:10:35:13:6c:e9:
         28:b8:41:1a:28:7c:cf:82:a0:ff:12:d1:59:c6:db:b5:d6:0e:
         b2:b5:64:7f:9a:41:77:b0:b2:70:cc:38:b2:6e:79:cb:21:56:
         ec:eb:48:a9:96:40:58:ab:d7:58:89:d8:d7:ce:36:32:f0:70:
         e2:f0:58:15:a9:5a:30:25:29:48:60:5b:5e:9d:2c:b4:ac:44:
         92:5a:2f:30:8b:4e:8d:23:8a:4c:42:52:ec:e0:b5:3b:80:70:
         29:41:89:0f
-----BEGIN CERTIFICATE-----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