Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2c914966-3fc5-3f83-868d-cb1b379b8cc1.roa
File:                     2c914966-3fc5-3f83-868d-cb1b379b8cc1.roa (raw, json)
Hash identifier:          inywLefqU7MTbGWhxnt+p9SnMRaPtqGJxXdtrkPRfmw=
Subject key identifier:   95:68:E2:6C:A6:0E:7E:A8:7E:A2:30:56:63:35:49:CF:63:D8:62:A2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842389F799C3909571C822DD980
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2c914966-3fc5-3f83-868d-cb1b379b8cc1.roa
Signing time:             Wed 14 Jun 2023 22:11:51 +0000
ROA not before:           Wed 14 Jun 2023 22:11:51 +0000
ROA not after:            Tue 12 Sep 2023 22:11:51 +0000
asID:                     398465
IP address blocks:        167.94.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:38:9f:79:9c:39:09:57:1c:82:2d:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 14 22:11:51 2023 GMT
            Not After : Sep 12 22:11:51 2023 GMT
        Subject: CN=403225ba-c45b-48e1-a0ea-aaca9018f6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:5a:32:1a:d6:47:c9:68:19:2c:d7:43:4a:
                    cc:12:7f:6a:f3:06:af:e1:a8:ad:e5:cd:6b:5d:66:
                    1f:56:55:99:db:42:73:e9:d1:ac:d4:6a:6d:dd:ae:
                    ed:bb:71:04:90:e9:3e:c0:05:48:36:54:96:6a:3e:
                    02:4c:eb:33:de:2e:17:b9:20:d8:76:91:22:5d:ca:
                    d4:9b:c9:cf:bb:ff:cd:9e:87:63:25:7b:54:78:94:
                    63:95:d3:e3:c0:47:dd:07:b9:95:22:5f:9f:59:34:
                    11:28:6c:53:38:d1:51:df:c4:a2:3d:85:8e:d7:71:
                    c8:92:b0:f3:58:16:07:94:fd:35:bb:43:57:23:ea:
                    60:a2:00:27:f5:e4:8a:2b:d7:67:a0:e0:bd:f2:0b:
                    aa:4b:8c:7a:cb:64:0f:19:cc:fd:6e:58:5f:43:84:
                    27:1f:9f:cb:95:64:22:3a:43:a2:76:60:6e:d8:69:
                    b7:f4:87:8e:a7:8d:2f:ba:8c:bc:00:58:f3:4a:d2:
                    85:67:3d:8d:70:9b:4e:e4:1a:30:0b:f7:ef:44:e1:
                    a7:ef:83:6b:b0:13:76:a8:12:52:3d:24:53:d2:da:
                    f8:a1:19:ab:44:60:b3:71:15:da:83:4c:ae:17:83:
                    cc:96:b8:cb:fb:7c:63:0f:c1:3b:43:56:f2:1a:09:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:68:E2:6C:A6:0E:7E:A8:7E:A2:30:56:63:35:49:CF:63:D8:62:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2c914966-3fc5-3f83-868d-cb1b379b8cc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:81:77:59:ac:93:15:2c:02:5b:ef:d3:6b:df:f1:51:4e:41:
         72:8d:fe:08:5d:14:a1:c4:c2:3a:35:5d:fe:71:62:3d:6c:17:
         40:a8:25:cd:97:41:eb:0a:36:da:d6:96:c7:9d:eb:c6:c9:5d:
         2e:27:46:24:27:16:e7:34:f1:cb:81:b4:ec:a9:1d:e9:d2:b8:
         5c:a8:d8:14:ab:28:8e:29:c9:ab:65:58:97:25:1a:57:8f:6d:
         0f:77:ed:05:a8:7b:d2:c4:36:ee:99:6c:04:f3:ab:3a:c2:2f:
         5a:a3:f0:70:91:f1:03:70:77:8d:5c:b3:71:c9:5f:fe:95:43:
         7b:a1:e9:ab:db:82:c8:f1:97:95:12:5c:f3:e3:b2:95:5f:b8:
         a5:dc:4c:0c:71:be:24:2a:79:67:65:b7:44:da:f2:7a:14:bf:
         29:68:4c:16:40:2f:bd:7e:2c:71:71:12:b6:6a:df:63:51:15:
         4e:d8:60:0b:a2:bc:d0:ff:88:bb:b6:9e:2f:9c:97:38:80:4b:
         e8:b2:b2:b9:71:b5:6c:61:7a:e8:b7:2e:c7:13:01:86:d0:a3:
         49:e1:b7:36:a2:90:fd:b5:ab:97:00:0d:61:f0:a1:fa:15:ed:
         20:21:df:49:df:86:ab:ed:da:72:67:5e:ce:e7:b6:c8:b3:22:
         ec:71:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----