Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4fb03bb5-9253-35a5-8b3a-8070569df2c4.roa
File:                     4fb03bb5-9253-35a5-8b3a-8070569df2c4.roa (raw, json)
Hash identifier:          GaUpzHR4ziI90Tgi2MQdgFff1JjmUQXGH0K5vvdZeas=
Subject key identifier:   B7:A9:AD:2E:D1:BE:F9:40:4D:2C:92:A2:58:B0:00:3C:EC:F2:2B:10
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842E6098D9E3CA5E79CC179C280
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4fb03bb5-9253-35a5-8b3a-8070569df2c4.roa
Signing time:             Wed 16 Aug 2023 01:00:22 +0000
ROA not before:           Wed 16 Aug 2023 01:00:22 +0000
ROA not after:            Tue 14 Nov 2023 02:00:22 +0000
asID:                     24875
IP address blocks:        216.24.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e6:09:8d:9e:3c:a5:e7:9c:c1:79:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 16 01:00:22 2023 GMT
            Not After : Nov 14 02:00:22 2023 GMT
        Subject: CN=2b5b33f5-2102-4ed9-b756-e50856d68bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:bc:8f:ae:03:22:cd:13:7b:33:b9:80:71:
                    e1:9b:44:23:13:9c:f4:25:ce:a4:f9:c4:55:01:48:
                    9c:7b:27:a7:19:e4:45:a0:c3:c1:df:25:55:f7:53:
                    57:53:6a:54:62:75:96:dc:26:86:a6:88:93:41:78:
                    15:49:f6:6e:11:db:76:a6:0d:ff:d4:79:a6:2b:86:
                    8f:13:a5:52:67:da:bd:48:f3:6e:90:c7:6c:c4:78:
                    28:50:30:46:02:5f:4a:9f:9f:c6:17:f3:b3:91:52:
                    37:8c:79:e7:69:62:d8:ec:5f:77:3d:4b:b7:54:20:
                    1f:9d:2e:e6:7d:b3:16:2d:b7:06:5e:fe:93:91:cd:
                    7d:2b:78:0b:c5:9a:9a:35:28:20:16:ab:f2:82:70:
                    17:34:4d:ff:ce:fb:1e:2e:2c:c0:af:bb:80:93:d2:
                    5e:c3:8f:7b:3a:1a:6d:3e:bd:85:94:77:af:49:d3:
                    cc:4a:ba:4b:68:3d:ef:83:73:d0:74:4f:36:13:9e:
                    b7:ba:87:de:0b:a1:09:a5:f9:fb:90:b3:70:f0:f1:
                    34:9a:22:d2:89:6c:be:0d:86:34:49:c9:56:95:97:
                    01:15:49:d2:08:9d:df:82:5f:f2:cc:5c:c3:97:ac:
                    9d:08:9b:02:bd:e2:68:f8:4b:3b:ee:49:aa:ca:06:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:AD:2E:D1:BE:F9:40:4D:2C:92:A2:58:B0:00:3C:EC:F2:2B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4fb03bb5-9253-35a5-8b3a-8070569df2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:20:67:4a:c1:60:09:d9:1c:33:b7:30:d0:56:12:e7:a5:e4:
         cb:bd:5c:82:9c:93:4e:3e:b2:58:15:bd:c6:2c:92:f8:63:28:
         13:a1:ba:06:69:65:39:ab:60:e7:3b:ad:c1:cb:92:79:b9:6d:
         2a:f2:c8:4c:a4:d6:43:32:bf:18:77:83:37:88:24:a7:c6:9a:
         93:31:c9:ca:c9:20:da:bf:d0:e0:46:3c:ce:59:be:f5:d4:4e:
         b3:d6:e0:8d:29:a1:9d:8f:01:0d:55:91:81:d4:07:a3:0e:02:
         80:9f:ab:15:cc:8e:e5:5b:66:3c:8f:d0:ef:d5:af:ec:55:f7:
         e2:93:32:c5:a4:2b:b7:38:76:f3:10:41:f6:c8:d1:88:ed:2d:
         aa:fd:d5:a3:b3:11:6b:6d:34:49:a5:e3:fb:5c:ce:dd:c7:64:
         db:f3:6f:2c:5d:b5:7a:11:81:7d:43:48:3e:8a:fd:ed:30:bc:
         f8:e4:1c:b8:4d:0e:b1:9c:ed:9b:6a:62:06:a4:23:64:8c:ec:
         b5:52:3d:8b:99:90:f3:d0:34:a0:2f:5d:54:74:99:18:10:df:
         43:40:a5:6e:42:5b:61:a0:ed:cf:d8:c5:54:70:67:58:e5:bb:
         7a:95:44:e8:2f:53:c0:b9:03:2c:22:4e:a8:f7:01:04:6f:e6:
         98:7d:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----