Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b1513d41-c43f-3325-9329-f3afccbe8e6c.roa
File:                     b1513d41-c43f-3325-9329-f3afccbe8e6c.roa (raw, json)
Hash identifier:          Vz+BPEB5XI/sn1uhFfiKCIZ+wym4mhpr/66BbCpR3Q8=
Subject key identifier:   3B:DB:67:26:66:50:8E:32:3D:D4:B8:EF:AF:38:57:0A:F9:17:B9:BB
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583F88DDB683EBA4E6691087A530
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b1513d41-c43f-3325-9329-f3afccbe8e6c.roa
Signing time:             Sun 09 Oct 2022 12:00:00 +0000
ROA not before:           Sun 09 Oct 2022 12:00:00 +0000
ROA not after:            Wed 10 Oct 2029 04:00:00 +0000
asID:                     14445
IP address blocks:        139.177.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:88:dd:b6:83:eb:a4:e6:69:10:87:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  9 12:00:00 2022 GMT
            Not After : Oct 10 04:00:00 2029 GMT
        Subject: CN=af93bce7-7d81-4025-9876-d48637f98d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:dd:03:1f:05:05:a7:24:e4:c8:71:4c:e2:
                    33:fd:15:00:59:68:c4:30:63:aa:c0:4d:94:87:6d:
                    a6:c6:59:73:7e:a8:29:8f:2b:d6:9a:d3:63:18:38:
                    62:9b:80:04:79:d1:c9:92:46:a6:b6:0a:b4:7b:fe:
                    e4:d1:47:66:41:10:d2:18:bf:21:14:70:35:9d:b4:
                    7e:99:d0:74:86:b2:47:bf:f3:55:ca:ac:1e:f0:24:
                    3e:c2:8e:5c:c5:67:0e:d1:c9:06:14:87:1e:d7:67:
                    c8:92:35:06:de:b8:6a:99:47:08:98:0b:f8:95:87:
                    5c:40:67:98:86:f8:1e:6b:ea:fd:70:43:f5:c9:8a:
                    f3:9f:28:cf:be:c8:6c:17:0b:02:12:a9:79:45:61:
                    7a:1f:86:78:0a:2b:66:92:2c:77:ad:c3:eb:a3:25:
                    5b:1c:e9:fa:ca:69:e9:74:46:70:4b:7e:88:b8:f3:
                    c8:d5:e8:35:d7:92:8b:d2:bc:97:79:e5:17:98:a8:
                    57:22:27:e4:3d:dd:64:09:68:b3:eb:21:37:0c:fe:
                    66:2b:f7:a2:5f:df:9b:fd:ce:43:4b:16:63:6a:ac:
                    14:d5:37:85:37:f0:15:65:a2:bb:4b:1b:c6:f5:05:
                    d8:80:86:da:91:ff:b8:72:31:c0:21:65:ca:6f:21:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DB:67:26:66:50:8E:32:3D:D4:B8:EF:AF:38:57:0A:F9:17:B9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b1513d41-c43f-3325-9329-f3afccbe8e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6e:55:7f:86:55:43:f9:de:56:99:a8:50:fb:6e:59:82:6f:
         3d:9a:b6:6d:01:46:79:c9:8b:7a:19:89:1e:b5:da:e8:92:8e:
         8c:60:92:5e:ca:df:4c:b0:40:4e:ad:67:d7:49:5b:df:09:68:
         f1:8c:09:05:d4:17:5d:7a:88:21:f5:52:27:eb:f9:c0:b2:21:
         0c:d2:c0:44:03:9f:79:1b:56:67:5e:35:15:1a:42:94:b5:75:
         ff:88:19:61:45:9c:2e:5c:5c:1e:97:d5:94:4b:0e:95:79:c3:
         07:0f:0f:99:ee:b5:a9:67:92:39:aa:c4:95:71:cb:b5:17:34:
         35:35:9a:da:1e:25:4f:67:50:59:6c:bb:9c:40:50:a1:70:98:
         97:67:01:0c:e7:81:8b:f3:c9:90:e9:f8:ff:ec:e4:6c:b6:1c:
         de:01:b8:4f:08:16:b8:29:46:9a:57:81:53:8e:33:04:70:7b:
         28:33:e7:8d:87:b2:ba:d9:15:da:a3:ef:c5:37:07:d6:30:d9:
         c6:51:7c:53:3a:cb:6a:9f:1a:9a:68:39:94:d7:36:2d:be:b2:
         39:6f:92:47:32:55:b8:0a:75:7e:d4:94:59:46:3f:38:49:30:
         6e:9e:79:44:4b:82:18:83:2d:ff:78:d5:74:88:11:c7:0c:dd:
         fe:3e:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----