Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd76ff46-738f-3974-a888-1e565c0b1245.roa
File:                     bd76ff46-738f-3974-a888-1e565c0b1245.roa (raw, json)
Hash identifier:          Rl6kJwy/TR/C2/q5LAB81L9hZevjEr3cN9BEwJOV7ac=
Subject key identifier:   E3:EE:B4:4F:F7:61:59:DB:E8:1F:29:49:2C:82:A0:88:7D:DB:09:5A
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583FAC02BC071B0C00A8595C6480
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd76ff46-738f-3974-a888-1e565c0b1245.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Sun 21 Oct 2029 04:00:00 +0000
asID:                     395131
IP address blocks:        139.177.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ac:02:bc:07:1b:0c:00:a8:59:5c:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Oct 21 04:00:00 2029 GMT
        Subject: CN=cbefdf30-7795-4734-a0cc-8d6da3ab3fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:2f:a6:37:d5:13:52:d1:6e:91:d8:9c:e9:
                    85:6d:da:38:42:9d:b6:6b:c8:55:a8:86:03:a8:2e:
                    df:46:4d:37:3c:a8:37:bb:d6:88:8b:66:f0:6b:74:
                    a3:f1:ab:d5:c8:7f:f1:1b:df:53:79:11:29:85:32:
                    57:28:9d:7b:a1:61:9b:72:00:da:02:17:8b:c5:d3:
                    4a:fc:38:2a:50:53:e5:18:d5:8a:ac:df:29:4f:b5:
                    a5:74:ec:1f:af:38:27:70:49:6b:9f:02:0b:e6:ad:
                    cc:21:3e:a7:79:16:d3:32:1d:ad:49:6f:3e:92:4f:
                    3b:51:b7:98:54:a8:ad:b2:ba:98:f6:45:d4:cf:52:
                    6a:7b:d6:bc:64:b0:81:4c:77:5a:9a:ad:f8:71:1d:
                    88:a7:08:99:93:f1:3d:2a:74:a8:94:32:26:c2:08:
                    64:0d:39:f0:56:9e:09:05:04:e5:54:71:0c:30:e0:
                    eb:59:6d:42:71:08:f4:cf:73:34:fa:1d:55:c6:d8:
                    75:81:92:37:06:35:6b:cb:05:74:a9:51:29:df:19:
                    5b:55:8d:24:73:d0:74:1d:03:9f:a5:e9:2f:82:7a:
                    48:05:0f:8d:5c:e8:55:70:5d:e2:0b:aa:67:6b:2c:
                    7b:25:10:36:3a:63:19:9a:b6:f8:ea:85:4d:ed:56:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:B4:4F:F7:61:59:DB:E8:1F:29:49:2C:82:A0:88:7D:DB:09:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd76ff46-738f-3974-a888-1e565c0b1245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:7d:e4:fa:bb:dc:fd:df:9e:bf:43:74:f7:58:95:26:b1:aa:
         d8:0b:9c:da:17:21:da:e8:5a:b0:3b:0a:3b:dd:79:65:e5:1f:
         62:01:3c:76:4f:ab:69:26:1b:44:68:c9:31:2f:53:35:e7:4a:
         1f:09:9a:2f:76:ef:b6:ce:70:48:9d:08:90:36:88:e6:68:2f:
         13:fd:b4:45:4c:b6:7b:96:31:ee:75:9b:13:fa:bb:a6:40:bf:
         5b:b6:d8:ec:b0:80:06:ca:ef:b4:36:c0:e5:0e:13:a5:a7:8b:
         a4:15:57:a8:b4:9a:c0:b7:a0:00:ab:47:54:9f:13:36:c0:17:
         c5:64:2d:26:81:a1:c2:53:9b:b1:00:51:ee:4d:bb:0d:72:b2:
         78:1a:f0:13:ef:03:c9:6b:7a:57:66:d4:c5:3c:2d:2f:03:9e:
         a8:84:5c:e6:39:e9:c9:b9:4c:ac:09:6c:54:f0:4a:1c:d3:13:
         e9:4f:12:d8:73:4b:2a:3a:1e:d1:6c:8f:38:12:f0:03:35:a1:
         6c:78:32:58:4f:a4:fe:50:10:11:fb:00:de:17:e1:90:19:08:
         79:fb:8f:bd:1e:01:f3:6d:04:1d:07:34:f1:ae:6b:b2:2e:69:
         a7:76:8e:39:65:cd:28:08:21:82:a9:aa:48:e5:33:50:84:2c:
         80:06:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----