Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c3ad8c95-cb6e-3965-bf52-565884e2d606.roa
File:                     c3ad8c95-cb6e-3965-bf52-565884e2d606.roa (raw, json)
Hash identifier:          rqMgnDQxxytWXKO/oCgy2Llwd8CwpKFcAqDyuyCe5sQ=
Subject key identifier:   39:38:E3:99:B1:FE:90:E1:F4:84:00:78:17:EA:86:30:92:71:3F:AA
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584300DC3E258B66FE10A8AC9C00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c3ad8c95-cb6e-3965-bf52-565884e2d606.roa
Signing time:             Fri 25 Aug 2023 15:35:58 +0000
ROA not before:           Fri 25 Aug 2023 15:35:58 +0000
ROA not after:            Thu 23 Nov 2023 16:35:58 +0000
asID:                     834
IP address blocks:        139.177.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:00:dc:3e:25:8b:66:fe:10:a8:ac:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 25 15:35:58 2023 GMT
            Not After : Nov 23 16:35:58 2023 GMT
        Subject: CN=965a46d4-cd56-430f-803c-feaeecccff35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2e:14:ee:47:99:bb:8f:0b:f8:06:69:e1:68:
                    b7:45:7d:10:a1:e4:62:87:4e:45:57:f4:04:c0:8b:
                    7b:b0:ca:7b:0f:f5:82:a5:65:82:b8:4f:8f:8e:55:
                    70:f3:51:b2:1f:4d:07:05:f7:a5:d1:ed:17:d2:ea:
                    60:22:96:2b:fb:5a:b2:84:7b:c6:97:01:3b:9a:7b:
                    1f:81:40:69:b7:a0:e2:51:b9:97:49:ec:2d:da:69:
                    cb:f6:e7:35:fd:bd:2e:55:65:44:64:ed:1f:a0:d0:
                    9e:9b:73:7d:b3:45:0a:12:5c:72:b0:f6:d1:71:d6:
                    cf:95:f5:cf:95:f5:c7:00:02:27:04:ae:9c:32:0c:
                    36:b9:3b:8c:8e:ef:35:6b:6f:d1:a6:b6:d3:78:a6:
                    98:40:dc:81:2b:16:c0:69:ae:6a:e9:1a:87:26:2e:
                    88:43:27:50:55:ee:dd:2c:9d:fb:b4:04:01:93:91:
                    23:93:80:85:e6:7a:3c:32:9a:81:7c:32:f3:0a:52:
                    6e:75:f5:8c:0e:d9:90:85:53:14:72:1a:dd:12:90:
                    96:5d:f7:41:db:9a:83:ae:6e:55:84:2c:d2:06:ed:
                    61:6b:12:23:4e:1c:1b:42:bd:4f:91:55:ae:43:4f:
                    b8:e1:16:3a:c9:aa:18:5b:ae:5a:60:f0:4b:a3:3c:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:E3:99:B1:FE:90:E1:F4:84:00:78:17:EA:86:30:92:71:3F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c3ad8c95-cb6e-3965-bf52-565884e2d606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:55:47:af:d1:ce:de:f7:73:b9:13:c9:dc:4e:6b:22:2d:57:
         7a:23:f2:94:e2:eb:53:56:94:23:1e:dd:42:3b:5c:32:b3:9d:
         1a:85:4a:e2:7f:77:e1:36:7d:e1:ef:75:1d:48:52:07:7d:31:
         9e:14:62:54:18:96:2e:45:3d:69:aa:87:7a:c8:05:04:a3:69:
         bb:8d:b8:cd:96:8b:9e:e8:6d:49:a8:98:86:75:d5:e2:2f:7a:
         3c:39:f6:27:9e:ad:2f:90:e1:ab:e5:6c:54:7b:91:b1:b9:9e:
         c8:3d:75:98:05:91:d8:6b:a3:e6:fe:25:00:09:ec:98:88:3b:
         cd:df:90:f2:83:a3:2f:aa:f5:50:57:96:dc:f0:fe:5d:96:9a:
         5e:55:77:36:a5:c3:01:22:e6:d0:98:19:d3:4a:51:a7:27:c7:
         5c:7a:96:f9:54:ac:81:a1:1c:8b:2c:a3:49:e3:66:b7:66:1d:
         82:9f:4d:76:4f:e4:fe:b1:09:af:5c:4f:d0:91:cd:b0:1a:6a:
         2e:5c:d4:3e:d4:f9:a5:56:ab:18:7a:21:18:c4:c2:3d:d3:f3:
         0a:d4:a5:44:1f:e4:c9:d9:a2:a1:73:f5:88:6f:49:f8:8d:b7:
         7b:cf:ed:6e:37:73:d3:d2:ed:f0:42:be:3a:6e:e5:9a:11:df:
         19:36:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----