Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/80057de9-b791-364b-b73c-f9f7102c56c3.roa
File:                     80057de9-b791-364b-b73c-f9f7102c56c3.roa (raw, json)
Hash identifier:          17V4Ia42foenspBHA/ggDjLi9JYZP3leKVymjQYQJyg=
Subject key identifier:   49:2A:B7:30:8E:AF:85:87:8C:7D:E0:39:B1:C5:9E:3C:60:3C:82:E6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E1A3611C04ADABE902100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/80057de9-b791-364b-b73c-f9f7102c56c3.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 20 Jul 2023 09:45:25 +0000
asID:                     1299
IP address blocks:        206.206.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:1a:36:11:c0:4a:da:be:90:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 20 09:45:25 2023 GMT
        Subject: CN=48c2a233-1cca-4b24-890a-4ca07b287fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:20:14:fc:4b:f9:3e:dd:b2:d6:93:7d:64:
                    dc:3d:a4:80:fc:48:65:a7:83:a3:b4:c5:1a:06:e8:
                    4b:7c:c5:af:fe:71:89:9b:40:f8:b8:f4:78:15:15:
                    31:f4:de:9d:de:6e:ca:41:47:f5:ab:a0:39:96:ec:
                    5e:e3:e0:0c:d4:c3:ba:3c:97:1a:ae:3b:9a:d2:56:
                    7e:f6:3f:00:14:2e:fd:8a:1c:cf:c0:57:78:84:cc:
                    b4:80:61:4e:f3:10:7a:81:22:98:69:c7:4a:6c:42:
                    e9:71:a1:b2:bc:34:b4:c2:df:a6:14:23:be:bd:3e:
                    72:1e:02:0d:0c:2f:ff:31:f6:5e:6a:4f:05:96:b0:
                    ac:34:2d:65:4a:26:03:87:4e:ca:4c:a7:12:4b:8c:
                    46:8a:6a:bc:fe:20:df:bd:6c:aa:5a:87:6b:d0:4e:
                    92:80:a3:4e:20:51:79:58:e5:36:62:84:5a:e1:ab:
                    84:c7:f5:74:e3:53:d0:5a:7c:c7:7f:0c:f6:3d:ce:
                    99:b2:42:99:58:8c:66:87:39:37:8f:03:5c:e5:d7:
                    05:30:9f:61:a8:e5:49:f0:b1:2a:44:ae:0f:f4:ec:
                    33:aa:81:fe:f4:7b:3e:43:39:e9:ab:4b:84:6e:f7:
                    1a:53:75:77:80:17:e6:c2:48:cc:f7:aa:a1:f0:b3:
                    d0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2A:B7:30:8E:AF:85:87:8C:7D:E0:39:B1:C5:9E:3C:60:3C:82:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/80057de9-b791-364b-b73c-f9f7102c56c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:cc:79:28:92:c2:22:2d:95:65:42:b7:13:1b:f7:66:11:
         54:63:59:b4:bf:a6:89:bb:87:bd:f2:a2:fa:f8:90:7d:f7:01:
         b4:26:f7:a6:e1:83:29:ab:c3:8a:14:64:ec:95:12:58:be:dc:
         a7:99:b4:00:e4:76:82:3b:81:4f:cb:8f:79:5e:24:ea:34:85:
         d6:1e:7d:e3:85:7c:d9:8e:e8:98:01:bf:c7:10:1c:b7:67:ff:
         70:54:ad:29:53:0b:4f:d2:9d:56:29:82:d9:96:3c:44:17:43:
         89:28:59:47:d4:d5:dc:64:11:33:43:95:d6:4a:03:05:cc:d3:
         e2:66:95:c9:3a:cc:08:a7:d6:ec:8a:16:a5:10:99:4a:ba:d3:
         7f:a2:db:61:b2:4a:b3:8d:3a:63:3c:9d:e5:8e:50:5d:77:90:
         7a:f6:e5:6d:01:48:68:f2:7d:17:3b:07:ce:1d:4f:f7:81:65:
         50:3a:d2:69:cb:b4:93:93:26:b4:8a:23:70:f0:43:b2:1a:89:
         e9:84:0b:9a:b6:b6:3d:d5:24:db:48:22:1f:3d:d7:0e:ce:03:
         04:e6:c4:88:ca:ec:8f:9c:0a:b1:44:1c:2c:ef:df:bf:f6:3d:
         f3:59:3f:89:c5:0d:35:b3:10:d0:ec:ea:df:39:f1:0a:ff:51:
         95:9c:e5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----