Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa
File:                     b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa (raw, json)
Hash identifier:          3Mmn4T3VkKbPjodifrQNy2g6/h3QURIwcG74/YNv7kI=
Subject key identifier:   20:06:77:6B:F6:11:B1:60:86:E7:34:5F:10:21:4B:BD:8E:D2:7F:31
Certificate issuer:       /CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
Certificate serial:       010D0C9F43285843949B5252F11DD4F696ED9800
Authority key identifier: 4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa
Signing time:             Tue 17 Oct 2023 13:44:47 +0000
ROA not before:           Tue 17 Oct 2023 13:44:47 +0000
ROA not after:            Mon 15 Jan 2024 14:44:47 +0000
asID:                     13652
IP address blocks:        162.212.48.0/21 maxlen: 21
                          2620:12c:7000::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:94:9b:52:52:f1:1d:d4:f6:96:ed:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
        Validity
            Not Before: Oct 17 13:44:47 2023 GMT
            Not After : Jan 15 14:44:47 2024 GMT
        Subject: CN=a1acb99f-1a4e-4010-9f31-494a3a76b6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:c1:76:93:03:b4:0b:67:79:e3:69:40:b5:
                    72:39:c5:ab:2c:3e:82:77:e1:e3:0b:fb:70:4c:b1:
                    e7:d1:e3:6b:37:dc:20:46:5c:e9:c3:48:f4:0c:15:
                    3c:83:2a:55:ca:f2:62:08:23:e5:ee:3d:0f:4e:02:
                    64:28:c1:2c:fb:03:cd:87:f4:78:19:d0:d6:64:2e:
                    5d:3e:b6:7d:2c:88:3e:98:cf:63:ac:5b:63:02:98:
                    32:fa:19:57:c4:3a:86:4f:7f:fc:38:af:24:c6:57:
                    42:4f:e7:16:02:db:ab:07:5e:36:67:ed:78:d3:39:
                    32:60:82:a1:8b:ef:67:f9:dd:bc:bf:d2:df:c0:00:
                    99:f1:f8:c9:45:c7:74:85:db:78:40:32:9e:8f:c3:
                    99:c8:6f:2e:b9:79:90:ad:c5:d9:94:2d:96:39:28:
                    cc:84:6e:ab:c9:6c:ef:b3:52:a0:a4:69:6b:66:21:
                    d6:fd:75:56:b0:20:e4:60:8f:9c:62:fa:9f:17:72:
                    96:cc:01:a3:91:02:b1:be:45:20:7f:cd:32:6f:5d:
                    b9:f6:7a:34:5b:2f:42:c9:1e:37:8e:c0:39:d2:46:
                    5a:7e:b7:7e:9e:18:e3:51:ae:3b:44:f5:e8:28:34:
                    43:b9:a5:1a:ec:c7:b6:21:06:4c:ce:ac:94:b7:7e:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:77:6B:F6:11:B1:60:86:E7:34:5F:10:21:4B:BD:8E:D2:7F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl

            X509v3 Authority Key Identifier:
                keyid:4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.48.0/21
                IPv6:
                  2620:12c:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:a6:d5:03:27:4e:b3:27:95:f5:e0:35:88:70:4c:7c:f7:
         ac:40:f5:22:32:b8:33:c3:27:b0:bf:6c:a2:47:65:d2:07:c9:
         b1:80:e5:c9:ef:e8:94:9d:0d:b4:6b:94:3e:12:51:c6:23:4d:
         c1:f4:71:2b:69:82:07:48:9b:f4:cf:05:46:27:29:0a:70:96:
         38:ca:d2:ae:47:5c:9a:7d:38:86:70:82:2e:3f:61:b5:bf:04:
         f8:1f:20:01:62:4c:f1:0c:66:47:e8:9f:89:93:00:c8:31:12:
         09:24:69:a1:68:d5:bc:ce:c9:55:fc:f0:d8:32:e5:a6:54:b7:
         f3:11:91:33:f6:a6:26:55:70:e5:bf:d2:08:91:ed:fe:67:9d:
         fd:5b:2f:d8:d7:87:3c:ff:30:38:62:68:2a:09:b6:12:87:d8:
         69:59:d5:cf:cb:6b:f0:ba:99:6d:05:a7:5e:16:ff:98:33:e9:
         1e:b8:d8:4c:41:5f:78:53:ed:98:4c:ac:a3:67:94:a5:78:1d:
         48:37:2f:c6:1a:6e:4e:07:2a:e9:45:b5:22:87:f0:f1:0d:bd:
         6e:a7:e4:ea:8c:c8:ea:98:cc:1e:6d:d6:bd:53:53:ff:11:db:
         c8:09:f4:2c:f4:b5:3c:25:85:f9:ce:12:1f:fb:cf:03:38:4b:
         67:0a:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----