Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/05f9865e-4f91-310e-a95b-badbde67b2bd.roa
File:                     05f9865e-4f91-310e-a95b-badbde67b2bd.roa (raw, json)
Hash identifier:          BW0srYlmTokNA66UKEeC8990FsVrJYSBYggPdUBq8XU=
Subject key identifier:   E7:90:2A:67:75:E4:72:CC:A7:D8:23:92:72:17:29:19:74:2E:1D:90
Certificate issuer:       /CN=c966e577-4964-41bf-aced-835168bef4f1
Certificate serial:       010D0C9F43285843CB629632F71B2103565493E0
Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/05f9865e-4f91-310e-a95b-badbde67b2bd.roa
Signing time:             Mon 06 Nov 2023 04:39:56 +0000
ROA not before:           Mon 06 Nov 2023 04:39:56 +0000
ROA not after:            Sun 04 Feb 2024 04:39:56 +0000
asID:                     295400
IP address blocks:        168.123.132.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cb:62:96:32:f7:1b:21:03:56:54:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1
        Validity
            Not Before: Nov  6 04:39:56 2023 GMT
            Not After : Feb  4 04:39:56 2024 GMT
        Subject: CN=c10aa155-95a8-4cad-badf-72985fa9f245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:87:f6:b5:b6:12:80:56:b1:46:6b:67:9e:
                    37:2b:41:fb:52:84:7b:87:99:70:91:c3:1e:ec:39:
                    76:bc:51:d0:aa:7d:c4:ac:9b:47:1b:8d:dc:a7:6f:
                    85:4a:11:08:9a:74:c0:92:28:6b:cf:69:f4:71:af:
                    9c:dd:72:72:98:f1:27:3e:a3:70:3d:5f:d8:83:b3:
                    c1:55:ca:7f:4b:9c:29:6b:99:1e:cc:70:41:8a:5c:
                    fa:1a:d6:b5:1c:3f:3d:6f:b3:05:32:74:13:10:2a:
                    be:1d:cf:a9:bd:35:a3:ea:83:ae:ca:76:26:01:73:
                    00:c7:bd:c4:a8:34:33:5a:39:a3:25:e7:e3:a5:e5:
                    78:c9:44:43:49:5c:21:da:0f:21:da:41:60:0a:54:
                    78:cc:72:26:2e:0b:ad:3d:5f:bf:7b:ea:96:0c:82:
                    38:b9:90:d5:3c:b2:b7:d0:7a:aa:08:10:d1:01:f7:
                    f3:c6:f3:1b:b2:27:fa:6f:32:2f:a0:87:ab:61:56:
                    a1:59:1c:8f:93:57:e9:53:7a:e9:07:e0:9e:f8:10:
                    51:ed:47:5d:dc:65:00:b9:2d:fa:3c:49:50:2f:12:
                    38:87:c1:7a:d5:fb:4a:05:b9:b4:38:e8:a2:71:0a:
                    4b:c5:31:03:c5:e4:7d:3a:a0:43:2e:0c:1e:31:9a:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:2A:67:75:E4:72:CC:A7:D8:23:92:72:17:29:19:74:2E:1D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/05f9865e-4f91-310e-a95b-badbde67b2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl

            X509v3 Authority Key Identifier:
                keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.123.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:89:7d:ea:59:73:35:26:d9:46:8b:85:ea:99:ff:72:55:64:
         df:cc:82:df:9b:5e:73:4e:56:58:a2:62:98:28:a2:76:ac:aa:
         ab:ac:14:45:34:64:dd:5c:a4:fc:88:22:df:96:90:8a:47:1b:
         99:ed:f9:46:52:88:4a:a6:55:41:30:7f:14:82:35:e5:3b:ae:
         50:77:2c:d2:9d:e0:39:b0:c4:1f:e9:f6:23:83:73:fa:f9:84:
         e6:c3:b9:77:46:76:ae:39:9f:be:50:49:a6:4d:78:61:02:2e:
         9a:80:6d:3e:73:db:a8:28:7d:67:25:75:6b:26:a0:f6:5a:31:
         4b:a5:b0:cd:41:44:dc:ca:47:77:45:c8:f4:b6:02:ce:8a:6b:
         68:ea:f4:fb:d0:cd:26:a3:64:3b:49:a3:a6:90:30:a3:38:d4:
         03:2d:b0:53:09:d7:3f:c4:d7:d9:6a:6e:54:55:09:7c:bc:87:
         9d:46:73:b9:5a:11:7c:24:89:68:cf:b1:1a:ec:71:93:70:70:
         55:90:e0:98:e6:96:ab:ed:6b:17:02:90:b0:02:b9:56:74:95:
         04:97:52:4a:73:cd:8c:cc:00:71:29:20:17:9a:9c:ab:e4:68:
         21:00:e9:10:ad:41:25:a1:57:75:95:7b:56:ec:3a:cb:76:39:
         44:20:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----