Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/85d927a2-a6d3-3b94-a86f-97e33d86a914.roa
File:                     85d927a2-a6d3-3b94-a86f-97e33d86a914.roa (raw, json)
Hash identifier:          LFq6AKDHaZmYWnyJr14/asK2R65pQp+M4FwUn21Li+w=
Subject key identifier:   5F:B3:2A:68:B2:58:25:A3:32:0D:55:FB:D8:0D:CC:96:7B:A0:0C:DC
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F43285842BD8E9A1010F245F3054E7D80
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/85d927a2-a6d3-3b94-a86f-97e33d86a914.roa
Signing time:             Tue 01 Aug 2023 13:00:19 +0000
ROA not before:           Tue 01 Aug 2023 13:00:19 +0000
ROA not after:            Mon 30 Oct 2023 13:00:19 +0000
asID:                     51722
IP address blocks:        128.254.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bd:8e:9a:10:10:f2:45:f3:05:4e:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Aug  1 13:00:19 2023 GMT
            Not After : Oct 30 13:00:19 2023 GMT
        Subject: CN=ee252e20-a0e9-438c-8272-3514f2a0e9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:da:5c:5c:4b:91:ad:c9:5e:b7:ce:fe:20:
                    38:e0:35:76:0f:f7:61:92:48:05:fd:69:69:3c:38:
                    05:52:bd:fe:31:b8:0b:4f:1a:c5:cc:db:d0:da:52:
                    8b:8f:f0:9b:33:59:b3:60:2a:95:9b:9c:47:b2:aa:
                    24:6e:fe:87:9b:a1:e4:c8:89:76:26:e0:65:e4:9d:
                    c2:a2:e7:d4:3d:93:48:26:6b:db:04:ca:c4:11:6e:
                    2c:8c:a7:17:91:2a:ce:55:77:f1:ef:f5:6a:b1:70:
                    c3:04:a9:31:fe:f4:8b:85:41:99:83:51:11:8f:e5:
                    09:06:98:64:c2:53:3a:a0:f6:e0:09:af:19:83:7e:
                    66:b1:14:e9:53:15:33:fc:6f:35:68:a6:68:17:33:
                    4a:d0:60:58:ac:cd:41:92:77:0d:9f:b5:09:25:f0:
                    e0:bf:77:86:c9:78:e2:c9:49:3a:70:64:11:81:f2:
                    16:77:59:7b:20:8f:13:6e:45:83:2b:19:34:22:30:
                    cb:b9:35:90:78:d0:d0:82:bc:45:b1:3a:da:8c:1f:
                    ad:86:a4:d0:5b:39:97:c3:ed:14:45:70:f3:59:80:
                    0c:11:c3:ed:22:9b:db:5c:52:5c:b8:65:ae:09:fa:
                    3d:30:0b:e5:25:e1:8b:a6:c1:b9:89:c2:b9:0b:85:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:2A:68:B2:58:25:A3:32:0D:55:FB:D8:0D:CC:96:7B:A0:0C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/85d927a2-a6d3-3b94-a86f-97e33d86a914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e3:ff:2d:ca:6e:9a:88:49:b0:2f:04:74:5f:1c:0a:51:ff:
         ac:9f:f1:6a:a1:f7:93:c9:dd:3f:98:ec:76:4b:31:58:04:0c:
         da:b4:ef:fa:12:f7:35:57:b1:98:cf:9d:aa:65:4a:2d:2c:d1:
         8e:32:00:12:4d:ec:db:ea:99:5a:1c:10:48:09:cf:c5:52:7e:
         16:f0:99:42:6e:15:cc:78:7c:c8:e1:ee:ee:64:f6:03:39:23:
         92:fc:46:fe:d1:86:89:4c:73:2e:a2:4e:d7:b7:26:53:d0:32:
         24:66:81:d6:51:10:85:98:0a:82:b3:aa:c9:64:b5:e9:8e:3a:
         79:51:7f:ac:46:19:f7:ab:44:ab:ed:18:47:71:3c:49:0b:96:
         d9:b5:5d:67:85:f3:1c:5a:c2:0b:fa:77:ac:e3:a7:32:f7:21:
         c1:78:d6:94:63:30:0d:b6:7c:9f:dd:4c:69:9f:52:05:71:40:
         2d:75:a2:73:b2:78:c6:f5:af:ee:1a:cd:54:30:99:df:ce:b3:
         2d:3b:12:38:37:ce:6c:e1:b4:48:42:8b:99:2f:91:7e:45:f8:
         e5:7e:3e:5c:e4:16:1f:2f:db:70:48:6b:dd:10:5d:2f:4b:a2:
         4a:54:2e:91:c7:10:80:71:40:3c:96:bf:cc:a8:d2:ff:5b:a0:
         25:a8:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----