Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/954a70d7-9124-3843-b892-bc0db8448c5f.roa
File:                     954a70d7-9124-3843-b892-bc0db8448c5f.roa (raw, json)
Hash identifier:          +JWVtVW8TN2pjAfl/2hCtZ5Z+G+EZ/GdCY75vC/1zbE=
Subject key identifier:   B8:1B:7F:A1:C6:73:35:BE:20:49:85:81:68:09:6A:98:65:0A:AD:0C
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F43285842F4A157E12FDD89D7C585A6C0
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/954a70d7-9124-3843-b892-bc0db8448c5f.roa
Signing time:             Mon 21 Aug 2023 06:27:35 +0000
ROA not before:           Mon 21 Aug 2023 06:27:35 +0000
ROA not after:            Sun 19 Nov 2023 07:27:35 +0000
asID:                     211014
IP address blocks:        128.254.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f4:a1:57:e1:2f:dd:89:d7:c5:85:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Aug 21 06:27:35 2023 GMT
            Not After : Nov 19 07:27:35 2023 GMT
        Subject: CN=b0224df7-dbc5-479a-ae95-89d73771bbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:06:0f:90:1a:3f:68:9c:26:cd:67:86:1a:
                    53:5c:06:27:05:8e:49:22:93:b0:53:4a:e7:6e:4c:
                    c6:a6:5d:ae:f9:23:12:32:b5:48:1d:1a:86:1c:49:
                    54:a7:bf:98:2e:57:2d:f2:aa:10:32:23:1f:55:e5:
                    d8:a1:0d:f1:ce:30:8e:44:8c:d7:ae:f0:b5:ce:87:
                    db:37:51:d3:2a:cd:21:72:27:40:61:97:9e:9e:dc:
                    b2:5f:c8:00:27:e6:66:d0:ec:d2:b3:84:c4:6a:1b:
                    9a:cb:b1:73:16:f3:d7:34:f5:cf:25:41:ba:62:02:
                    3d:41:53:3b:cf:d4:cc:f5:ed:63:0f:39:58:8f:6a:
                    de:3a:e4:38:ac:43:a1:be:b9:63:c1:af:5e:bd:c5:
                    f8:76:26:91:3f:7b:75:78:f7:3a:53:e9:77:04:48:
                    1f:b1:a4:99:11:00:0c:e6:f8:2a:66:61:2f:e5:35:
                    61:c0:4a:06:95:70:5c:5b:99:2b:78:52:87:27:a3:
                    f8:44:8c:5c:30:51:f2:73:50:ec:32:e6:05:10:19:
                    54:e2:f0:a8:58:6e:14:c9:59:0f:14:44:c5:f1:e0:
                    a3:f7:08:f9:fe:db:fe:2a:b5:a1:98:2d:4f:14:70:
                    ab:d6:55:6c:e2:b2:54:de:9e:a3:2a:da:91:3c:5c:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1B:7F:A1:C6:73:35:BE:20:49:85:81:68:09:6A:98:65:0A:AD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/954a70d7-9124-3843-b892-bc0db8448c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:87:af:7c:e8:f9:d7:24:fd:bf:f9:27:ad:fc:7c:78:15:69:
         70:5c:c4:ec:73:1b:4e:49:88:0c:5b:72:78:92:fd:5b:dc:2e:
         9b:75:48:c4:08:8b:7d:55:71:88:7e:50:e2:60:a9:e7:5a:4f:
         1d:3a:6f:32:bc:92:70:33:cf:47:9b:55:bf:6e:b0:a7:da:93:
         85:5b:ea:cc:b9:f9:71:7d:d3:be:69:e2:13:05:28:83:82:2e:
         d5:9a:39:c4:ee:49:da:29:1e:d4:61:6c:6d:c8:c1:6e:84:c8:
         71:20:75:c1:ce:03:cf:64:09:b4:cf:8a:9b:57:4e:c6:a9:8d:
         e0:ef:fa:dc:09:3b:b2:2c:97:60:5a:77:51:4b:7e:f2:cf:61:
         05:e2:88:d7:29:f7:87:d0:c3:04:15:48:c8:78:58:13:08:9e:
         d3:aa:e7:e0:d8:31:3b:67:f8:24:1a:d1:c5:78:4e:d7:1f:26:
         39:5a:55:ac:b1:84:35:0d:d1:1d:e2:d6:50:9a:dc:f6:86:e1:
         11:a6:9c:c3:23:bf:0f:b9:27:90:20:d9:15:8e:6b:40:e7:8f:
         f4:f9:61:d0:15:57:4c:60:59:0c:b5:23:64:ed:0f:fb:ea:2c:
         0a:b3:b8:38:1e:fc:e6:3e:54:e9:b0:d7:aa:6f:81:fd:3e:0e:
         63:0c:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----