Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/eaf6e7de-54fe-3374-8c39-a3c6a36abcc4.roa
File:                     eaf6e7de-54fe-3374-8c39-a3c6a36abcc4.roa (raw, json)
Hash identifier:          gFgrIL3uTxRAoh5z1BynKMqqj8qkFA4MvlIQzZsuh+M=
Subject key identifier:   2A:DE:C7:C7:EC:37:A4:BF:C7:13:94:24:28:C7:4F:7B:4D:85:72:61
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F43285841E340AF8D9AEBF91FF22F4A00
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/eaf6e7de-54fe-3374-8c39-a3c6a36abcc4.roa
Signing time:             Mon 15 May 2023 08:17:09 +0000
ROA not before:           Mon 15 May 2023 08:17:09 +0000
ROA not after:            Sun 13 Aug 2023 08:17:09 +0000
asID:                     16509
IP address blocks:        134.65.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e3:40:af:8d:9a:eb:f9:1f:f2:2f:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: May 15 08:17:09 2023 GMT
            Not After : Aug 13 08:17:09 2023 GMT
        Subject: CN=a17f931d-a04f-406d-925c-4dd021c13aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:97:3c:ca:f3:2e:e4:f9:dc:2e:9a:ab:e9:
                    57:6a:42:0c:d9:d6:74:d7:50:13:ad:16:33:02:3e:
                    30:d9:a9:b6:86:d6:1e:f2:2d:d2:ed:12:16:68:fb:
                    c3:e5:98:5c:c7:7d:54:24:4e:f0:0d:7c:ec:95:e3:
                    a3:75:ae:92:73:23:68:18:8f:03:c5:21:aa:11:5d:
                    a2:10:6a:83:f8:58:b3:14:a6:66:98:7d:7b:e9:69:
                    b1:ae:ce:c0:e6:00:90:49:db:db:77:81:b0:1d:8d:
                    1b:dc:e5:1c:ed:01:84:a4:32:93:b4:53:57:73:b2:
                    cd:27:35:b6:9a:fe:2c:a4:b6:15:94:ec:56:67:8c:
                    bd:b3:e3:c9:f0:f9:c7:1a:2a:75:51:1a:4c:98:8c:
                    f3:ee:df:24:0d:29:cb:e1:20:e8:b7:a4:1a:44:96:
                    4d:69:3a:4d:43:3a:32:10:f4:5a:78:c1:fc:c1:3b:
                    c0:af:99:31:ad:68:66:b8:7e:16:75:71:a4:89:36:
                    45:6a:b8:01:31:52:31:fd:ac:cc:92:27:b2:a4:e0:
                    5d:1a:41:a0:1a:d4:8a:ee:ce:b3:e3:e4:21:a5:6e:
                    8c:3f:2a:9a:53:29:51:7e:73:e9:e0:9d:98:9b:b3:
                    e4:b8:c2:1d:0e:60:56:b6:a1:b2:69:6f:dc:80:6f:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:C7:C7:EC:37:A4:BF:C7:13:94:24:28:C7:4F:7B:4D:85:72:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/eaf6e7de-54fe-3374-8c39-a3c6a36abcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:41:23:c2:2b:8e:f6:77:87:53:9c:11:76:e4:0e:da:98:57:
         1b:c7:70:2c:f6:e0:fd:3e:8e:76:1e:ae:1e:b5:ad:af:58:3e:
         5e:f9:89:ba:e8:34:1b:95:bd:b5:41:69:c9:51:8e:10:c8:69:
         15:40:cd:eb:65:86:eb:d2:11:3b:e2:18:b1:aa:23:10:98:ba:
         74:6a:e4:ca:9d:a0:b5:bb:10:df:85:cf:40:f8:69:b1:db:3c:
         d3:95:28:52:ba:fb:a4:3d:25:78:e5:11:81:e0:bd:35:5d:00:
         2f:d6:71:ea:94:23:38:a0:e4:4d:5b:65:b0:a5:bc:86:36:6f:
         00:3b:3b:f1:0f:5e:0f:b3:90:f5:50:49:d3:52:1d:03:c1:ab:
         68:7d:1a:88:ea:d0:c7:f0:23:c6:e7:d8:e5:fa:b1:27:df:c4:
         bc:49:aa:a8:a5:ca:d6:aa:a5:50:af:62:8a:ed:e9:f7:c7:46:
         5a:48:22:da:b7:51:7a:40:3a:6d:2a:04:d9:04:f0:4c:7f:41:
         64:8e:e9:4d:7c:b9:65:81:48:80:b2:f3:43:5c:c9:c9:97:ef:
         2b:b4:76:0a:af:0e:66:51:de:55:67:d3:21:fb:00:86:7d:76:
         70:5a:9a:a5:76:87:d7:92:f0:6e:04:ed:a4:47:db:43:f1:6b:
         e5:e2:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----