Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/af873720-bed6-364c-8037-944246a16004.roa
File:                     af873720-bed6-364c-8037-944246a16004.roa (raw, json)
Hash identifier:          Ju1nSepnDacjGgnuAJw/w7b4AS0GP9X2fiigoEPXVzs=
Subject key identifier:   EE:9C:38:80:6A:A9:21:8C:89:D6:D8:F9:21:DD:6D:78:44:BB:5F:99
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F4328584161070CD0807AAB95A19D42C0
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/af873720-bed6-364c-8037-944246a16004.roa
Signing time:             Tue 28 Mar 2023 20:35:59 +0000
ROA not before:           Tue 28 Mar 2023 20:35:59 +0000
ROA not after:            Mon 30 Jun 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        199.73.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:61:07:0c:d0:80:7a:ab:95:a1:9d:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Mar 28 20:35:59 2023 GMT
            Not After : Jun 30 04:00:00 2025 GMT
        Subject: CN=08114664-1b97-49bf-be45-5cfd638d0433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:3f:4a:94:af:7c:fa:2c:75:d0:12:1c:dc:
                    47:6c:3d:81:6a:96:bd:ab:94:40:20:88:26:38:3c:
                    cb:a6:d1:ef:60:30:12:c8:f2:fb:cd:f5:2d:25:d7:
                    45:0a:cb:a6:30:36:4e:77:8a:9d:fc:67:af:68:b6:
                    ad:a1:1b:4c:70:39:7b:56:aa:3b:8b:29:7a:a6:80:
                    93:a6:39:15:81:61:f9:90:68:f7:53:49:ea:8b:74:
                    5a:17:c2:5f:31:06:8f:2d:8e:12:14:dd:9f:73:5c:
                    ad:2b:4a:2a:9b:9e:fe:2c:60:6e:20:4b:8a:f3:f3:
                    46:fe:40:9b:25:d8:3e:5e:46:94:27:fe:bd:c1:93:
                    38:7a:7c:dd:4b:ea:6b:e1:be:ad:df:86:31:c6:13:
                    8b:65:eb:2b:36:24:5b:c1:ea:1a:17:7f:05:76:74:
                    21:98:f5:e4:5a:d7:c4:cd:94:06:79:31:f9:b6:ec:
                    30:db:07:17:20:44:93:10:d6:d8:41:23:5f:6a:87:
                    2f:7b:83:00:04:d9:d4:1b:88:ac:c1:04:54:43:c7:
                    79:1e:bc:18:02:72:d2:4c:db:40:fe:62:aa:a1:58:
                    72:51:ae:64:61:2b:13:91:af:36:66:2e:82:d3:b3:
                    6b:b9:31:c3:e0:a7:75:9c:cf:81:e3:0b:85:45:cb:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9C:38:80:6A:A9:21:8C:89:D6:D8:F9:21:DD:6D:78:44:BB:5F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/af873720-bed6-364c-8037-944246a16004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:43:71:53:5f:71:84:ec:01:f1:32:15:b5:db:0e:7e:fb:81:
         4b:e4:32:9c:20:8c:df:31:31:2d:64:ba:f6:49:97:cf:da:c7:
         04:88:5b:b1:f8:8f:e2:39:ea:bb:a8:12:63:14:52:84:99:a3:
         bb:6f:2b:07:c6:af:b3:73:6c:f2:ee:2f:ac:46:f4:38:e9:78:
         fe:c4:f1:e9:67:d7:df:e0:78:37:74:b8:be:e3:e4:bf:0f:de:
         21:01:b5:47:f0:df:be:dd:84:33:cf:37:81:eb:ea:6e:99:9b:
         af:e0:df:b9:35:49:d8:09:50:cd:cc:73:48:60:a2:f8:53:24:
         ea:51:5b:dd:da:9a:86:87:bd:d5:13:8e:4c:a4:d0:6f:71:02:
         a1:15:dd:da:d1:22:37:5d:b0:07:d2:88:75:17:1f:44:31:66:
         0d:bb:61:23:70:00:4d:5b:a3:4e:2e:d6:31:ea:f3:d4:f7:53:
         45:13:1a:f2:4f:07:88:d3:db:9f:b7:d5:23:2d:3f:5c:0d:63:
         ec:b4:25:4f:ce:8a:e9:fa:5e:02:f7:68:ee:fe:a2:fb:3f:bc:
         8a:92:a1:41:7a:a7:ea:20:0d:2e:5b:63:63:ad:e3:d9:a5:cc:
         c5:52:9a:20:f0:c3:e3:d7:a8:23:fa:4d:77:c4:8f:70:47:6b:
         a8:00:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----