Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b5e9a97-e2fd-3b84-8002-85ab87909b55.roa
File:                     9b5e9a97-e2fd-3b84-8002-85ab87909b55.roa (raw, json)
Hash identifier:          /yA6TBEdTxczfenryRZZ4MwXF7jegBtbQ5yO26wCSzk=
Subject key identifier:   87:38:E9:F6:B9:E5:1E:8B:2B:DC:DE:B5:B0:8B:F3:5E:30:F6:6D:1D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858435AD6E029363E996CAC909F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b5e9a97-e2fd-3b84-8002-85ab87909b55.roa
Signing time:             Tue 26 Sep 2023 21:07:54 +0000
ROA not before:           Tue 26 Sep 2023 21:07:54 +0000
ROA not after:            Mon 25 Dec 2023 22:07:54 +0000
asID:                     397222
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5a:d6:e0:29:36:3e:99:6c:ac:90:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 26 21:07:54 2023 GMT
            Not After : Dec 25 22:07:54 2023 GMT
        Subject: CN=1ee39ed4-a32f-41ab-950e-00829d6661ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:8a:e6:64:10:b2:81:94:aa:16:8c:e3:5e:
                    46:77:3c:54:24:ff:79:5e:13:dd:1e:17:85:24:65:
                    69:4b:79:d0:9e:d4:58:96:92:e4:1a:dc:21:39:41:
                    a5:70:51:07:19:20:51:b4:e2:0f:4e:b5:81:d9:0f:
                    fe:74:d8:b6:72:62:e6:41:87:71:c4:62:71:cd:94:
                    0a:b1:33:dd:60:c0:d9:da:54:e0:e3:64:dc:54:85:
                    38:58:38:10:7e:0d:52:62:fb:c8:e8:11:3f:a7:a2:
                    1e:7b:e7:0b:64:4a:99:f7:8d:91:5f:5d:37:87:36:
                    ae:75:27:fe:b2:34:08:df:de:73:35:0f:1b:51:4f:
                    06:b9:64:20:44:c5:fa:fb:bc:35:a8:8a:17:43:be:
                    05:f5:f2:c9:fb:9a:e3:2f:91:00:66:62:48:56:b3:
                    82:1f:92:d6:19:62:f6:48:b9:f5:58:e6:82:4e:df:
                    6a:45:57:8d:09:21:31:82:7d:39:6d:62:2f:f5:f4:
                    63:2e:6b:1e:33:74:3a:c0:f6:38:b3:f1:28:a1:d4:
                    e4:0b:c2:15:57:3a:3b:24:65:94:f7:b7:04:8a:ce:
                    cf:fa:30:03:34:b1:77:bf:b8:67:0c:2a:b0:03:e4:
                    2b:f8:86:ee:96:8f:49:34:ce:34:8c:d0:fd:d4:f9:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:E9:F6:B9:E5:1E:8B:2B:DC:DE:B5:B0:8B:F3:5E:30:F6:6D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b5e9a97-e2fd-3b84-8002-85ab87909b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:75:0f:78:1e:fe:26:37:d3:7b:78:ee:61:c7:5f:47:48:fa:
         b7:5b:ad:db:1e:7d:1c:4d:70:00:9d:44:06:68:3c:af:1c:19:
         21:7d:26:20:cf:d4:23:1c:6a:2b:d6:c5:57:4a:37:df:af:f5:
         85:0c:18:2c:d5:a0:17:e6:76:ad:59:c0:d9:ad:93:0b:2c:f4:
         9f:8d:ba:59:2b:6d:6a:e4:94:78:aa:80:3c:71:98:62:84:d7:
         43:79:d1:45:44:20:42:66:2d:6d:74:e9:fc:fb:50:22:ce:70:
         fb:ae:72:cd:14:18:80:70:04:1b:42:f1:f9:32:cb:3e:aa:10:
         86:0b:94:10:42:ae:d8:d3:2d:f7:52:81:17:89:43:86:de:b5:
         67:81:c4:43:78:12:53:74:58:8c:66:21:6d:d9:40:66:2d:a5:
         87:25:67:4e:c0:e7:b7:a9:ec:22:00:51:df:5b:5e:8d:0e:3e:
         5a:63:b4:0b:8c:10:c8:57:03:97:8f:13:24:51:bb:a4:79:d4:
         b4:91:b8:59:92:94:6c:db:07:32:af:30:9f:22:37:64:1f:df:
         38:9c:3b:28:5d:99:6a:46:a8:29:fe:d5:bb:4e:07:85:b7:9a:
         71:51:e3:3b:61:59:8f:dc:5c:1f:50:51:ee:67:30:49:a6:93:
         2a:d5:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----