Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/45803b7d-6053-3633-8a55-cb492e208dcb.roa
File:                     45803b7d-6053-3633-8a55-cb492e208dcb.roa (raw, json)
Hash identifier:          wfbHHpfTg/wKD7gLxOJF5HDeCD6QQJ6BfCjC60ylhqM=
Subject key identifier:   81:37:E3:8E:E9:41:AB:25:4E:AC:9D:47:0C:0E:C1:17:BF:40:0B:A0
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285842531BBD2C258D80A614D78800
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/45803b7d-6053-3633-8a55-cb492e208dcb.roa
Signing time:             Sat 24 Jun 2023 09:53:15 +0000
ROA not before:           Sat 24 Jun 2023 09:53:15 +0000
ROA not after:            Fri 22 Sep 2023 09:53:15 +0000
asID:                     43260
IP address blocks:        64.186.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:53:1b:bd:2c:25:8d:80:a6:14:d7:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun 24 09:53:15 2023 GMT
            Not After : Sep 22 09:53:15 2023 GMT
        Subject: CN=0fdf3500-aabd-4c3d-bf6b-6dfaf60b1dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:65:97:30:20:49:3c:34:d3:4c:a1:8b:67:
                    50:78:ce:b5:11:76:26:83:56:9c:a3:fe:20:8e:78:
                    19:af:ac:8e:c5:c3:f5:8f:5c:b8:9d:cc:7d:ec:57:
                    05:bd:83:ee:ea:ee:c4:20:c7:6e:0a:bb:19:24:a6:
                    bd:eb:a1:dc:88:5a:e4:7a:cc:7d:d3:b9:ee:48:c8:
                    c4:f6:89:96:f1:cf:fe:fa:42:91:ea:30:38:a1:d2:
                    00:96:ca:11:dd:89:42:f8:42:de:b9:c1:10:66:5c:
                    dd:7d:92:bb:49:fe:76:ab:ba:73:9f:60:d5:44:4b:
                    45:09:c6:aa:b6:fe:48:fd:c6:4c:d3:01:e5:e0:13:
                    f4:1f:97:e5:57:a8:b4:1a:c7:c6:dc:27:21:c4:0c:
                    c0:02:e1:79:89:5c:2e:ae:75:2d:f7:50:c9:26:3b:
                    41:67:d1:ff:60:8c:7d:49:b1:c9:77:55:28:1a:04:
                    35:c2:7c:a6:ff:4e:ad:f0:b9:37:8f:ce:c1:59:e8:
                    ab:15:8c:a8:d6:68:69:39:43:d1:ff:73:36:ee:3d:
                    a0:f0:ce:59:59:91:f9:65:a7:51:a8:7c:c5:fa:74:
                    d0:94:ea:d4:c7:e0:35:61:dc:f8:18:85:5c:b1:ec:
                    f8:ba:8c:61:9c:23:2b:72:43:ba:b6:07:f2:39:d9:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:E3:8E:E9:41:AB:25:4E:AC:9D:47:0C:0E:C1:17:BF:40:0B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/45803b7d-6053-3633-8a55-cb492e208dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:22:05:bc:46:ed:db:8d:7f:6d:8a:d9:c7:55:25:db:34:
         89:0e:0a:20:f4:c2:5d:65:55:1a:68:f3:86:ea:0c:a7:dd:63:
         76:2f:eb:0c:f0:4b:e6:7e:33:fd:f8:d2:93:47:9b:11:50:7e:
         85:fe:78:da:3d:13:05:7a:29:3c:8f:4b:aa:2d:85:e1:9c:b0:
         de:91:be:57:5b:3c:e5:69:38:8f:47:05:4e:72:61:4b:8e:60:
         d3:de:b1:7d:8a:50:ad:01:34:c8:f6:3a:a1:3a:2f:5f:be:56:
         63:a2:9e:2a:08:11:04:5f:f2:eb:99:0c:14:17:e0:d3:2e:df:
         df:4e:7f:74:e1:a9:9f:34:f0:fa:31:4d:f9:7a:76:7e:11:6e:
         3d:66:e9:91:66:41:2f:2c:0a:40:b7:a8:45:84:e2:15:36:fa:
         94:ee:2b:dd:37:41:c3:74:65:d6:14:11:39:92:87:5c:66:81:
         ea:61:f4:97:53:09:ea:f7:b3:31:1d:8d:6f:e6:34:17:1b:bf:
         db:af:68:96:7d:b5:3b:58:ba:0c:22:3e:05:05:f8:73:21:61:
         43:95:01:d5:56:49:51:4d:d8:ae:4c:c6:48:b0:3b:14:4c:57:
         70:db:55:c6:48:fc:15:af:e5:e4:02:52:ed:dc:9b:2e:4e:96:
         0a:3b:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----