Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/bd01bc49-5130-3fe4-b99f-ab7c6a2e04db.roa
File:                     bd01bc49-5130-3fe4-b99f-ab7c6a2e04db.roa (raw, json)
Hash identifier:          /9hY13tI/r6GwSf/MSsc3VlTbjsSls1Yay3YFO1lSNw=
Subject key identifier:   6C:4A:B5:08:63:8B:9A:C2:E5:FE:84:00:0C:93:48:A5:43:1B:FD:AF
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285841E471B2E772C06DF2497D00E0
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/bd01bc49-5130-3fe4-b99f-ab7c6a2e04db.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Wed 02 Aug 2023 13:56:48 +0000
asID:                     134098
IP address blocks:        207.174.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:b2:e7:72:c0:6d:f2:49:7d:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Aug  2 13:56:48 2023 GMT
        Subject: CN=f7c5211c-ea69-46b2-b4fc-2df266b795c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:88:c7:5a:0c:b2:0e:a8:43:7d:7a:1a:a7:
                    1b:69:ec:a7:1b:ca:d8:79:9d:e8:44:19:bd:c8:c6:
                    1d:e3:b5:b7:2c:74:2f:06:0b:00:80:0f:d4:58:2e:
                    44:8b:42:1a:06:db:06:55:df:ea:d8:33:a1:17:ed:
                    df:ab:43:87:2c:07:fc:f8:61:dc:10:72:f4:1f:c8:
                    2b:bf:73:eb:1e:5f:1e:0a:66:46:6e:eb:08:69:84:
                    4d:7d:de:42:64:1e:50:48:f4:c6:ff:0e:57:19:fb:
                    18:d7:9e:76:6c:80:60:55:f5:42:2c:e6:f7:6b:a3:
                    be:50:24:77:01:06:b7:ea:e0:33:d5:68:06:4e:26:
                    8f:f9:f7:a0:5b:f2:6e:11:ab:1b:7a:28:56:b4:0d:
                    b6:f5:ed:b0:40:6e:58:0e:10:14:93:01:df:7a:16:
                    75:84:9b:1a:b9:8a:40:a0:31:39:46:0d:18:31:0d:
                    41:36:62:93:33:68:ff:11:82:28:cf:b8:cf:27:78:
                    1f:35:54:9f:b2:34:be:48:71:0d:ce:74:f1:f4:47:
                    4d:69:43:ca:c0:88:ee:a6:6b:4f:59:c4:64:ee:3d:
                    47:d2:f2:37:ea:06:86:a0:17:d4:2a:5e:92:d5:02:
                    e9:4b:de:70:da:c4:6a:df:22:b1:69:b8:13:7b:c1:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:B5:08:63:8B:9A:C2:E5:FE:84:00:0C:93:48:A5:43:1B:FD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/bd01bc49-5130-3fe4-b99f-ab7c6a2e04db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:46:86:0f:6d:b0:bf:bb:58:fe:ca:bb:e2:b0:d6:10:2d:
         a3:be:1d:ea:15:0a:2c:11:74:db:59:4b:1b:f8:9f:aa:bb:3b:
         eb:3c:0d:ec:dc:6c:d1:b6:96:09:3e:f1:ff:a6:44:ac:d7:d2:
         f3:22:ba:d3:58:92:48:e0:ba:19:d3:87:58:90:0f:42:f1:1f:
         65:37:7a:bb:b0:e7:74:6d:8e:1f:df:af:2f:7b:b7:52:ff:82:
         fb:34:5b:50:3a:d9:e4:6c:b9:00:18:01:dd:21:c0:01:3a:ef:
         d4:c1:ab:49:d7:fc:2e:98:97:d9:e0:74:06:f3:b0:c1:f5:86:
         b0:d3:2a:68:4f:98:cd:96:23:cb:f0:d1:92:c4:2b:ea:21:62:
         f4:6c:9b:21:00:48:f9:f8:48:4e:02:d2:a7:97:8c:8f:f6:59:
         6a:f8:1d:26:a5:0a:c1:78:bf:ce:7d:df:e9:05:07:a4:61:b2:
         a2:6b:ed:d1:da:c7:86:58:59:5a:c1:40:ae:7e:c0:bb:ea:da:
         2e:70:d5:8a:13:5e:8f:29:43:9a:50:28:ef:eb:2f:e5:06:6a:
         10:4b:7b:26:2d:7c:2c:4d:eb:fb:7c:7c:1d:6a:f0:6d:bf:c0:
         6a:5a:1d:ae:a9:e8:c7:e4:02:86:e6:fc:de:9a:b9:61:6c:fb:
         49:22:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----