Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa
File:                     c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa (raw, json)
Hash identifier:          RzhBCIoQaQH65pJcUJzUhCVE10x/GK8BPhsPrTnGSpk=
Subject key identifier:   02:48:2D:2F:0F:CB:F9:DD:AF:0C:00:E1:4A:CC:8F:40:B2:A1:00:A8
Certificate issuer:       /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial:       010D0C9F432858425D3E037DDEEC86799F111AA0
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa
Signing time:             Wed 28 Jun 2023 01:00:17 +0000
ROA not before:           Wed 28 Jun 2023 01:00:17 +0000
ROA not after:            Tue 26 Sep 2023 01:00:17 +0000
asID:                     3477
IP address blocks:        140.90.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:5d:3e:03:7d:de:ec:86:79:9f:11:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
        Validity
            Not Before: Jun 28 01:00:17 2023 GMT
            Not After : Sep 26 01:00:17 2023 GMT
        Subject: CN=7a3fd809-be1a-4491-b2a8-a59b40f905f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:08:ad:3d:6b:a1:2c:99:ad:38:5d:a8:e9:
                    3b:a9:ef:8e:44:59:ea:8a:a6:3d:c7:fb:13:8f:61:
                    62:f9:e8:a5:13:26:06:39:da:a4:64:14:a6:0b:d6:
                    1a:d9:91:d4:b6:c8:f0:47:7c:d2:68:e1:66:59:dd:
                    81:d2:a9:59:88:70:da:d0:b6:86:ba:57:3d:1b:4e:
                    3a:63:3b:28:71:50:17:e7:f6:ab:49:12:03:b0:29:
                    33:8c:32:23:72:bb:e3:47:28:9c:af:1b:ef:e9:63:
                    81:63:23:8f:09:48:2a:70:e6:c5:93:a4:5a:54:d5:
                    f5:7a:ca:fb:18:ea:57:91:15:2a:2f:09:48:92:fb:
                    d9:db:ae:9f:6d:33:69:af:77:b6:70:5d:df:c9:77:
                    ed:fc:2b:75:4f:c4:79:d2:1e:a2:08:66:bc:19:5f:
                    cf:e9:1e:4b:09:37:f8:1c:91:e8:22:37:da:c0:e3:
                    ae:60:83:49:87:d4:6c:3f:72:46:d4:05:d6:4e:70:
                    fe:1a:df:ad:be:cd:4f:25:60:00:59:43:9b:b9:fd:
                    a2:3a:00:57:bd:48:a8:81:d5:80:a2:0f:07:4d:ed:
                    64:d9:59:b5:95:68:62:4c:9c:2a:09:98:82:6b:c7:
                    63:37:b8:99:d6:ca:47:4b:0b:ff:fc:46:da:e3:95:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:48:2D:2F:0F:CB:F9:DD:AF:0C:00:E1:4A:CC:8F:40:B2:A1:00:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:46:28:1d:33:58:91:b4:d7:90:6a:57:79:b4:18:7f:e1:c4:
         2e:e5:ea:ae:8b:8f:c9:58:db:6e:03:b0:c7:a1:5f:6e:61:5f:
         68:88:7c:4a:49:1b:d8:1f:b0:8e:7f:47:80:2e:c4:76:1a:b7:
         8c:35:f4:7a:77:f2:96:30:a8:a7:d3:f5:19:92:34:82:4d:dc:
         2f:50:7b:13:82:74:63:8f:42:90:de:9c:2f:d0:dc:c8:08:ad:
         fb:ca:24:bd:30:af:ed:72:43:57:a9:04:a9:0c:82:15:2e:f7:
         91:dd:0c:c3:36:01:52:34:89:d0:64:2b:ba:58:c8:36:f1:b6:
         ad:f5:f4:88:1a:c0:2b:31:ed:a4:b3:4e:d4:15:37:9b:42:73:
         d7:c9:2e:b5:4c:3e:70:ff:96:1c:d9:15:2a:74:73:38:92:3f:
         cc:bf:ee:e9:ec:50:0b:5e:da:aa:e8:5e:94:61:65:77:c6:5b:
         1a:dd:fd:f0:33:01:c0:ca:51:c0:fa:56:06:98:0e:d8:0c:16:
         ee:c7:21:83:f6:cb:31:a6:1c:79:c8:56:e2:e1:ac:18:29:7d:
         32:6f:7c:fe:80:b0:da:12:0a:10:23:11:62:4d:37:f1:4c:0f:
         70:f5:5a:54:13:b0:ad:89:b6:7d:55:99:af:34:a8:78:d7:b1:
         ae:5b:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----