Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/bbaea283-02d8-3475-be56-e7fdf0996401.roa
File:                     bbaea283-02d8-3475-be56-e7fdf0996401.roa (raw, json)
Hash identifier:          bGPNdbAo0ViiIx7WPQHXeiEJO9DgxzNCVfT9uG9ZbFQ=
Subject key identifier:   90:DE:8F:43:7D:A8:09:D3:C2:9A:1F:B0:D0:44:B4:57:E0:40:C5:96
Certificate issuer:       /CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
Certificate serial:       010D0C9F432858432A6F59D8D4E9AB53D6ECC938
Authority key identifier: BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/bbaea283-02d8-3475-be56-e7fdf0996401.roa
Signing time:             Sat 09 Sep 2023 13:00:25 +0000
ROA not before:           Sat 09 Sep 2023 13:00:25 +0000
ROA not after:            Fri 08 Dec 2023 14:00:25 +0000
asID:                     951
IP address blocks:        23.138.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2a:6f:59:d8:d4:e9:ab:53:d6:ec:c9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
        Validity
            Not Before: Sep  9 13:00:25 2023 GMT
            Not After : Dec  8 14:00:25 2023 GMT
        Subject: CN=0d9d2d7c-2b4a-43c3-b929-28dc6731b428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:8d:5b:e2:82:a8:79:0e:26:b0:fa:bd:d3:
                    eb:50:a7:91:f5:56:f6:99:9b:9f:c1:21:ec:fc:fc:
                    dc:b7:b2:e1:b9:08:cb:1e:eb:67:c1:cc:72:32:24:
                    de:e0:53:05:f9:26:a8:d0:d4:8e:a8:53:8b:02:c4:
                    27:41:e3:d0:96:1b:5a:b5:4f:16:c4:04:b5:8c:aa:
                    4f:71:6f:47:4e:85:91:0f:ad:61:72:4e:27:ce:9f:
                    4a:6e:5e:63:75:23:0f:e9:a1:ad:19:09:b6:52:93:
                    31:ed:ae:50:3f:78:3b:e4:50:5c:1f:01:ec:71:bf:
                    23:1c:77:f1:41:50:19:a6:69:af:5d:6d:f0:6c:48:
                    8f:0d:a6:3a:89:f9:65:e9:d3:6d:7e:cf:d0:9c:09:
                    df:8d:19:a9:25:a5:ec:14:71:67:63:8e:fb:e4:a9:
                    2a:d4:23:ad:43:91:db:0e:a1:89:b0:a6:05:a7:67:
                    e0:8f:c5:c8:65:28:89:1c:d8:cd:2d:0b:dc:61:47:
                    e0:76:82:ec:bf:bb:a2:6a:6b:ab:0b:e4:b1:98:f9:
                    c9:6f:5f:9b:6a:a1:51:f6:8d:0e:97:eb:c1:f4:7a:
                    fe:60:e9:70:68:b5:60:55:c6:3e:57:56:6b:3b:02:
                    64:5d:9c:7a:b7:66:bb:f3:57:9f:47:d6:f0:f4:87:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:8F:43:7D:A8:09:D3:C2:9A:1F:B0:D0:44:B4:57:E0:40:C5:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/bbaea283-02d8-3475-be56-e7fdf0996401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/7401169f-c1cd-4960-a3e8-8d9af543cc0a.crl

            X509v3 Authority Key Identifier:
                keyid:BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:16:97:15:6e:cc:73:11:2c:de:13:97:60:85:47:77:7c:
         60:3e:5e:5d:6b:95:1e:aa:4b:53:39:fb:88:cf:38:4e:6b:fa:
         0a:f8:e3:7b:e3:b1:fb:10:3a:1f:52:28:65:51:98:ad:59:2d:
         62:0c:55:b4:62:b6:a0:46:5b:33:23:3e:0b:97:76:86:e9:c5:
         3f:d2:07:82:6c:5b:06:b2:79:a5:4b:90:af:26:15:eb:79:35:
         ae:cb:59:a0:ab:1f:15:01:a9:3f:6e:f3:ad:77:ae:5b:1a:85:
         ad:c8:54:d6:12:bf:7d:38:b6:d3:18:cb:85:f4:ac:a3:d9:73:
         bf:aa:41:46:63:7e:bb:14:cc:92:79:60:38:b8:ab:dc:4c:cb:
         68:45:df:37:71:fc:6e:8f:1f:17:b8:29:f0:1c:a3:0c:d9:38:
         19:4e:96:63:e2:d9:e2:ce:50:f6:5e:0e:59:ac:ee:98:f8:28:
         c8:69:fb:7e:db:17:f7:21:e1:c4:18:7d:76:72:19:c7:82:b5:
         8b:e6:a6:d0:93:6f:cb:eb:3d:25:97:a7:7c:93:42:17:ef:66:
         37:28:0f:94:29:ad:58:5f:0f:74:d0:41:52:f5:d5:90:23:12:
         d6:4f:6f:78:4f:9a:e1:75:5c:c3:ee:ef:21:fa:18:fc:09:6d:
         cc:79:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----