Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5250b37-2d9d-38f7-a24f-030b4c3d07ad.roa
File:                     c5250b37-2d9d-38f7-a24f-030b4c3d07ad.roa (raw, json)
Hash identifier:          5GwzrAspseneMJisYwMq4CNFA8cXHBp/nMWtN6ZNTSw=
Subject key identifier:   76:7E:A2:08:31:30:EA:08:7B:85:16:23:E7:7E:52:B3:5D:74:B6:8F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75A1CB2022CB7A483EC6A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5250b37-2d9d-38f7-a24f-030b4c3d07ad.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        184.151.194.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:a1:cb:20:22:cb:7a:48:3e:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=e64f77cc-7ccd-4a36-a9ba-385ddc520f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:2b:b0:61:55:30:d5:bb:8c:0c:6e:93:ac:
                    45:44:4d:cc:d2:46:d2:50:77:6a:3b:ba:5c:18:17:
                    2a:9f:73:5d:e8:89:cb:ab:09:be:d5:82:ca:1b:be:
                    02:61:52:2a:8d:33:ab:fb:6a:15:e6:51:42:a3:81:
                    61:c3:df:8f:53:94:49:1e:89:8c:d0:bd:e8:52:fa:
                    06:f0:34:fa:db:ef:ab:7f:aa:db:f5:26:e6:4c:ef:
                    cb:40:d1:bf:11:2a:1f:ee:3e:af:3b:59:12:f7:47:
                    6d:a2:1f:52:35:da:66:f3:b6:d1:94:79:39:11:8d:
                    15:01:d7:48:30:f1:4e:24:0c:05:83:90:c3:32:c3:
                    34:0a:dc:6c:9c:7d:7b:a8:50:e3:f3:1f:b2:53:d4:
                    82:e7:a0:97:a7:56:f1:69:d0:7e:53:ee:1a:e0:ec:
                    4e:1b:af:8e:4c:96:5f:b6:2d:c4:2c:b3:cf:e0:d9:
                    79:ba:3a:6e:e5:48:df:cd:98:88:28:68:4f:ef:18:
                    c4:4f:fe:4f:77:72:d3:80:c2:3a:c1:ce:4e:83:95:
                    2d:57:17:33:2a:41:e4:c6:ce:14:c1:64:7d:9a:5b:
                    a4:7b:0b:21:50:56:75:02:4c:c6:73:50:0d:c3:66:
                    fb:d0:ec:f5:58:58:74:bf:3e:39:54:63:00:65:54:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:A2:08:31:30:EA:08:7B:85:16:23:E7:7E:52:B3:5D:74:B6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5250b37-2d9d-38f7-a24f-030b4c3d07ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:bf:9c:7f:68:db:f3:e6:bf:84:e5:ad:bf:14:be:d9:8c:
         06:af:c8:68:11:7a:13:83:91:9a:d0:e0:f1:be:1d:77:26:60:
         5a:9b:72:34:02:b2:9e:4b:ff:a2:b2:48:83:73:00:2f:bd:d9:
         b4:1d:9d:7e:24:c9:10:8c:34:d3:bc:d4:15:da:25:9c:90:25:
         af:e0:d9:56:45:9d:6a:ef:c2:d9:9f:a7:cc:2a:f3:42:b3:d5:
         c2:b8:da:46:0b:75:80:cc:3f:50:fe:18:a3:f2:c6:c0:15:8c:
         ea:57:a2:db:09:12:d4:e6:8d:e2:c5:1e:7b:32:11:7d:99:17:
         4f:c2:cc:bd:85:dc:6e:da:7f:e4:45:45:14:01:02:f6:3e:72:
         eb:0c:d1:a1:61:10:fd:dd:f0:f0:18:1a:a5:7b:41:bd:02:ed:
         f9:02:81:82:f3:e3:b3:50:38:3d:f0:1b:3b:48:b0:07:7f:75:
         13:4f:ee:b6:22:74:45:8b:b6:c8:a9:08:66:64:28:fa:e9:0c:
         11:a0:4e:67:f1:2a:45:8a:f3:80:12:4c:97:36:14:d1:6d:c4:
         64:43:d8:0a:d5:0b:dd:01:b8:5f:b7:9c:95:9a:da:b7:82:56:
         73:01:0f:57:b5:be:c2:73:b9:fe:e2:06:3a:92:0c:52:f8:4b:
         ef:05:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----