Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/819a9fd1-e304-3dbe-8228-ae2246db787b.roa
File:                     819a9fd1-e304-3dbe-8228-ae2246db787b.roa (raw, json)
Hash identifier:          Ii7i65wjLOYT1pUog/AwT6NcI2ltz2E5M6DSB06xTms=
Subject key identifier:   23:C0:E7:C4:5F:37:2F:25:E9:6C:B7:8E:89:52:6E:30:91:8F:6C:57
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F43285842AACCBDEDF050AA2360CA6400
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/819a9fd1-e304-3dbe-8228-ae2246db787b.roa
Signing time:             Tue 25 Jul 2023 19:45:13 +0000
ROA not before:           Tue 25 Jul 2023 19:45:13 +0000
ROA not after:            Mon 23 Oct 2023 19:45:13 +0000
asID:                     834
IP address blocks:        206.251.8.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:cc:bd:ed:f0:50:aa:23:60:ca:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Jul 25 19:45:13 2023 GMT
            Not After : Oct 23 19:45:13 2023 GMT
        Subject: CN=d311593a-9d0e-487d-a148-2109cc6efa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:8e:1b:83:3c:e6:0c:e8:40:ad:b3:c7:c8:
                    96:35:da:17:ed:1a:5e:1c:cf:a7:86:43:18:db:c7:
                    17:aa:f2:8d:8a:e6:b7:aa:2c:57:42:b2:f4:0d:20:
                    2f:18:5c:20:9b:e1:68:ed:4c:cb:0b:44:47:31:45:
                    38:03:48:27:33:19:8d:9f:1b:50:61:a3:22:f6:58:
                    38:cd:f3:2a:02:34:5f:00:8d:22:07:d2:0b:25:27:
                    d0:8e:96:d2:2e:3b:2a:71:f2:9f:d2:2b:2a:4c:49:
                    a8:10:37:09:cf:3f:4e:5e:cb:73:3e:22:ca:eb:c1:
                    40:08:65:f1:83:d0:23:03:48:55:93:fe:c0:82:57:
                    e4:bc:b7:f1:41:42:7c:21:4a:90:95:3b:0d:8e:ae:
                    5a:1b:20:8d:da:7a:da:05:73:a6:cc:75:37:ac:ce:
                    64:3f:a8:55:08:13:62:32:ce:09:0c:64:0c:f3:37:
                    2b:f6:1d:4b:fc:e2:c7:5a:e6:e5:cd:79:b7:75:f0:
                    af:19:a5:e1:26:4b:a5:14:7b:ef:6f:4c:91:19:78:
                    57:bb:88:3d:61:fc:db:1b:ab:2b:fb:13:30:14:cb:
                    c5:b1:44:19:b5:9d:19:98:99:8a:78:98:04:0e:09:
                    50:36:61:3c:d7:ce:57:0a:fb:4a:48:ff:15:59:bb:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:E7:C4:5F:37:2F:25:E9:6C:B7:8E:89:52:6E:30:91:8F:6C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/819a9fd1-e304-3dbe-8228-ae2246db787b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:af:4e:6c:f2:1e:62:d5:0b:fe:2c:0b:d9:e3:57:8d:97:
         4c:47:c7:29:88:a0:00:f4:1b:fc:59:cf:c5:28:76:d6:f5:24:
         88:97:e7:1f:aa:ff:d3:4d:52:21:ba:04:62:92:f2:44:90:02:
         88:a8:bc:a0:27:7d:e6:87:1e:02:cb:b3:c6:a3:c8:0c:88:1c:
         ac:d2:ad:de:8d:cc:4c:d2:71:78:60:af:36:1a:04:6a:8e:d5:
         a9:3b:09:b9:89:36:3a:44:ef:be:1d:74:fa:1e:71:1b:0b:64:
         c1:95:84:ce:68:c3:25:7a:9f:02:18:e6:18:fc:c1:96:33:dd:
         a3:33:46:67:32:58:e4:8c:a1:60:73:b5:96:37:c5:08:9a:e4:
         77:1c:f1:9e:ef:08:10:7d:98:0f:2c:cf:d9:e5:0e:f7:d1:cb:
         05:20:01:e8:b7:36:95:56:ef:0a:ea:d9:80:34:c6:6d:94:6c:
         8b:4d:68:97:a1:36:d2:b8:87:b3:82:2e:f1:89:d9:db:c3:e8:
         37:1f:88:d7:07:f4:b3:20:35:75:3d:8e:bc:61:e3:7e:a4:f2:
         1d:8f:da:95:df:e8:1a:a9:2d:38:8a:69:b9:8c:c1:da:9c:8b:
         2c:6e:98:d6:ce:44:74:03:6a:d8:ff:0f:ce:83:d5:d3:da:b4:
         8d:5d:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----