Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/2032cd0f-ac61-3ada-b638-e0f7d7c7cd39.roa
File:                     2032cd0f-ac61-3ada-b638-e0f7d7c7cd39.roa (raw, json)
Hash identifier:          WIAjACHcHHntUTLT0RsKfa5ONSX3citdXL6U9DPGXV0=
Subject key identifier:   C7:49:38:85:B1:8F:E6:CB:07:7C:81:53:9F:86:AB:74:A7:39:60:3D
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584366AF49E408159764A3B4F440
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/2032cd0f-ac61-3ada-b638-e0f7d7c7cd39.roa
Signing time:             Sun 01 Oct 2023 02:57:50 +0000
ROA not before:           Sun 01 Oct 2023 02:57:50 +0000
ROA not after:            Sat 30 Dec 2023 03:57:50 +0000
asID:                     834
IP address blocks:        72.14.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:66:af:49:e4:08:15:97:64:a3:b4:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct  1 02:57:50 2023 GMT
            Not After : Dec 30 03:57:50 2023 GMT
        Subject: CN=e2a68f0e-8aa0-41ce-8a79-5c71d724dc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:97:58:5d:29:52:b2:32:8c:15:27:10:1f:92:
                    e1:b3:2a:fa:eb:29:98:e4:b3:65:c3:5f:07:e9:fe:
                    78:9d:24:75:c4:d3:33:70:3f:e7:25:40:6d:00:4d:
                    df:4a:72:1c:da:10:38:8f:76:b5:cd:91:8b:b9:f2:
                    bb:44:b7:7c:1a:1b:0f:4e:70:bc:ad:4f:ff:b2:59:
                    09:a7:9d:e0:0e:ae:2c:1e:b3:d0:f5:0a:0d:60:93:
                    93:08:f9:46:94:ba:6d:2c:66:75:7a:ed:25:1d:6f:
                    30:1d:2c:a2:76:4f:7a:ce:8c:b0:94:a0:17:71:b5:
                    9a:72:33:00:b6:11:6a:5e:ca:5d:7c:f4:a4:95:8c:
                    a9:d9:e6:93:6e:22:29:c2:bd:4d:80:52:a8:fd:c2:
                    c8:d3:62:74:9f:9c:8b:a6:9c:65:29:9d:6a:d9:c1:
                    43:f7:33:0b:d8:8c:ed:5d:7c:46:19:43:26:87:a9:
                    ce:d3:0e:66:51:87:e0:3c:39:bf:7b:a7:c2:ea:c1:
                    47:28:dc:d8:2e:69:2d:ca:b9:14:76:80:36:d6:f9:
                    60:99:8c:b1:6e:46:de:e8:3a:d9:b1:66:ad:a7:fa:
                    93:fa:68:85:37:3f:f2:88:95:08:af:0a:14:05:85:
                    cc:12:5b:cd:73:5a:39:0b:15:a5:d9:f9:5e:f6:58:
                    f6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:49:38:85:B1:8F:E6:CB:07:7C:81:53:9F:86:AB:74:A7:39:60:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/2032cd0f-ac61-3ada-b638-e0f7d7c7cd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:89:08:48:72:4b:0e:b9:88:c0:a8:3e:ce:b8:02:0d:bb:58:
         04:a6:7e:a3:1b:86:51:ae:af:29:c0:31:7a:88:9c:1f:29:75:
         48:39:96:42:ca:2d:81:d4:6f:1d:8d:29:ef:9b:e1:d6:ac:2f:
         f0:f9:ee:e6:b3:c1:d9:d0:1c:b4:ac:34:6f:36:d7:9d:2f:67:
         e0:cf:53:98:7a:0d:04:f8:17:bb:3d:38:61:ba:a4:9a:91:41:
         20:69:6a:f4:9c:f3:b1:c0:38:24:1e:4b:a1:73:05:aa:37:95:
         a1:35:d8:c4:f7:8b:bc:24:26:8a:fa:ae:af:19:ce:67:89:f7:
         3b:7c:67:e8:1d:48:0e:b2:a3:5c:7d:91:63:d8:1d:9c:40:0a:
         1c:f8:68:31:4f:f1:7e:72:70:2a:e9:7f:09:62:5a:3f:e4:fb:
         d7:60:31:97:17:b4:c0:ba:1c:4c:9f:3f:d1:18:e9:ec:83:75:
         e1:a7:42:f1:c9:f0:45:8a:b1:3d:26:cf:ed:ba:39:fe:df:e1:
         c0:30:a3:ca:b9:0c:1c:31:64:ec:2d:54:33:33:35:b5:10:ae:
         1d:f9:f4:09:d9:8f:50:81:2a:7f:fb:91:cf:e1:8f:e1:40:82:
         de:ec:f4:32:00:6a:60:90:0b:97:6a:a8:df:1d:0e:fa:43:dd:
         52:4c:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----