Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/2f7bd4c4-01bb-3df4-b089-bb95f08e611c.roa
File:                     2f7bd4c4-01bb-3df4-b089-bb95f08e611c.roa (raw, json)
Hash identifier:          kiqS+Ou5O14wvKD1/ySuUKk9S7nCYbtvpSusjm9vHIo=
Subject key identifier:   98:B5:31:2E:BF:F0:14:1B:93:B0:B1:E7:4D:D7:AD:A7:2C:37:EB:1C
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858436AC084817F38912F5ACBCD00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/2f7bd4c4-01bb-3df4-b089-bb95f08e611c.roa
Signing time:             Mon 02 Oct 2023 13:55:47 +0000
ROA not before:           Mon 02 Oct 2023 13:55:47 +0000
ROA not after:            Sun 31 Dec 2023 14:55:47 +0000
asID:                     42055
IP address blocks:        72.14.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6a:c0:84:81:7f:38:91:2f:5a:cb:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct  2 13:55:47 2023 GMT
            Not After : Dec 31 14:55:47 2023 GMT
        Subject: CN=71fff4ce-933f-441e-b96f-7ef81e8e773d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:52:84:37:90:d1:ef:90:4c:28:25:ed:c2:
                    03:d5:48:ae:aa:c7:eb:a0:d9:45:eb:f6:af:bf:13:
                    97:2e:61:04:49:1e:24:e8:8e:5b:af:c8:e3:95:a3:
                    93:2a:df:7a:29:0c:f0:6c:94:8a:fc:42:87:a1:0a:
                    0e:c4:ee:06:95:41:95:88:c1:2d:33:ac:2c:06:f1:
                    44:b2:1e:ec:0f:6b:9e:09:f8:93:25:73:df:61:22:
                    c7:2f:b4:ac:25:0b:40:b9:ff:3d:dd:1a:a5:c2:46:
                    b4:8a:ca:ab:a5:0f:7f:cd:48:64:11:c8:2d:0c:69:
                    2b:3d:02:8e:5f:05:e8:69:f2:11:41:58:26:4d:d8:
                    02:bd:0a:3c:24:9b:71:c9:60:4d:5b:f9:d9:18:3d:
                    b5:4a:e0:2c:cf:79:27:b4:98:1b:4c:75:21:b1:e1:
                    a1:1a:55:3c:e8:d0:4d:1c:5e:e7:03:ea:dd:42:7d:
                    3e:1b:d9:97:28:f1:99:a5:9c:5b:00:98:7b:f4:26:
                    f0:64:95:0e:61:e1:55:1c:97:5e:69:31:e0:ce:1c:
                    8d:a9:5f:a6:09:c9:3f:cb:3b:ee:d2:e5:b2:65:e3:
                    e0:50:29:19:bc:15:09:c3:a9:b6:5f:dc:3a:87:31:
                    8b:f1:7b:a6:37:3e:37:20:ce:a7:5f:26:fc:a2:8a:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B5:31:2E:BF:F0:14:1B:93:B0:B1:E7:4D:D7:AD:A7:2C:37:EB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/2f7bd4c4-01bb-3df4-b089-bb95f08e611c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:40:b7:e3:9f:08:42:90:35:b6:4d:b4:0e:33:9e:af:4e:ed:
         ae:4b:a9:36:f2:47:9a:84:45:da:25:94:75:4f:3b:93:0d:b1:
         64:a8:13:73:1d:5f:77:e0:eb:f9:fe:26:e2:fd:00:59:1c:60:
         fa:15:41:53:31:45:4c:9e:a8:56:5a:07:89:2f:97:a7:7a:2f:
         7c:d2:43:10:be:b6:2b:9a:76:2c:ee:3a:30:29:3c:a7:df:dc:
         a2:23:83:8e:9d:cd:33:89:95:b4:1d:72:2c:2f:1f:37:57:14:
         24:f8:5d:44:ca:1b:3f:58:97:ef:98:9b:36:7b:a6:9e:cd:33:
         d3:48:c4:a9:db:19:32:c6:3b:68:f3:ce:b4:c8:c7:19:13:ef:
         23:36:3c:79:bd:bb:c2:05:b2:c4:5e:7f:55:ee:20:3c:5f:95:
         c9:b6:5f:b8:02:22:1e:2f:09:5d:5d:31:cf:a9:86:94:91:65:
         56:1d:b3:9b:1d:a8:2d:b2:2c:73:2c:0a:2d:cb:96:83:f9:6a:
         36:5d:73:9e:7a:6e:79:d1:a0:61:f0:ad:11:bf:67:1f:6e:3b:
         57:e1:50:f5:d7:f4:6c:30:3e:f9:94:9e:22:86:4f:da:ec:6a:
         5a:bf:6e:9e:e2:e6:a8:00:c8:37:38:4e:70:26:02:12:03:ca:
         ec:ea:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----