Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/43c37095-f24a-3cf7-b810-1f722a4558f6.roa
File:                     43c37095-f24a-3cf7-b810-1f722a4558f6.roa (raw, json)
Hash identifier:          5/037mTrO2s9RC+7wvOWuId5LSSfJNPVYJHgg/9gHwk=
Subject key identifier:   80:7C:BB:1F:B3:72:7E:1E:33:1F:34:BE:7F:B0:4B:19:83:C0:07:C3
Certificate issuer:       /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial:       010D0C9F432858429248FDE56EC685D88BE0DC80
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/43c37095-f24a-3cf7-b810-1f722a4558f6.roa
Signing time:             Mon 17 Jul 2023 01:00:17 +0000
ROA not before:           Mon 17 Jul 2023 01:00:17 +0000
ROA not after:            Sun 15 Oct 2023 01:00:17 +0000
asID:                     7922
IP address blocks:        199.15.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:92:48:fd:e5:6e:c6:85:d8:8b:e0:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
        Validity
            Not Before: Jul 17 01:00:17 2023 GMT
            Not After : Oct 15 01:00:17 2023 GMT
        Subject: CN=b119b8a3-16e1-4248-9c72-b0fa0f8d7516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:00:a4:7e:7b:66:80:bf:c0:e9:c4:ed:78:
                    06:90:6d:0d:df:c6:ec:fa:17:4e:f1:ac:6d:33:8b:
                    ed:ba:6f:ad:36:af:6f:55:6e:22:94:9b:1a:b5:fa:
                    59:33:7b:6d:84:35:d1:3f:a6:f2:51:fc:a0:bc:fc:
                    7e:fe:d4:38:d9:73:4b:1e:af:d2:fc:88:2a:27:57:
                    42:ab:d3:9d:0e:42:22:28:fd:67:35:b2:7e:a3:4d:
                    70:8e:b6:f3:d7:ac:29:c7:78:64:0f:64:6f:10:ee:
                    1f:ad:a6:c0:8f:8b:dc:de:a8:09:41:7c:39:93:97:
                    14:40:ae:10:30:7c:04:4a:f9:d4:8a:50:8b:87:19:
                    64:ec:02:32:11:05:fd:3a:3b:e0:da:eb:fa:af:c3:
                    ea:5b:4b:c5:62:db:eb:79:83:0d:bc:77:10:3e:e7:
                    5b:da:d3:24:b9:98:0f:1a:d6:e9:ec:73:21:ba:f3:
                    2f:aa:40:41:a7:a1:1e:72:7e:5e:e1:7c:49:55:76:
                    69:d0:1a:09:10:f4:e2:04:5d:6c:ff:be:b8:1c:0d:
                    ad:5e:3e:3f:f2:b8:c1:15:ef:46:95:b4:b7:49:99:
                    19:a5:4b:16:49:aa:48:ca:ea:41:88:f0:2b:6b:a8:
                    a7:1b:ca:7d:37:e5:ef:f5:7d:af:d1:8a:0c:b1:18:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7C:BB:1F:B3:72:7E:1E:33:1F:34:BE:7F:B0:4B:19:83:C0:07:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/43c37095-f24a-3cf7-b810-1f722a4558f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl

            X509v3 Authority Key Identifier:
                keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2a:88:30:f1:e2:a9:48:31:3d:0b:9f:25:bb:ea:96:45:7d:
         1e:23:63:d2:e9:dc:d2:48:3e:43:be:46:e5:ce:7e:02:77:d5:
         a2:00:d3:fd:96:94:27:a0:ed:82:0e:12:1e:af:e7:e0:9a:c1:
         cd:df:c7:dc:69:b2:7d:2a:17:5d:5d:47:71:b8:ee:48:c3:16:
         55:0f:f1:25:96:5e:87:f7:18:e2:2a:1d:25:1e:ee:dc:d9:05:
         22:f0:30:9e:e8:d4:b6:59:64:9c:ce:bb:e3:98:98:9f:40:53:
         98:4d:a1:02:be:10:93:a7:60:3f:a4:1b:56:3d:6a:6b:de:c8:
         bd:6a:70:19:73:8f:3e:69:a4:45:2b:46:c3:4f:6e:00:7a:e4:
         a7:05:1e:25:d0:34:55:8d:d5:17:b4:24:a5:a6:89:ab:e9:3d:
         68:ac:fc:c9:6c:a9:6a:b6:c9:6c:b3:5d:bf:28:0e:cf:18:f2:
         a6:6e:4e:50:08:13:ac:8e:6f:a2:e5:93:b2:28:5b:9c:36:0c:
         4b:5e:a7:82:e5:c6:be:be:a0:60:c9:c8:c5:3b:0e:ae:dd:5e:
         ad:07:11:c6:4f:dd:da:a0:b4:16:36:12:cf:99:ff:83:15:f4:
         6d:60:14:07:66:3a:67:8c:76:64:6f:fb:87:7e:cb:cf:58:af:
         7a:df:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----