Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/791d2898-c437-3b22-a390-a833bbee5b7f.roa
File:                     791d2898-c437-3b22-a390-a833bbee5b7f.roa (raw, json)
Hash identifier:          pKC4T0/qzLTgh3bz5h8qSrwVXzaIcQ8o+eJpAWTC/Xs=
Subject key identifier:   88:D0:F2:66:B3:80:E9:B9:E8:38:FC:4F:D6:AC:36:27:7F:51:9E:20
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F43285841E471AAE1F84C8E5E738EACA0
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/791d2898-c437-3b22-a390-a833bbee5b7f.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Sat 29 Jul 2023 23:58:36 +0000
asID:                     834
IP address blocks:        104.129.160.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:aa:e1:f8:4c:8e:5e:73:8e:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Jul 29 23:58:36 2023 GMT
        Subject: CN=d45cc8d9-2057-4101-b7f1-d8cf243b60ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:ce:8a:cc:f3:5f:f7:4e:f5:9f:ee:de:3c:
                    16:99:ce:ed:38:f1:b3:3f:e8:f5:17:8e:f1:c0:46:
                    63:7f:b9:4c:27:8f:e1:89:b6:68:d0:31:06:bd:8a:
                    70:34:ad:30:b4:5c:bb:fd:fc:f7:46:38:a1:bf:a6:
                    30:88:04:81:72:c4:76:ff:42:eb:03:c6:35:d2:7f:
                    fd:f7:45:55:81:fd:a7:07:0b:3f:31:ee:8b:42:b4:
                    65:e4:85:6e:a3:7d:07:17:cf:a5:b0:38:e7:ed:a1:
                    19:c1:25:59:f4:69:ab:27:71:6a:59:f0:21:35:d0:
                    8d:b3:33:0b:e7:48:07:73:59:27:5e:2e:6a:28:5b:
                    d7:0f:5f:b5:a3:ca:ab:a7:91:5f:2d:44:64:fd:6d:
                    42:a6:72:2b:53:0f:3c:55:fb:2e:c4:1c:2e:49:e5:
                    a9:63:7c:b8:52:0f:35:5a:b4:ae:1a:d6:6a:b2:b0:
                    d1:21:fb:a7:fd:11:f5:40:04:d9:b4:7e:1b:d1:53:
                    d9:b8:ec:b8:eb:bd:01:40:c2:66:4c:c7:a8:f0:2c:
                    e8:2f:ec:83:cc:5c:a3:a3:b6:4f:fb:f3:19:c0:71:
                    35:56:4b:cf:fd:14:1a:1f:c2:d9:6a:14:b1:4b:1e:
                    ea:6b:d3:eb:3e:4a:98:83:5d:4d:c0:0c:f4:f4:80:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D0:F2:66:B3:80:E9:B9:E8:38:FC:4F:D6:AC:36:27:7F:51:9E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/791d2898-c437-3b22-a390-a833bbee5b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:8e:b7:d1:69:67:c6:7f:ae:49:ef:ce:c2:75:7d:fe:b1:
         48:72:24:b9:5f:99:d1:76:c9:43:42:b7:22:01:c2:07:fe:ce:
         c8:64:4a:f7:ad:73:7e:d6:53:92:0d:0f:c9:3f:a4:52:19:ec:
         df:36:cf:32:30:a5:03:1e:d6:ba:fd:86:be:b6:93:27:72:2c:
         e5:58:aa:51:41:f4:59:49:38:6e:88:fb:4e:88:37:dc:02:61:
         9f:df:44:3e:f2:a6:a4:13:36:0c:34:17:75:44:35:34:91:bd:
         b2:d0:22:2e:a7:58:02:2c:55:10:ad:5a:41:b2:7c:0e:2c:c7:
         5a:41:e9:d0:56:a1:4e:21:07:4f:19:78:87:5b:00:2c:5d:e5:
         4f:2a:e1:61:54:9d:6b:65:de:9a:68:38:7a:ee:48:19:4b:3f:
         29:b9:62:53:c0:db:32:ab:04:ba:ce:40:45:b0:23:03:4c:a9:
         c8:97:d2:81:78:39:8e:e6:b5:53:20:32:bf:52:e1:c5:9b:91:
         39:be:a9:c9:8b:71:48:54:5e:b0:4e:20:2d:10:e8:b1:17:9c:
         ff:60:39:4f:51:82:7a:6a:57:40:7c:78:96:56:1a:45:71:50:
         f9:32:fe:d9:25:dd:a1:77:2a:e2:34:81:3f:5d:18:c6:81:3e:
         5b:2b:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----