Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/b79e69c2-1c88-31e2-a3eb-8e2e45e577e6.roa
File:                     b79e69c2-1c88-31e2-a3eb-8e2e45e577e6.roa (raw, json)
Hash identifier:          ERfzObiQC38NiQDamOuQWem7eMG77FQecfa+uYPyjB8=
Subject key identifier:   BC:B4:F8:D4:10:1C:79:B0:F4:02:27:77:DE:57:A3:56:BE:0F:F6:4B
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285842A5D3C1B24957F5BA9DB9BD00
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/b79e69c2-1c88-31e2-a3eb-8e2e45e577e6.roa
Signing time:             Mon 24 Jul 2023 01:00:18 +0000
ROA not before:           Mon 24 Jul 2023 01:00:18 +0000
ROA not after:            Sun 22 Oct 2023 01:00:18 +0000
asID:                     35913
IP address blocks:        208.87.96.0/24 maxlen: 24
                          208.87.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a5:d3:c1:b2:49:57:f5:ba:9d:b9:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jul 24 01:00:18 2023 GMT
            Not After : Oct 22 01:00:18 2023 GMT
        Subject: CN=cbfc9ea0-7116-4b6c-a30a-6de8a80bc1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:61:9d:c9:3d:41:84:98:02:4f:e2:8c:58:23:
                    ad:d8:08:a6:8d:40:7e:d7:05:45:9d:d2:1e:79:f3:
                    86:11:16:5a:56:a0:7d:18:e1:85:88:ab:7c:df:12:
                    85:39:1a:16:72:7d:28:5a:d5:76:d7:55:c9:57:f6:
                    d1:e2:26:a9:38:75:81:14:a3:7e:40:c4:37:cb:21:
                    ad:09:5e:e1:c9:67:e3:e4:ed:f7:20:62:79:a0:73:
                    b2:ba:3b:fa:79:4f:25:ef:6f:ae:63:63:ac:98:5b:
                    51:a1:59:c1:7b:09:cc:4c:95:60:48:10:ec:c1:cf:
                    cc:3e:82:c8:d6:f6:e8:e9:5f:c4:a9:47:17:da:b1:
                    c4:7f:77:2c:39:7f:00:bb:61:72:f9:9e:ed:ff:55:
                    70:c6:d8:e6:d2:00:ef:09:c5:58:29:91:21:b5:67:
                    80:36:5a:6c:69:83:b1:33:9e:d3:48:12:f9:ab:06:
                    e3:d0:b2:c1:db:e2:8b:4a:01:dc:b4:12:d5:d2:47:
                    ea:20:2b:52:ab:51:c9:84:50:c0:e3:66:4a:3c:e3:
                    ce:70:4f:a9:cf:e5:db:02:3d:e9:8d:0b:fa:f8:15:
                    a0:c5:43:fd:71:90:aa:c3:4d:54:a7:ad:08:41:89:
                    a4:52:b2:0b:36:4d:e8:51:90:28:86:52:bf:02:d4:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:F8:D4:10:1C:79:B0:F4:02:27:77:DE:57:A3:56:BE:0F:F6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/b79e69c2-1c88-31e2-a3eb-8e2e45e577e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:52:44:48:c4:58:ec:b9:d9:28:ce:05:22:64:0c:84:d3:
         d6:61:70:0c:d2:57:f2:c2:d3:0f:78:f7:f1:b9:f8:5d:a6:e6:
         87:92:6d:7d:5f:74:90:b4:ea:6f:40:aa:3f:d1:82:bc:35:50:
         19:e4:71:58:09:66:43:83:c7:cc:bb:a4:f9:9f:9b:cc:ce:98:
         b9:ad:0b:f5:44:8b:48:c7:c1:8f:2c:36:7b:47:79:44:82:f3:
         ad:b4:3e:77:f9:1b:04:4c:87:17:fa:96:71:89:44:ac:83:7e:
         e7:55:11:1c:58:34:bc:39:0e:75:d2:1a:aa:0a:19:fb:ef:c3:
         7a:f3:22:f7:ca:fe:0f:52:b9:e5:af:9b:16:2c:b0:5c:27:61:
         d0:fb:a3:2a:b5:5f:c9:d7:ea:1e:9b:89:3d:e1:25:3b:58:1c:
         5e:50:d2:81:39:d1:44:0f:06:e8:83:99:71:31:81:3b:87:4c:
         af:1b:3b:8e:20:b6:fb:75:b8:06:06:6c:fe:50:e9:32:99:ac:
         8f:44:e1:92:f6:23:8d:4a:7f:e3:db:82:6b:4b:8b:47:b9:eb:
         2d:c5:91:77:02:62:46:bf:b5:f1:5e:39:a2:66:ff:1f:ba:b1:
         a9:21:a0:ba:af:b4:13:58:6f:30:71:67:c1:e0:23:77:f7:ab:
         67:58:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----