Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2753c12d-bca1-3024-8107-0e0d152831ee.roa
File:                     2753c12d-bca1-3024-8107-0e0d152831ee.roa (raw, json)
Hash identifier:          8Ar+54XZfpDkCB2dQRs5XJqcgwBKUvJ8C0pkMWhFcjY=
Subject key identifier:   81:81:CC:8B:BB:E3:B6:A7:E6:35:D0:19:AE:2E:1D:1F:9A:F5:22:5E
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285841E42AE64087E3B6913BBAA680
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2753c12d-bca1-3024-8107-0e0d152831ee.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Thu 10 Aug 2023 10:55:53 +0000
asID:                     205774
IP address blocks:        173.239.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:e6:40:87:e3:b6:91:3b:ba:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : Aug 10 10:55:53 2023 GMT
        Subject: CN=feb0ab2c-1c5b-42ca-90e8-bc7081cdbe81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:62:d8:e0:95:19:8c:b9:f6:5a:c9:dd:b9:
                    c5:16:94:d3:ab:73:77:fc:32:82:5d:aa:01:ff:46:
                    c8:fa:75:8a:fc:b5:c6:37:66:21:63:6a:0d:9f:fe:
                    83:bb:84:ee:5c:ab:36:d4:8c:1a:ae:2d:7a:b0:51:
                    97:8f:79:53:98:97:bf:04:1f:8b:b9:53:d1:ab:88:
                    37:bf:12:94:55:63:63:d0:6c:5f:41:03:a2:a7:1d:
                    d7:cd:7c:5b:83:dd:09:40:fc:44:a5:f1:2b:9a:68:
                    0d:98:f7:3a:fe:e4:ca:70:76:e7:04:34:e9:3d:bc:
                    1a:1f:14:7d:46:f9:83:f3:d1:e1:80:33:ae:b5:3b:
                    b4:bb:c5:8b:6c:85:1d:64:b4:83:a6:ea:30:e9:04:
                    0a:2b:83:2e:98:45:ed:60:a6:6a:88:92:d6:36:9a:
                    6e:45:f2:e0:2d:fd:d0:41:15:18:a5:be:28:16:1f:
                    1b:9a:ca:c2:05:e7:85:49:f1:81:fc:7b:86:e1:ed:
                    f9:2f:3e:dd:f6:1a:8e:2f:15:0c:8f:39:09:d3:bf:
                    65:75:0e:e6:e1:48:29:b5:9f:38:a3:ee:f7:32:75:
                    46:7e:7d:cf:02:99:6c:38:c2:ab:09:97:b5:a0:10:
                    81:c9:5d:67:13:4f:25:6b:97:fa:85:fd:1f:52:dd:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:81:CC:8B:BB:E3:B6:A7:E6:35:D0:19:AE:2E:1D:1F:9A:F5:22:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2753c12d-bca1-3024-8107-0e0d152831ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:ff:33:48:de:57:11:13:90:98:90:62:90:d5:5f:b5:89:
         c3:10:d8:4e:c0:a3:86:27:93:3e:b9:9b:25:62:0e:11:ea:4b:
         e0:22:2b:ac:c7:19:92:2c:d5:e3:37:ca:10:55:a7:96:69:47:
         4a:08:83:e3:71:8c:66:7e:13:cd:02:66:74:76:cb:d6:53:3a:
         33:df:0e:23:d3:1e:e3:80:9d:4c:ed:5d:8e:2b:70:6d:e2:2e:
         a9:dc:27:48:73:26:36:65:17:00:db:34:3b:e1:c9:e7:e8:10:
         e8:7b:f7:fb:1c:f4:ad:ce:2e:12:c3:9a:87:72:71:ed:3e:9b:
         68:54:c2:e0:17:28:97:c3:b1:c0:f5:a2:3a:2c:2c:c3:02:81:
         ad:13:60:f2:10:73:0a:19:f3:36:ef:02:b0:8d:96:60:2e:52:
         81:df:03:c5:ec:40:89:d3:ad:e1:55:22:bd:2c:1f:ae:e8:53:
         fd:17:5c:b0:f4:0d:70:23:dd:e5:05:aa:4c:a6:87:8f:ea:c6:
         3c:a3:ed:ae:4c:ec:ea:5a:dc:4d:20:49:26:19:fb:eb:d4:56:
         ac:3d:4f:89:4c:b3:b5:d6:92:f4:1c:13:01:bf:ed:d9:ce:62:
         50:4c:b4:c0:1b:75:91:9d:01:36:00:ea:6b:9e:be:f6:da:46:
         dc:4b:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----