Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa
File:                     d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa (raw, json)
Hash identifier:          PznBFPYOM1U/KAfGhDy2YmoJJAIRHSBXUNqGEN0Dlj4=
Subject key identifier:   CF:38:C8:9B:CD:FF:B3:30:CC:B2:D2:19:E2:A4:17:08:68:43:74:84
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584332CF5C4418C9B782789B6500
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa
Signing time:             Tue 12 Sep 2023 13:00:24 +0000
ROA not before:           Tue 12 Sep 2023 13:00:24 +0000
ROA not after:            Mon 11 Dec 2023 14:00:24 +0000
asID:                     46573
IP address blocks:        98.159.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:32:cf:5c:44:18:c9:b7:82:78:9b:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 12 13:00:24 2023 GMT
            Not After : Dec 11 14:00:24 2023 GMT
        Subject: CN=c8d2d4b0-38dc-4f09-a2b7-17405f8509ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:b3:32:39:5b:6a:a7:f9:05:45:74:f3:63:
                    7d:50:03:88:4d:f7:de:2f:e9:af:38:a6:27:6f:16:
                    ea:4b:6d:7a:94:50:a9:f3:d3:ff:82:36:14:6d:0a:
                    f0:fe:13:1c:a1:61:80:d0:d0:fa:5a:cf:a5:84:5c:
                    57:e0:76:9d:f1:a0:4d:18:21:21:07:86:a4:67:b2:
                    15:1d:f1:58:b2:b5:c5:e9:1a:08:3f:fb:f7:01:a0:
                    91:64:9f:96:d9:05:e5:22:8d:38:50:ec:91:33:bb:
                    14:0f:c3:df:f1:2d:02:6c:7e:0d:f2:b1:31:c3:a7:
                    57:13:a1:d4:11:1d:db:c8:15:7b:b9:93:be:e0:1d:
                    3c:8d:ab:b1:de:db:35:25:6b:f1:60:b9:78:dc:f0:
                    40:9a:1d:fb:9c:ac:8e:71:a1:26:2e:8b:c1:2c:cc:
                    2c:ec:3a:56:da:9e:3f:72:2f:78:2b:00:99:78:fc:
                    a0:c0:30:90:7c:da:f0:c6:3b:a9:cc:67:b3:4a:ff:
                    c0:c8:b4:27:8e:4d:f2:64:25:a6:86:e8:8b:2d:2f:
                    a5:fe:e8:27:c0:34:38:3a:90:69:0b:d5:1c:5b:d5:
                    13:54:1a:ad:15:22:dc:97:13:af:47:0f:b1:a9:89:
                    d3:21:9e:40:b0:68:5b:f1:8d:9b:4c:eb:c5:32:ce:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:38:C8:9B:CD:FF:B3:30:CC:B2:D2:19:E2:A4:17:08:68:43:74:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:03:7b:72:82:c6:5f:8b:f1:45:95:1f:21:d2:d0:bd:21:e8:
         48:41:e3:3f:ab:b1:9a:08:7a:a4:c1:42:c1:58:b0:70:95:c8:
         25:2e:07:45:35:26:1a:b0:8f:24:59:5f:70:51:15:9c:82:45:
         87:24:9d:11:c2:46:47:b3:9a:d1:c9:f4:b9:1f:b1:da:1b:1d:
         83:e6:e8:8e:1c:b3:32:31:dd:55:87:d4:ae:73:9d:16:a4:f1:
         89:9d:0b:d1:ff:f2:06:12:00:8b:2d:ba:6d:f0:4a:68:2d:73:
         07:ed:3d:8a:43:5d:98:fc:71:40:bb:c4:73:55:82:97:88:9c:
         f0:c4:2a:17:c9:12:58:d1:41:d8:38:9f:4d:7d:a1:ed:6e:8c:
         70:f6:a1:86:28:95:04:14:16:62:dc:a8:91:95:c2:39:88:a1:
         bf:18:17:81:e9:90:31:68:34:bd:09:ab:3b:9d:65:55:b2:2e:
         f3:e7:69:56:01:e3:50:0a:7a:c4:f7:99:7e:8c:26:24:64:ac:
         33:2f:c8:d6:84:36:70:77:4f:0f:70:cd:46:db:bf:df:cb:e3:
         b7:49:3c:63:a2:03:9d:37:f1:db:f7:b7:ce:5c:39:00:cc:3e:
         83:f3:4b:6e:2c:cd:3b:be:d8:ac:cb:2d:7d:4c:72:93:a0:b3:
         8d:dd:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----