Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/792acfb3-47fd-328f-8ee3-070cc9e9ceb7.roa
File:                     792acfb3-47fd-328f-8ee3-070cc9e9ceb7.roa (raw, json)
Hash identifier:          c45ug7IleakdRu3IcCq5sCkD7rIFL37y8lviEVUGy4M=
Subject key identifier:   E1:AB:2A:34:CA:76:4A:62:0E:61:F4:A3:DB:0D:1B:61:3A:3C:2F:6A
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584277CC0843AE7BE83A46F766A0
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/792acfb3-47fd-328f-8ee3-070cc9e9ceb7.roa
Signing time:             Fri 07 Jul 2023 13:17:33 +0000
ROA not before:           Fri 07 Jul 2023 13:17:33 +0000
ROA not after:            Thu 05 Oct 2023 13:17:33 +0000
asID:                     53334
IP address blocks:        104.153.198.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:77:cc:08:43:ae:7b:e8:3a:46:f7:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Jul  7 13:17:33 2023 GMT
            Not After : Oct  5 13:17:33 2023 GMT
        Subject: CN=b3b5ada7-2068-4817-8192-6192f826a61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:c1:1b:e2:c9:94:b1:f1:10:98:7f:c3:32:
                    7c:9d:17:5b:dc:6a:e5:34:23:76:85:ad:e2:55:31:
                    c0:17:57:d6:33:a2:ab:03:5f:f8:f2:25:cc:88:1a:
                    2d:1f:d1:7f:fd:46:cd:54:c7:c9:f1:87:29:3c:f7:
                    c0:e2:da:a9:f1:8d:8c:6d:08:b7:de:a4:d6:b9:08:
                    0b:90:84:80:f4:76:05:7c:22:ca:0c:bc:75:c9:73:
                    7f:4e:19:4d:06:a6:a8:9c:d2:a0:9e:e0:4f:8b:82:
                    91:d9:8d:6a:ef:70:57:5f:c8:ed:d2:dc:42:44:0f:
                    75:0b:86:e4:07:e6:0c:bb:2d:12:31:60:44:56:05:
                    f8:19:62:e7:ea:25:65:a8:6b:8e:43:38:dd:b7:c2:
                    af:b3:43:78:b9:b7:86:4f:73:5a:09:57:e8:0b:9a:
                    e7:5a:e4:16:3c:fd:71:ea:b3:49:a8:3c:86:81:a4:
                    e5:5c:e7:20:ee:c7:eb:48:ca:70:05:fc:99:53:e8:
                    b5:ef:29:bb:6c:69:70:b4:33:ed:be:b5:b0:cd:c8:
                    53:44:fa:c3:04:a2:2e:08:99:e0:e9:b2:96:78:6e:
                    53:07:4c:d2:86:db:6a:9c:ad:a8:90:1b:b0:b1:ff:
                    33:55:33:11:b5:a8:60:0e:8f:81:97:f6:07:07:0f:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AB:2A:34:CA:76:4A:62:0E:61:F4:A3:DB:0D:1B:61:3A:3C:2F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/792acfb3-47fd-328f-8ee3-070cc9e9ceb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:36:0c:ae:64:1e:04:5d:6b:70:c7:cf:da:b5:1d:3e:7e:28:
         4c:e1:4c:b0:35:1d:58:9a:16:ea:96:f6:1a:d9:82:67:f0:be:
         63:d0:f8:cb:9b:08:f3:f9:0d:b2:d4:49:9e:34:58:ce:93:95:
         a0:bc:d8:32:4d:ba:f2:b8:eb:cf:8b:bf:da:14:74:e3:15:1a:
         20:25:70:76:60:ac:27:e4:ab:32:f5:93:37:a5:76:bd:e8:08:
         ba:ee:46:a2:4a:93:48:4e:3b:80:e0:d4:08:aa:8c:ed:69:65:
         41:15:89:a0:ef:8e:e7:f4:5e:fe:a2:b0:b2:96:a7:a5:63:10:
         6f:cf:96:94:3b:01:fa:b9:ee:7d:ee:8a:a1:ce:c4:55:37:30:
         52:49:46:f2:df:0b:ba:cf:c4:ac:93:2e:3f:e8:fb:e7:db:f8:
         be:8d:8e:01:75:d1:2b:5d:cc:b1:f3:7c:5e:3a:af:a1:89:16:
         16:cb:57:88:6a:de:ef:6d:1b:5e:1f:0f:fc:6f:44:73:8f:ea:
         20:06:c7:8f:31:b5:85:6b:b8:d8:c9:24:b2:8c:10:56:a6:f4:
         1b:c5:81:4f:b4:3b:95:f3:ce:5e:e3:00:4a:46:89:b7:c9:e0:
         6f:cb:25:96:99:d9:4f:4d:2b:f6:74:c2:d5:49:d9:7e:05:62:
         4f:83:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----