Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ce203c4b-c73a-3ee9-b9a5-824ac9a4fe56.roa
File:                     ce203c4b-c73a-3ee9-b9a5-824ac9a4fe56.roa (raw, json)
Hash identifier:          i3RPZ7QV6n5nHsoGst5VQEvRfcrWKprr8dpIwVVD0sU=
Subject key identifier:   66:24:9B:08:93:EE:99:5C:EB:72:18:DE:9B:C2:93:00:58:FA:51:D0
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285843465A283AB73350F1007C4DA0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ce203c4b-c73a-3ee9-b9a5-824ac9a4fe56.roa
Signing time:             Tue 19 Sep 2023 13:00:25 +0000
ROA not before:           Tue 19 Sep 2023 13:00:25 +0000
ROA not after:            Mon 18 Dec 2023 14:00:25 +0000
asID:                     7922
IP address blocks:        23.150.33.0/24 maxlen: 24
                          23.150.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:46:5a:28:3a:b7:33:50:f1:00:7c:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Sep 19 13:00:25 2023 GMT
            Not After : Dec 18 14:00:25 2023 GMT
        Subject: CN=89eda364-9e2b-400a-bdcc-b2bc7507e028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:9f:bb:0e:ac:38:5c:ec:5e:cd:89:db:7d:
                    e2:fb:ff:29:95:de:03:e5:a8:85:5d:8c:2a:31:22:
                    3a:3e:7c:b8:b6:21:26:ab:ae:6f:d8:8f:3b:5c:d1:
                    bd:41:e8:fa:d7:e9:ad:84:bb:f4:25:7d:eb:6a:97:
                    6f:2c:d0:3b:16:25:28:c5:a3:eb:b9:21:3e:f4:86:
                    20:37:ad:3f:12:16:8b:13:5c:72:77:5c:9d:06:e3:
                    71:7a:c6:d3:f7:b1:b4:86:d8:b2:c6:27:7d:07:83:
                    40:6d:81:f0:fc:37:30:67:7c:1b:95:e9:01:63:e2:
                    93:1a:c1:bd:a1:9e:d2:04:c7:3b:3a:31:82:44:60:
                    a7:39:bf:f0:f5:fe:71:78:a5:55:a0:a2:42:a7:92:
                    29:e2:d7:4d:80:55:88:68:f2:0d:72:bb:f2:dc:64:
                    74:07:2a:ce:23:cb:b7:14:82:ab:f0:8e:8c:cd:a8:
                    05:ac:0f:be:0f:bb:fa:6b:17:2c:d8:54:72:7a:2a:
                    26:9f:05:53:08:9d:67:09:af:6f:01:96:f8:11:5c:
                    f4:37:fa:2f:c5:59:ec:81:31:47:c1:1a:e8:1b:98:
                    c7:9a:b0:49:11:cf:7d:5b:93:3c:51:bc:7f:83:01:
                    99:bc:9e:28:8f:99:59:af:53:83:a5:8d:26:e3:41:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:24:9B:08:93:EE:99:5C:EB:72:18:DE:9B:C2:93:00:58:FA:51:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ce203c4b-c73a-3ee9-b9a5-824ac9a4fe56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:62:75:75:9c:5d:5b:98:75:0f:8d:58:45:f1:15:af:ce:0a:
         72:7d:26:8f:6c:e0:03:c7:6e:0e:b7:d5:7d:a0:74:65:4d:0e:
         20:73:c3:39:e5:f5:7d:bc:cb:b6:d8:52:95:ce:09:c2:32:ec:
         5d:f4:d6:fb:a1:c7:9d:07:f7:36:f5:1d:17:06:6c:88:85:95:
         f2:e5:7b:aa:c3:c7:73:b4:9a:e0:5a:27:79:cd:ba:99:65:33:
         ac:f9:6e:3e:66:b5:21:53:97:5f:07:26:07:a4:22:b4:fb:24:
         e1:93:fa:d2:b2:33:b2:cc:20:58:4d:7d:2b:91:a3:15:18:ac:
         03:8a:e5:a2:f8:67:f9:7e:47:63:a9:2a:1f:88:ae:46:b6:c3:
         16:db:54:7b:e2:28:29:c0:26:34:1d:70:0e:ea:0f:54:fb:08:
         c3:01:47:af:c6:f2:3e:da:99:4b:31:71:c5:3f:1d:11:6c:f2:
         38:5e:0c:4c:3a:5c:6f:d4:0e:3d:95:24:14:d7:7f:c5:ef:70:
         b1:08:ac:2e:eb:fc:ff:35:33:10:cb:a2:28:83:22:c5:5f:ec:
         60:f0:6d:19:99:10:b9:54:8f:95:a5:32:aa:08:46:9e:12:bd:
         08:35:8e:55:6c:c8:55:7d:4b:89:c3:91:cd:88:06:57:82:b0:
         09:c1:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----