Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/70c6ecc1-d678-308e-8d1e-7df03e5e1c7b.roa
File:                     70c6ecc1-d678-308e-8d1e-7df03e5e1c7b.roa (raw, json)
Hash identifier:          KPP+6zu9TMJ3LFOVDdkvaVRnMTnOhlHfaZocLYv2bnQ=
Subject key identifier:   F1:1A:0E:9C:F6:8F:B5:0B:02:8F:45:FD:9A:F5:7A:E7:4A:B0:7B:49
Certificate issuer:       /CN=8e67558e-dc00-47ef-ae1c-16fb85202748
Certificate serial:       010D0C9F4328584335E59F90B691295B77E82220
Authority key identifier: 75:82:AC:6C:1C:0D:A7:05:A3:BD:A9:71:60:42:94:9D:E6:FC:93:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/70c6ecc1-d678-308e-8d1e-7df03e5e1c7b.roa
Signing time:             Wed 13 Sep 2023 15:32:42 +0000
ROA not before:           Wed 13 Sep 2023 15:32:42 +0000
ROA not after:            Tue 12 Dec 2023 16:32:42 +0000
asID:                     2763
IP address blocks:        74.118.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:35:e5:9f:90:b6:91:29:5b:77:e8:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e67558e-dc00-47ef-ae1c-16fb85202748
        Validity
            Not Before: Sep 13 15:32:42 2023 GMT
            Not After : Dec 12 16:32:42 2023 GMT
        Subject: CN=c8cf6ea0-44f5-4132-bf7d-2e277bf211c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:63:36:01:a0:f0:26:24:75:a5:61:f3:4c:61:
                    d7:0e:a1:58:22:84:96:c1:b4:26:a6:0e:00:0d:b2:
                    b8:e6:06:a3:bd:4f:7d:19:17:06:e7:ec:c1:71:9b:
                    73:f6:f6:59:69:f7:cb:e3:df:49:55:9f:44:08:cc:
                    83:c6:d0:e7:18:ac:ab:0e:8c:f2:65:ed:9a:39:b6:
                    63:aa:e0:69:95:14:f7:6c:fd:33:b9:0f:9f:fe:df:
                    63:fa:61:25:e6:88:5b:1d:d2:c7:b8:51:6f:a7:1b:
                    25:26:8a:af:88:ff:b2:c2:cb:78:c0:d4:48:dd:c0:
                    53:87:8b:96:47:14:2a:8b:e6:01:68:fb:1d:33:55:
                    7f:6e:0d:72:f4:22:2b:98:cc:8e:79:6a:ba:47:f0:
                    c9:b8:60:20:3c:f7:65:2f:46:aa:da:7d:39:7b:b9:
                    01:2c:7e:8a:48:ac:8e:ba:e4:ab:12:b9:99:a8:62:
                    c8:60:4e:26:40:bc:74:36:22:4f:dc:85:0f:90:73:
                    36:dd:40:c9:fc:7b:12:a0:b3:fb:cc:80:32:99:b6:
                    0c:3b:63:4f:25:f5:86:fa:6b:98:0b:d6:fa:8f:b5:
                    1d:55:17:e9:11:07:75:44:20:3a:07:6a:8c:0f:03:
                    b4:18:44:ec:ca:0a:94:1c:51:38:b0:1a:89:fa:c4:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1A:0E:9C:F6:8F:B5:0B:02:8F:45:FD:9A:F5:7A:E7:4A:B0:7B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/70c6ecc1-d678-308e-8d1e-7df03e5e1c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/8e67558e-dc00-47ef-ae1c-16fb85202748.crl

            X509v3 Authority Key Identifier:
                keyid:75:82:AC:6C:1C:0D:A7:05:A3:BD:A9:71:60:42:94:9D:E6:FC:93:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fe:cc:7c:27:e2:34:cf:3b:5a:9e:c2:d5:02:a4:21:27:ff:
         1e:84:de:06:fd:a4:c4:59:0b:cb:54:d2:ab:b4:b8:ea:5b:77:
         6d:0c:14:55:14:c8:db:df:e0:2e:77:47:1a:99:d4:2f:b6:c3:
         b4:39:78:00:2d:30:b6:ea:50:c2:80:03:01:3c:92:33:52:48:
         6c:15:d0:c5:da:85:8b:c5:c5:d3:14:36:60:af:a2:92:1a:2f:
         9f:f1:fa:4a:48:b4:62:94:84:88:f1:92:d6:c5:a8:80:2f:60:
         35:40:00:8c:f6:d2:6b:bb:85:87:83:c7:67:db:5e:62:d9:f4:
         8b:93:0f:7d:66:7d:f7:4c:a2:56:e1:e3:11:65:4d:c4:8f:42:
         dd:5e:c0:1f:59:06:f7:5e:96:23:60:9c:08:d7:2c:76:e5:16:
         34:3d:ca:82:29:69:b1:61:52:34:ab:3a:4e:3b:69:d9:cd:e4:
         42:f0:0b:98:23:b2:0c:b0:f2:28:f0:24:24:96:ef:16:ae:c8:
         f9:05:7a:9f:f6:4c:73:b7:fe:f4:97:90:f7:bd:a5:99:34:19:
         ac:2b:75:a7:a8:aa:41:c4:11:6e:5e:36:f5:9b:61:70:ec:d0:
         96:82:a0:70:ff:7a:91:b7:bf:03:f7:69:22:87:2c:d1:3a:ce:
         5e:40:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----