Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/a1db100b-de22-384a-81aa-a2955da400ea.roa
File:                     a1db100b-de22-384a-81aa-a2955da400ea.roa (raw, json)
Hash identifier:          PcHQ6PotJjFVJtTvGm8Ry7SpQTAPheixARtWkNvLPvs=
Subject key identifier:   DB:1C:FD:6F:5E:DC:1C:10:E5:6A:93:02:96:9C:FF:E8:80:2C:B6:57
Certificate issuer:       /CN=8e67558e-dc00-47ef-ae1c-16fb85202748
Certificate serial:       010D0C9F432858433602E0EC3627160ACE677540
Authority key identifier: 75:82:AC:6C:1C:0D:A7:05:A3:BD:A9:71:60:42:94:9D:E6:FC:93:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/a1db100b-de22-384a-81aa-a2955da400ea.roa
Signing time:             Wed 13 Sep 2023 16:31:39 +0000
ROA not before:           Wed 13 Sep 2023 16:31:39 +0000
ROA not after:            Tue 12 Dec 2023 17:31:39 +0000
asID:                     43260
IP address blocks:        74.118.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:36:02:e0:ec:36:27:16:0a:ce:67:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e67558e-dc00-47ef-ae1c-16fb85202748
        Validity
            Not Before: Sep 13 16:31:39 2023 GMT
            Not After : Dec 12 17:31:39 2023 GMT
        Subject: CN=44f1701b-8e94-4a82-9a23-1b307319a34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:18:e0:4f:bd:c3:5a:6b:09:53:19:16:14:
                    d9:2d:d3:f0:ac:0f:5e:a2:73:8e:9b:bf:42:72:30:
                    30:31:4d:46:54:75:21:c5:f8:0e:2b:e1:05:40:92:
                    81:db:5b:54:4c:08:f1:15:c6:ff:c5:68:10:0c:90:
                    d9:8a:cb:48:69:75:89:34:ed:fc:50:03:fc:fc:8a:
                    fd:0b:fe:6c:88:ad:8e:28:17:ac:31:9f:9a:fe:1d:
                    af:f5:5c:81:62:b4:65:da:d1:22:39:4f:68:0a:85:
                    94:ff:f8:12:3e:52:30:c6:06:b8:f5:6d:a1:86:65:
                    a5:ea:e4:41:a3:90:e3:8e:0d:12:bc:63:76:d1:57:
                    f1:6b:59:84:32:a9:6a:20:31:16:11:a7:c3:dd:f8:
                    f1:71:c1:da:6d:b0:0c:f1:16:af:44:0b:9b:3a:af:
                    f6:fd:7d:8b:cc:08:6c:4d:b1:bd:1a:6a:76:76:eb:
                    58:ae:25:9e:4c:73:7d:a2:76:0c:ea:cd:1d:91:07:
                    dd:42:6c:fd:9c:1f:ba:a9:7f:a3:c7:23:05:4f:c0:
                    0d:87:1c:fd:e4:0f:68:d4:e2:be:09:65:ed:7c:f3:
                    23:2f:7c:7f:10:3c:0c:7a:af:92:b7:bd:b8:81:59:
                    f8:17:90:54:20:7e:1d:c2:d0:1d:cc:e8:a1:15:76:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:FD:6F:5E:DC:1C:10:E5:6A:93:02:96:9C:FF:E8:80:2C:B6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/a1db100b-de22-384a-81aa-a2955da400ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/8e67558e-dc00-47ef-ae1c-16fb85202748.crl

            X509v3 Authority Key Identifier:
                keyid:75:82:AC:6C:1C:0D:A7:05:A3:BD:A9:71:60:42:94:9D:E6:FC:93:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:a7:69:f5:c9:5c:7c:d5:6a:b3:dd:71:74:ab:64:43:0d:
         a7:a5:a8:ee:56:78:1c:87:42:08:f8:70:41:60:47:00:47:85:
         8f:d6:82:71:65:0c:5e:f2:65:62:eb:b7:83:4d:db:b2:6f:e1:
         4f:83:ca:3e:1b:f1:57:66:14:e9:f0:d7:c0:a9:22:23:b5:6c:
         63:68:db:6f:af:63:fe:1e:35:29:f2:14:a0:7a:1f:70:b0:99:
         1b:0c:24:ba:c1:8a:36:59:2e:50:16:90:95:c0:42:f4:28:e0:
         26:41:65:9a:1d:8e:44:87:92:1b:eb:2a:41:a7:d0:11:0a:19:
         19:c5:33:99:23:d2:6c:96:26:d8:e5:e5:04:44:44:c2:d5:dd:
         c7:40:11:33:dd:a5:ce:17:a4:e6:ce:94:fc:d6:c6:48:cb:74:
         52:00:fc:26:c2:a7:dd:a4:75:4f:ea:0d:2d:d4:f2:38:ba:5f:
         58:fa:d2:d5:c0:56:99:19:ea:3f:69:3d:01:54:97:5b:ef:38:
         d2:09:53:f7:66:eb:1a:fe:fc:8f:7f:b1:74:86:f4:f7:52:6b:
         90:96:88:4e:d1:36:ac:4b:b7:75:7c:f8:7d:38:c7:a5:40:27:
         41:5e:ce:50:b9:e9:44:38:3c:64:38:c8:31:0b:fc:54:20:41:
         ee:b6:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----