Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f74aa5d7-f697-3bd7-9fa2-f72ea1dd956f.roa
File:                     f74aa5d7-f697-3bd7-9fa2-f72ea1dd956f.roa (raw, json)
Hash identifier:          vRZL6gwjKccBdnSqqniWmgRg9+AbeuWn9Fyt+VvxOqY=
Subject key identifier:   D9:39:6B:D8:54:D4:FA:94:40:C1:E5:12:B4:03:B2:36:D9:22:09:19
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858434C250CB95F7D2F10DBE10180
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f74aa5d7-f697-3bd7-9fa2-f72ea1dd956f.roa
Signing time:             Thu 21 Sep 2023 14:48:17 +0000
ROA not before:           Thu 21 Sep 2023 14:48:17 +0000
ROA not after:            Wed 20 Dec 2023 15:48:17 +0000
asID:                     237
IP address blocks:        35.33.0.0/18 maxlen: 18
                          35.33.5.0/24 maxlen: 24
                          35.33.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4c:25:0c:b9:5f:7d:2f:10:db:e1:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 21 14:48:17 2023 GMT
            Not After : Dec 20 15:48:17 2023 GMT
        Subject: CN=1a32e211-1b36-4438-8baa-c9243686473a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:4e:68:64:f2:ed:0b:8e:49:21:73:c7:e0:
                    28:7d:5d:17:b2:ed:e1:d3:b4:30:3b:88:84:ce:82:
                    1b:27:01:a2:5b:36:28:7a:7d:91:5e:af:de:02:ab:
                    e1:4e:fc:46:c2:fd:1a:30:8e:fa:80:64:28:cc:24:
                    1a:f3:c0:5c:aa:f1:d3:fa:4d:57:14:9e:62:44:b8:
                    83:ee:bc:07:88:11:3d:07:a0:40:fb:02:fb:a4:8f:
                    31:79:74:96:bd:0c:4c:ac:d7:30:82:18:b8:a0:3e:
                    66:7f:0e:8c:ac:4a:a0:72:40:cf:13:9f:d2:3c:c8:
                    76:2b:e0:41:00:3e:5f:09:ca:3d:aa:34:93:ae:a7:
                    e8:10:6e:e7:62:6b:ed:16:56:8d:b0:15:04:4f:d8:
                    9c:8c:e8:dd:7b:09:86:70:6a:da:92:06:78:d7:73:
                    1e:cd:4e:7c:85:e6:29:17:2f:35:76:ef:53:e3:8c:
                    84:0c:96:f7:bd:8a:a4:da:42:c7:78:3a:65:00:f8:
                    d3:8e:ce:5f:8c:39:dd:48:42:eb:5d:02:1d:c2:e2:
                    d3:46:d2:e5:d0:42:f3:5c:e2:41:9d:0b:e8:04:ff:
                    1c:e1:82:e5:32:4b:59:ef:9c:5a:2a:e7:8f:94:57:
                    62:97:50:a2:d0:38:a4:42:06:90:43:19:50:d0:b4:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:6B:D8:54:D4:FA:94:40:C1:E5:12:B4:03:B2:36:D9:22:09:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f74aa5d7-f697-3bd7-9fa2-f72ea1dd956f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:40:cf:35:7c:9a:72:ea:37:eb:12:6d:bc:93:b0:ce:cf:
         6c:06:7f:00:4d:fc:a4:8d:45:0f:36:15:b4:2f:a6:57:9f:7a:
         91:1b:4a:2a:4b:73:87:36:9e:2c:39:cf:bb:c7:92:55:4d:e0:
         90:e9:55:1e:e3:3f:a9:1e:7b:8e:4f:3b:39:b1:e9:97:a0:d4:
         d8:8b:cd:89:dc:bd:fe:c4:d4:b1:95:b2:8a:8b:43:dd:96:63:
         1d:0c:2f:30:db:95:c3:b9:7b:0a:35:da:a1:42:00:b8:48:0d:
         4b:c0:c4:89:b8:de:5b:11:5c:23:6a:13:04:c7:51:15:62:a7:
         ae:ee:fe:30:1a:13:6c:c1:64:d2:b3:d3:11:b2:c2:70:23:3a:
         85:be:66:6e:f6:97:2b:ba:d6:07:cb:19:ed:ac:14:66:ac:61:
         5a:54:dc:51:97:11:bf:ec:28:4e:5e:70:2a:86:30:19:31:ad:
         58:c5:d4:d2:e6:7f:34:ef:12:58:af:d9:a8:ec:a3:06:4c:ec:
         6c:36:41:41:71:b8:b7:ae:4d:9d:8e:ce:a6:9f:a7:da:1d:68:
         e4:37:8f:9b:d2:d2:48:e2:ca:43:96:fd:e3:5f:68:53:fc:54:
         f4:69:36:6c:db:fa:97:1e:b4:64:4f:5b:cd:c0:3c:7a:58:19:
         da:87:fd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----