Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/9331bb64-c76b-34b9-80d9-574889160610.roa
File:                     9331bb64-c76b-34b9-80d9-574889160610.roa (raw, json)
Hash identifier:          O+a9zVDaTRzU4H4c5s5LXIdJ1+iuXYZt/Epphf/z3pc=
Subject key identifier:   F9:75:16:0F:D3:CA:D6:C5:FF:4D:E8:6C:C4:69:C7:11:5B:6C:2E:07
Certificate issuer:       /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial:       010D0C9F4328584392BD82B71A992825A9E94F20
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/9331bb64-c76b-34b9-80d9-574889160610.roa
Signing time:             Mon 16 Oct 2023 21:42:04 +0000
ROA not before:           Mon 16 Oct 2023 21:42:04 +0000
ROA not after:            Sun 14 Jan 2024 22:42:04 +0000
asID:                     2386
IP address blocks:        199.255.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:92:bd:82:b7:1a:99:28:25:a9:e9:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Validity
            Not Before: Oct 16 21:42:04 2023 GMT
            Not After : Jan 14 22:42:04 2024 GMT
        Subject: CN=89e3f5f0-1fd5-422c-af45-60572bdd72da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:81:f9:0c:a1:2c:af:b0:02:26:52:e7:c4:
                    1f:d0:85:be:a2:27:b1:16:15:1e:4d:0f:29:cf:16:
                    21:f0:c1:b7:46:5a:9b:07:3d:08:06:de:cb:2d:0b:
                    a5:77:07:be:07:96:cb:59:06:66:ca:a1:21:ce:0e:
                    88:cb:20:a8:81:f3:12:76:16:e9:a5:a0:a8:02:ff:
                    77:d5:db:64:7e:34:c3:e1:a1:a9:78:f9:3e:db:1f:
                    64:ff:52:c2:af:c2:f2:32:5e:11:86:62:85:32:71:
                    48:df:74:aa:15:48:c9:1a:59:95:d6:bd:ba:62:4d:
                    2b:ae:91:71:f2:da:5f:fb:dd:9e:67:4f:a5:e3:41:
                    91:b5:cf:3a:a3:b2:d6:6a:4b:6c:4f:b6:44:ec:83:
                    31:14:38:3d:d9:a4:fe:c8:17:b0:1c:d1:ad:08:f9:
                    76:fd:da:92:25:c7:af:16:1b:94:20:33:71:56:e4:
                    52:09:b9:14:ec:a4:66:58:a2:af:09:a4:0e:03:49:
                    ad:41:b7:a2:db:75:47:1a:25:15:00:c2:34:05:d0:
                    aa:18:5c:08:a2:ff:a5:32:86:2a:74:0f:69:5c:e5:
                    22:d8:8f:9f:5d:ef:8b:d0:6f:9a:83:cd:4e:ff:7a:
                    27:6a:86:12:c1:c9:b1:79:04:0d:8b:ea:54:e6:e2:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:16:0F:D3:CA:D6:C5:FF:4D:E8:6C:C4:69:C7:11:5B:6C:2E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/9331bb64-c76b-34b9-80d9-574889160610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:94:9e:d3:9c:7f:ca:fe:ee:d5:cb:54:e8:c7:b8:f3:9c:68:
         73:21:34:6d:bf:58:30:5e:51:83:e0:b3:9b:8e:ba:4d:42:0f:
         60:58:4c:f9:94:ba:f8:6b:11:89:2f:50:c4:55:ad:96:7d:de:
         80:2b:02:34:e4:d2:cb:e3:37:ab:7b:d3:7d:cc:18:b3:c4:de:
         a4:71:76:e8:04:1f:2f:00:a8:ba:85:bd:4a:c4:2a:94:f6:ed:
         42:e6:98:03:24:50:59:32:9c:ae:a8:1d:95:be:dc:01:a8:c8:
         b2:fc:cd:4c:1d:45:80:98:24:82:46:c8:3e:8e:81:7d:9c:97:
         ea:77:d5:b0:62:5f:f8:83:9c:9e:f2:9e:62:3e:e3:a5:86:ab:
         cc:02:29:d7:39:3f:9e:e1:b5:f5:d3:9c:94:23:c8:75:c6:22:
         a2:6c:67:13:9e:93:80:54:ee:43:3a:a3:c1:b6:48:15:72:01:
         68:3c:57:42:1f:47:f7:29:8a:d2:63:97:38:26:30:f6:dc:f9:
         f3:f6:7d:1b:d4:e3:ed:dc:72:27:81:32:8a:c2:10:43:0b:30:
         9e:ad:3a:f7:c1:39:1e:c1:1d:38:af:1c:4f:c9:f0:0a:ca:df:
         44:ed:b7:ba:93:72:de:af:95:43:74:fa:cf:e6:73:7d:af:b9:
         65:bd:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----