Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/1604be48-9a6a-3f50-ae79-38b476afd195.roa
File:                     1604be48-9a6a-3f50-ae79-38b476afd195.roa (raw, json)
Hash identifier:          1JEsdszEFGjvqKG+n9nXnx6zQwMiFPCWGaBmd39j9S4=
Subject key identifier:   59:D4:7C:DF:02:01:E6:A7:55:95:23:C1:91:CE:EB:17:FA:4A:27:BD
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F432858430F85AB56EB3B2E829BD44300
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/1604be48-9a6a-3f50-ae79-38b476afd195.roa
Signing time:             Wed 30 Aug 2023 21:38:39 +0000
ROA not before:           Wed 30 Aug 2023 21:38:39 +0000
ROA not after:            Tue 28 Nov 2023 22:38:39 +0000
asID:                     211318
IP address blocks:        192.67.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0f:85:ab:56:eb:3b:2e:82:9b:d4:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Aug 30 21:38:39 2023 GMT
            Not After : Nov 28 22:38:39 2023 GMT
        Subject: CN=e439b8df-554f-4a1d-89f7-11eeec04c3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:f4:21:e4:a0:18:6d:4f:d3:78:10:72:ba:
                    1f:1c:bf:37:36:71:80:e1:be:d0:73:55:d2:23:6e:
                    92:05:4b:74:ec:c8:f3:eb:d5:9c:9e:22:87:f9:a5:
                    08:58:00:d6:97:16:5b:e6:7a:cf:15:98:23:83:19:
                    01:9a:fa:ff:23:67:10:71:f8:88:13:3c:6d:07:dc:
                    1c:7c:c9:15:10:b2:b9:85:c5:e9:41:70:c9:c6:39:
                    0f:50:6d:82:05:a8:32:f6:46:1d:bd:0c:22:30:85:
                    b6:c7:1e:0d:eb:b5:fa:f9:90:e4:d5:82:80:9a:81:
                    4a:f9:a8:0d:51:35:fd:ac:b6:7a:64:6f:d6:e2:fd:
                    d4:50:5f:5f:b5:8a:39:fa:bd:49:8b:b8:f0:75:00:
                    57:48:20:02:92:82:af:bf:8e:b1:40:c7:bb:0c:2b:
                    c1:c7:50:2d:58:7f:e6:ff:a3:57:00:ee:01:aa:9f:
                    e5:d0:91:26:6f:f7:ee:45:c0:ae:30:57:2a:82:f1:
                    f8:ff:91:fe:17:91:1b:df:8d:02:e0:9f:52:a0:28:
                    67:6d:64:37:fc:de:0a:04:df:6d:fb:d3:d3:a2:c8:
                    29:b0:58:27:44:57:c1:84:6d:e4:23:8b:fb:2b:bb:
                    e3:58:7f:77:17:60:35:7a:e8:e0:50:ef:29:a2:e2:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:7C:DF:02:01:E6:A7:55:95:23:C1:91:CE:EB:17:FA:4A:27:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/1604be48-9a6a-3f50-ae79-38b476afd195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:5b:e9:5a:28:79:4e:83:3a:95:de:8c:e3:0a:9c:7b:39:
         0f:eb:e3:fc:1e:d0:0a:58:ea:0a:89:bf:c6:ad:95:02:9b:a2:
         20:b7:28:34:29:4f:a7:01:03:e5:e8:38:d1:cf:1a:fb:8b:a6:
         c1:06:32:78:c1:5f:5e:63:be:b1:ed:1e:2a:62:ee:9b:02:22:
         f4:f8:a2:6c:ff:85:aa:3d:70:00:95:3a:80:38:49:24:c7:70:
         73:af:65:c2:37:c9:18:2d:38:0d:a3:b6:b1:08:c8:1e:43:a7:
         ff:84:1f:fa:c4:08:62:a3:cc:e1:9b:9e:de:7a:42:9c:21:9b:
         22:6b:87:f6:cb:f3:45:c1:69:31:06:8c:88:de:3d:91:60:3f:
         df:ea:46:60:de:2f:b1:dd:98:ff:24:07:d1:17:b1:c4:a5:71:
         2e:59:7e:21:d0:3c:f5:1f:23:e3:0c:51:38:d9:ef:ca:3f:f5:
         94:df:ff:ab:9d:b5:4e:31:df:b4:11:a4:41:ff:e9:28:ad:ca:
         df:95:2e:93:e9:dd:38:3a:34:97:7a:2c:93:dd:63:76:3b:35:
         5b:a2:4b:0d:e0:b1:ae:7d:bb:79:39:57:33:c0:f1:95:7e:f2:
         5a:73:ce:0b:a8:82:e7:e6:f2:11:21:90:65:d3:2f:d7:47:0a:
         66:ea:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----