Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a86efbc-4f32-3e18-8b6b-1b9d49b9677f.roa
File:                     2a86efbc-4f32-3e18-8b6b-1b9d49b9677f.roa (raw, json)
Hash identifier:          xsamVyf2OHqpWefGw7ZbVHACng41I4QmNPiCLg0k7Do=
Subject key identifier:   01:C9:30:A7:B4:B4:49:29:71:25:AD:D9:AC:2A:F0:D4:7F:6A:E1:33
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F432858427D58E1D1E1271A16FC837100
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a86efbc-4f32-3e18-8b6b-1b9d49b9677f.roa
Signing time:             Sun 09 Jul 2023 13:00:20 +0000
ROA not before:           Sun 09 Jul 2023 13:00:20 +0000
ROA not after:            Sat 07 Oct 2023 13:00:20 +0000
asID:                     211439
IP address blocks:        64.113.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:7d:58:e1:d1:e1:27:1a:16:fc:83:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jul  9 13:00:20 2023 GMT
            Not After : Oct  7 13:00:20 2023 GMT
        Subject: CN=f28ca0e3-6eab-4ed2-9bc7-cab59e1ee6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e2:45:94:a5:9c:fc:88:bd:32:b5:3f:95:72:
                    ba:8a:ec:f0:00:10:74:fd:00:fd:2e:09:b3:b9:5d:
                    77:f7:a0:79:ff:28:98:a6:af:4b:b6:2b:f1:d6:e7:
                    d9:f9:35:2d:ad:79:40:58:39:ae:0a:6f:e2:6c:fe:
                    8f:73:a0:35:b9:a8:b1:2c:a5:51:11:cb:a9:0c:9b:
                    86:bc:b9:e9:d2:bd:6c:f0:6a:eb:7b:81:18:18:37:
                    74:d8:7c:61:e7:97:2d:cc:54:fe:22:90:2c:16:07:
                    c1:ab:48:82:66:19:fc:0b:d2:5e:db:0a:f0:53:84:
                    1f:81:4d:93:7f:38:99:16:89:d3:c5:58:b1:a7:1f:
                    43:26:7c:f3:43:3f:1f:b1:36:bc:6b:a6:8d:a5:a2:
                    12:31:e7:97:ad:f7:28:de:bf:93:33:46:94:f1:2b:
                    90:78:14:1a:9b:d5:ed:05:78:02:0c:54:41:4d:d5:
                    69:eb:79:83:ad:c3:11:d2:80:ee:4d:3f:3e:dc:69:
                    a4:55:a6:9a:1e:5e:c4:df:11:50:6d:0f:d9:f9:b1:
                    18:2c:32:4f:71:07:f8:22:5d:46:59:1b:01:d6:c8:
                    9e:bc:d8:89:6e:36:6a:67:2d:72:85:9b:53:6b:5f:
                    dc:9c:04:ca:19:8e:e7:00:83:0d:95:fd:f4:ba:50:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:30:A7:B4:B4:49:29:71:25:AD:D9:AC:2A:F0:D4:7F:6A:E1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a86efbc-4f32-3e18-8b6b-1b9d49b9677f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1d:63:28:e6:e6:b5:4c:2c:cb:4c:eb:d1:7d:c6:13:d0:70:
         7b:61:18:21:d9:a2:34:6c:38:30:f2:a3:46:90:51:88:85:76:
         68:38:d0:1a:b8:a2:29:21:fa:4d:83:31:bf:79:9b:f2:aa:24:
         b8:8b:9b:9b:7c:c5:2f:b6:0c:cf:d0:34:1e:13:7b:65:94:99:
         ae:86:5c:f0:39:1f:a5:13:e7:c4:d1:c6:13:b6:b3:c8:98:60:
         40:5d:35:c3:7e:86:e3:c0:33:a5:ce:9c:09:5e:69:6b:31:b0:
         14:90:86:52:af:07:65:b7:99:67:31:8d:b2:82:6c:2c:1e:04:
         72:49:f5:6a:db:ef:39:7e:2b:88:31:b7:0b:80:fb:b7:c3:29:
         8c:3c:34:58:e7:0a:9a:c0:c7:08:fe:c5:94:1d:5a:e0:46:68:
         db:de:b3:e9:73:05:aa:47:40:62:6d:c7:9c:89:6f:c3:8a:dc:
         5f:ff:f4:36:02:bb:2a:bb:46:ff:ed:f3:f3:48:b3:47:25:09:
         c8:a6:b0:95:86:e1:bb:34:cf:9d:36:20:cd:62:3f:77:81:71:
         5e:9c:1f:c8:90:02:6a:2e:5a:e2:a4:e4:5c:51:99:8e:f8:6c:
         2d:57:aa:56:3b:0d:f0:ac:38:b2:33:ea:41:5d:be:1d:3d:8d:
         51:e0:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----