Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/72ce306a-7135-32cf-9041-cba007623bf6.roa
File:                     72ce306a-7135-32cf-9041-cba007623bf6.roa (raw, json)
Hash identifier:          XXN5rOx4fnJJuZ2iCt35OJTKTAuaX/F2ci+AVnRndj8=
Subject key identifier:   F2:20:B4:8D:84:46:78:69:D5:AE:12:98:09:ED:AB:DD:DE:60:C5:CF
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F4328584397DA60C441852569AEE908C0
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/72ce306a-7135-32cf-9041-cba007623bf6.roa
Signing time:             Wed 18 Oct 2023 17:39:16 +0000
ROA not before:           Wed 18 Oct 2023 17:39:16 +0000
ROA not after:            Tue 16 Jan 2024 18:39:16 +0000
asID:                     205320
IP address blocks:        165.140.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:97:da:60:c4:41:85:25:69:ae:e9:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Oct 18 17:39:16 2023 GMT
            Not After : Jan 16 18:39:16 2024 GMT
        Subject: CN=efcf437a-c0ca-41bb-8c57-bc122a5d17cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:07:f4:42:d1:8b:70:44:d0:ec:52:d7:d5:
                    48:9a:4c:25:d3:a8:a7:5e:aa:62:c3:3f:aa:cb:c0:
                    18:77:e8:e1:0d:9f:8f:90:84:f5:a3:1d:96:a4:ea:
                    bd:53:a4:ed:fd:83:75:04:bc:0c:ed:ae:b1:98:9d:
                    cf:2f:d7:dd:7e:c6:6f:96:d5:ba:c7:1d:60:d8:c6:
                    fc:e8:94:ee:0b:41:4b:90:7e:eb:79:51:78:0e:54:
                    b6:a5:80:cf:bf:0b:7c:05:88:7d:74:25:90:f7:83:
                    bd:34:ab:16:a8:9c:9f:9f:cd:94:c5:ba:3e:fe:c8:
                    27:98:50:74:51:40:75:c4:8f:6c:f8:b7:1b:26:72:
                    59:f9:53:1b:9f:b2:e0:28:cb:9b:8b:7e:96:ae:ec:
                    8b:7d:2a:65:f6:5a:17:73:67:f1:2a:42:b3:a4:c5:
                    62:82:81:c9:f6:aa:1d:4c:81:a7:81:a1:19:70:2c:
                    c1:44:cd:31:8d:d7:0b:03:ea:16:24:1c:69:a6:1e:
                    aa:0f:7e:92:eb:fc:c6:6a:9a:32:0e:8f:85:c9:3c:
                    41:a1:d3:c7:96:eb:3b:86:c3:92:b2:d1:50:d8:9d:
                    5b:47:fa:21:c9:47:39:57:19:82:b6:1b:c3:6d:ca:
                    03:78:e5:81:44:fa:84:37:75:bf:9b:9c:6e:15:de:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:20:B4:8D:84:46:78:69:D5:AE:12:98:09:ED:AB:DD:DE:60:C5:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/72ce306a-7135-32cf-9041-cba007623bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:2f:91:ca:8b:4e:d5:67:67:bc:06:98:d5:d9:f1:21:78:
         81:fb:e2:1a:b6:47:d6:2d:39:1f:85:e5:3f:d8:c5:a8:6d:76:
         a2:cc:a4:27:bc:f6:e0:f0:3a:be:69:06:13:11:07:13:52:08:
         89:17:cd:f4:4e:8b:31:6c:fb:a0:b9:24:66:fe:26:a1:e6:2d:
         09:b4:87:a1:54:50:59:22:c1:f6:60:3e:10:87:6c:bf:6d:44:
         6b:43:50:34:3d:29:2a:41:17:a0:24:5e:62:a2:4a:48:b1:a5:
         c3:f2:65:88:24:da:1a:04:a1:cb:cf:8d:3b:8c:69:3c:ea:22:
         02:03:22:0b:dc:8c:14:f6:1e:3b:73:f8:6a:1e:ca:51:6f:9d:
         b8:15:33:72:b8:9d:f6:67:a0:60:59:b8:c7:ac:86:5e:02:aa:
         a3:60:16:fb:a7:cb:2a:ea:8a:26:bf:28:25:c8:c3:2e:f2:35:
         5b:82:a4:86:1f:cf:c7:1a:4f:7c:03:1e:a3:ec:12:2c:af:ff:
         21:ff:e1:6e:c6:85:09:7e:9b:1b:3c:ea:05:8b:42:f0:4a:84:
         8d:be:5b:ec:e4:7d:70:8c:70:5a:b9:6d:fa:2a:2a:99:48:83:
         41:d4:fe:f8:af:3a:0a:68:e8:70:cc:29:2f:d2:7b:95:75:66:
         e5:06:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----