Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/fb7d9db3-4167-3fed-a24a-cf4a074b7e53.roa
File:                     fb7d9db3-4167-3fed-a24a-cf4a074b7e53.roa (raw, json)
Hash identifier:          BbLqEgGMEpXK2kte9QeXJTMaphw/R2TcaqMlf/bHCws=
Subject key identifier:   B8:58:63:4F:42:92:0B:DD:A0:92:44:63:4A:27:28:45:15:EC:E4:91
Certificate issuer:       /CN=822f9974-af88-4d0b-a65f-065fdd26c645
Certificate serial:       010D0C9F43285841E46D0114B7477066ED2D2900
Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/fb7d9db3-4167-3fed-a24a-cf4a074b7e53.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 03 Aug 2023 18:54:06 +0000
asID:                     174
IP address blocks:        23.247.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:01:14:b7:47:70:66:ed:2d:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug  3 18:54:06 2023 GMT
        Subject: CN=032695e0-de03-4377-b4a3-eb201b613e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:ff:73:45:55:85:4c:70:e4:99:18:c8:2d:
                    50:28:bc:b8:9f:16:2d:a6:a0:52:b4:4e:c3:c2:f2:
                    37:03:5f:cc:db:9f:e7:ee:8d:4c:90:a2:2f:50:47:
                    63:a6:11:b8:7f:85:a7:60:ea:17:a0:04:e1:d9:3b:
                    71:59:5d:ee:aa:29:b1:4a:dd:4f:a7:a6:33:bf:0f:
                    c5:53:fc:1d:e4:15:67:61:9e:27:48:47:d9:e9:0b:
                    44:ee:cd:25:12:6c:2d:f0:79:ae:56:16:08:cd:fc:
                    08:a1:53:34:06:98:ed:36:04:75:59:1d:b2:ab:53:
                    16:a4:f3:84:c1:8c:9e:e6:8d:7d:b0:06:af:d3:01:
                    47:d1:a7:38:06:bd:b8:70:d0:46:16:a9:29:d4:6d:
                    35:be:b3:65:9c:f1:6d:3c:44:09:1b:74:94:ae:dd:
                    c5:3f:bb:ae:0d:1e:0f:30:3b:dc:2a:a7:ec:50:b7:
                    c4:3e:01:8f:bd:a7:ab:b6:d8:09:8f:a5:2d:99:2b:
                    6c:f7:ad:74:6b:b0:a6:d9:99:fa:eb:6f:68:96:31:
                    e7:ce:17:bc:55:bd:ca:e5:93:5b:9b:4d:73:5e:99:
                    7c:7b:49:2c:05:35:9a:d8:e9:ce:7b:3b:92:4c:72:
                    12:f6:d0:69:1a:54:f1:91:7d:70:8b:d2:c3:47:3b:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:58:63:4F:42:92:0B:DD:A0:92:44:63:4A:27:28:45:15:EC:E4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/fb7d9db3-4167-3fed-a24a-cf4a074b7e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl

            X509v3 Authority Key Identifier:
                keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:a3:d0:90:af:e2:12:ba:35:57:2d:40:cb:0a:1d:53:7f:
         1d:a2:ed:11:7d:c6:e4:78:f3:e2:f9:ee:20:40:5d:2e:56:e5:
         29:fa:47:47:e8:91:8a:74:7a:c6:52:80:b3:cf:25:29:e7:e9:
         04:23:fc:99:54:eb:d9:a1:cb:5d:d7:70:2d:c3:65:9a:9d:eb:
         66:ef:97:a5:1d:4c:44:32:2e:a7:20:6a:95:07:c1:be:04:86:
         c9:42:0e:a8:4f:e0:6a:f1:8f:12:c5:3f:8f:9d:eb:10:13:51:
         20:f3:ec:26:6a:ed:c0:30:4f:4d:2a:76:66:c6:3e:0b:8b:76:
         36:f2:b0:cb:a7:61:1c:c4:99:43:73:82:5e:5c:b0:ce:c1:7a:
         3c:9c:54:d6:31:0c:49:c5:38:63:88:90:fa:fc:d0:9d:18:6c:
         a2:48:a0:84:d4:12:44:26:82:b0:03:02:23:bc:a7:fc:94:94:
         c7:3f:24:2b:e8:98:ce:8e:06:07:4b:9a:69:02:9e:88:8d:f4:
         e1:da:65:05:07:b0:eb:b4:cf:af:0f:c1:9c:a0:7d:e0:a8:08:
         1d:fa:df:66:f4:a8:ba:7e:ee:55:03:cf:d9:2c:89:2c:7e:35:
         e2:bb:af:3c:33:3b:1b:1b:76:4e:e5:88:c2:e5:68:f4:16:1c:
         dc:e0:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----