Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/3ea0de7a-083b-3861-9617-f771b04898d6.roa
File:                     3ea0de7a-083b-3861-9617-f771b04898d6.roa (raw, json)
Hash identifier:          EK0WygR3b07Fdj8Uz2C7OrnHtzwVS82jHPI84Zh4G5o=
Subject key identifier:   6D:E0:4E:29:D7:9F:C4:8D:E0:BC:37:D3:08:E3:A2:D2:D5:BB:96:76
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F43285841E46CF96EA9B485D19E77C800
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/3ea0de7a-083b-3861-9617-f771b04898d6.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sun 13 Aug 2023 18:10:26 +0000
asID:                     399486
IP address blocks:        64.112.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:f9:6e:a9:b4:85:d1:9e:77:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug 13 18:10:26 2023 GMT
        Subject: CN=b461e4ec-998c-496c-9d9b-aaefa6d429d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:9f:5a:ec:fb:87:4c:1a:f7:0c:31:10:8a:
                    2d:9a:58:f1:6a:4d:3e:56:31:af:95:4b:07:a8:24:
                    73:ed:61:68:6e:69:25:65:9c:41:28:9a:72:a8:25:
                    13:5b:28:17:04:5a:5f:5b:1f:64:0d:9c:ed:7e:6b:
                    64:94:70:86:1f:7e:0e:55:7b:73:b4:64:2f:2d:5b:
                    2c:d1:2e:f3:f6:9d:cc:23:15:06:73:cf:1a:7e:7c:
                    74:a0:98:65:0b:f7:4a:88:19:c2:c7:ac:df:59:2e:
                    11:5f:3c:a6:e3:8e:c0:e7:2c:d1:49:1f:77:86:a9:
                    9a:28:3d:07:d7:e1:e6:90:2b:8b:51:c7:4b:4d:e0:
                    d6:b6:b9:f7:44:f6:9b:04:75:da:38:12:e5:41:d8:
                    54:f2:0c:74:05:49:87:a7:ba:5f:6a:87:4d:1e:fc:
                    b5:d7:9b:67:90:50:63:a5:ed:01:a2:ae:73:07:6c:
                    6b:eb:e5:32:eb:d3:e7:00:2a:78:9c:78:4e:61:e7:
                    90:0d:26:4c:52:53:4e:4a:fd:52:64:69:aa:c2:42:
                    ac:20:5f:b6:f2:69:76:d1:6b:5e:8a:b7:e9:68:2b:
                    96:8e:23:bf:9c:1a:f0:98:b0:19:fd:67:50:77:cc:
                    71:1b:05:94:0d:da:07:8c:9c:a2:f4:d5:5a:82:52:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E0:4E:29:D7:9F:C4:8D:E0:BC:37:D3:08:E3:A2:D2:D5:BB:96:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/3ea0de7a-083b-3861-9617-f771b04898d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:88:41:ed:2a:17:48:3c:b5:00:9c:30:fe:57:6b:2d:e3:
         73:42:62:09:95:79:b0:69:4a:3a:12:d5:07:e4:bf:56:49:b6:
         6e:db:0c:c0:05:29:8e:5b:90:7f:04:7b:c7:16:08:d0:34:6a:
         68:9c:b7:21:71:19:05:b4:d1:b5:e9:69:fb:f2:f6:60:45:ac:
         eb:f1:13:e7:8d:0b:4f:e2:fc:c1:58:32:e2:38:58:72:80:4f:
         7f:46:86:b3:62:13:35:52:f0:6e:6c:ee:82:d0:cf:f6:d6:17:
         58:37:ae:7d:03:1c:5c:7a:de:90:f7:8f:3e:8b:51:8c:d7:7a:
         c3:ff:ec:1c:57:ea:40:30:6b:3f:f9:02:0f:ab:a4:4a:0a:4a:
         ac:4d:75:d1:0e:5f:b5:cf:62:62:10:4e:6e:1b:05:55:35:cc:
         09:fc:72:db:5f:33:cc:ff:e6:dd:1d:38:30:58:74:3c:a4:9c:
         88:e4:39:89:00:6f:8d:c5:32:b4:3d:f7:17:c7:7e:12:fc:4e:
         ba:10:85:c1:f4:b0:61:44:5e:14:2b:72:7c:97:3a:85:ca:15:
         ce:4e:bc:e5:7a:db:b0:ce:16:79:0e:aa:30:d2:3e:12:6a:c2:
         1a:be:4c:a3:5d:2a:2e:79:2c:f5:8f:3c:41:82:12:b2:08:f3:
         66:6f:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----