Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/2d321e5c-c24e-309b-8dbe-811f709bffec.roa
File:                     2d321e5c-c24e-309b-8dbe-811f709bffec.roa (raw, json)
Hash identifier:          dVJZTnHZcWzIV8Mb2sC77lr14hF4qZZsv9Lpszc21fw=
Subject key identifier:   43:4D:7A:93:27:FB:0B:E8:9F:1D:52:F7:02:93:C7:87:3F:75:38:7F
Certificate issuer:       /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Certificate serial:       010D0C9F43285842C237286362535728FBBFF400
Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/2d321e5c-c24e-309b-8dbe-811f709bffec.roa
Signing time:             Thu 03 Aug 2023 05:03:13 +0000
ROA not before:           Thu 03 Aug 2023 05:03:13 +0000
ROA not after:            Wed 01 Nov 2023 05:03:13 +0000
asID:                     14618
IP address blocks:        208.99.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c2:37:28:63:62:53:57:28:fb:bf:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
        Validity
            Not Before: Aug  3 05:03:13 2023 GMT
            Not After : Nov  1 05:03:13 2023 GMT
        Subject: CN=beadd87c-bd43-4e67-9f28-c1b02f752c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:74:95:1d:b6:bc:b4:19:b9:02:ce:5f:19:
                    6c:8b:6e:1d:f4:62:91:86:a7:b5:cf:49:2f:c7:e2:
                    ae:82:41:91:b0:db:43:88:b5:34:74:96:2d:74:39:
                    32:a9:e5:ac:55:ff:03:30:36:75:3e:fe:c6:f4:2c:
                    d1:0b:84:fe:64:d5:0f:db:10:3d:a5:16:a8:84:43:
                    00:13:9f:88:67:71:82:33:b2:38:51:e6:bd:fa:12:
                    e3:cc:a2:f3:22:fc:db:d3:c6:ad:d1:ab:33:a6:d6:
                    a0:4e:eb:71:34:93:27:ee:19:40:65:5b:35:9d:ca:
                    18:5e:3c:b0:fe:3d:88:97:67:bb:eb:48:1a:95:d9:
                    bc:a7:c5:bf:fd:3a:7c:44:fb:7e:ff:f7:ed:32:c1:
                    56:8f:db:82:9a:62:fc:30:36:67:65:8a:90:d1:c8:
                    12:d3:d1:d3:2a:59:98:02:cb:b3:de:a0:09:c1:82:
                    39:93:7f:7a:6f:d8:f3:b8:5f:68:17:35:43:bd:e7:
                    b9:9e:41:a4:f0:97:49:fe:e2:0e:d8:9c:33:f7:60:
                    f9:89:61:70:f2:8e:e8:59:3e:1c:c1:ef:b8:58:1a:
                    b0:af:1e:d0:64:3f:d7:d0:96:5e:ca:07:f2:fc:d0:
                    2b:1f:8f:8c:d9:9d:46:4f:3e:bf:62:21:3c:92:c8:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4D:7A:93:27:FB:0B:E8:9F:1D:52:F7:02:93:C7:87:3F:75:38:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/2d321e5c-c24e-309b-8dbe-811f709bffec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl

            X509v3 Authority Key Identifier:
                keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4b:fc:d5:c5:6c:3e:84:01:db:b3:ae:46:42:dd:90:05:1a:
         22:aa:59:a5:64:2e:3a:a2:b7:46:76:fe:34:bc:71:a5:b7:4c:
         21:20:5f:11:90:52:3b:0b:cf:13:49:70:af:28:20:20:5a:63:
         d9:d6:96:89:f3:15:e3:cb:80:f9:ff:ac:fa:a5:7a:db:72:6b:
         e8:de:cb:6e:c4:26:51:0e:29:c4:0b:bb:ac:ba:0a:cc:cf:bf:
         54:27:a3:a1:31:44:9e:43:7c:12:1a:ab:3b:36:53:a8:41:41:
         29:ea:b9:ef:fd:25:58:6d:dc:fd:ea:db:09:20:b7:b1:4f:8f:
         15:9a:b6:d1:55:55:d7:f4:4d:df:ba:1e:14:37:d4:62:0d:89:
         09:20:13:df:b1:90:60:44:43:1c:0c:ff:57:b1:31:56:1d:4a:
         7f:ae:11:42:7c:59:9a:eb:5f:d4:b1:e7:a9:1d:82:ff:91:52:
         07:8a:a1:8d:8c:fd:6c:9a:25:58:b9:93:2d:9b:88:b1:87:e0:
         95:c2:9c:d9:94:63:39:21:57:72:45:de:87:b2:4d:93:22:23:
         09:cb:91:8d:46:8e:f6:68:ba:16:98:49:a6:ac:0b:b3:52:c2:
         a7:71:5d:a7:68:7e:cc:86:8e:14:97:68:89:ab:ed:49:28:eb:
         d4:6f:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----