Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/271a0545-cfbc-3238-a547-895378af310e.roa
File:                     271a0545-cfbc-3238-a547-895378af310e.roa (raw, json)
Hash identifier:          JO7eGHqV88m3uAePzrPfsMP2vR8L2wtp+nSr5/0U3rs=
Subject key identifier:   A3:89:6F:53:1C:6C:65:E1:C3:D5:B0:FB:88:A8:72:88:69:F6:A3:06
Certificate issuer:       /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Certificate serial:       010D0C9F432858429AA90AE35DC92F7A2B967280
Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/271a0545-cfbc-3238-a547-895378af310e.roa
Signing time:             Thu 20 Jul 2023 01:00:17 +0000
ROA not before:           Thu 20 Jul 2023 01:00:17 +0000
ROA not after:            Wed 18 Oct 2023 01:00:17 +0000
asID:                     60171
IP address blocks:        206.168.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9a:a9:0a:e3:5d:c9:2f:7a:2b:96:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
        Validity
            Not Before: Jul 20 01:00:17 2023 GMT
            Not After : Oct 18 01:00:17 2023 GMT
        Subject: CN=e71daaa4-8aec-4fbe-9f94-945062903ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:42:ec:59:fa:e7:a7:85:1b:38:5a:31:77:
                    e4:13:1c:ba:8a:21:ac:d5:4e:87:3d:9c:10:56:f2:
                    61:40:cd:b3:04:af:0a:68:96:28:5a:75:ad:70:12:
                    23:6b:53:82:d7:6b:be:06:f4:92:04:e4:01:8b:50:
                    44:66:3c:43:b0:40:83:c2:5f:e8:31:de:c7:a7:96:
                    5c:ba:71:1d:23:63:3d:1b:40:a4:65:ed:03:70:c5:
                    16:fc:11:0c:be:a8:58:26:98:01:69:fd:04:f8:5b:
                    a5:68:6b:1d:ed:b3:80:e4:eb:b5:82:6a:81:f8:cc:
                    da:4f:18:26:55:76:5d:26:3e:85:10:bc:3d:d5:e3:
                    2d:bb:a9:6f:bd:54:10:38:12:9f:00:30:59:0e:0f:
                    69:97:91:22:97:3e:d7:8f:01:22:aa:c4:5e:93:3c:
                    2a:1f:7f:22:44:cb:cd:91:ca:45:ff:b8:6f:fc:cb:
                    1b:48:f9:d1:6d:c8:e1:c3:7c:25:19:57:b6:ee:75:
                    97:78:96:0d:2f:22:b0:a7:2f:cf:8b:50:d8:c6:fc:
                    eb:fc:49:5f:24:20:0c:8d:29:da:47:55:ec:47:13:
                    a7:df:f9:85:26:b4:f1:aa:90:62:26:b0:ff:ed:6b:
                    e7:64:8d:e4:3f:e7:b2:18:65:79:76:fb:8b:2a:14:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:89:6F:53:1C:6C:65:E1:C3:D5:B0:FB:88:A8:72:88:69:F6:A3:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/271a0545-cfbc-3238-a547-895378af310e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl

            X509v3 Authority Key Identifier:
                keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:38:87:34:5a:6b:e1:75:e2:02:bd:c5:57:bb:0d:a4:be:
         c1:99:37:3a:24:3d:ff:59:4c:b8:d7:d5:df:07:61:7d:f5:47:
         6c:01:9f:4b:df:52:a9:dd:93:36:00:0e:92:65:11:e5:03:5f:
         bc:df:7c:b7:3f:63:d9:b6:db:4b:94:26:67:b2:89:81:e9:a1:
         06:7e:2d:eb:d2:ee:12:20:4e:17:b2:ba:82:8a:0b:b8:05:46:
         d6:d8:00:24:90:a7:db:b6:4a:e4:70:fa:b4:8b:db:0d:2a:c5:
         df:9c:01:5f:6a:36:aa:c9:25:1f:3d:c8:34:d7:47:1d:93:f3:
         7c:5c:ae:59:74:78:58:04:28:39:55:72:a0:af:7f:2b:bb:2a:
         36:ad:a0:a2:4d:d5:a6:df:b5:dd:ee:00:db:5f:cb:e4:39:d8:
         cd:47:09:60:48:a3:4a:a0:0f:8c:ed:74:84:d7:29:1e:de:2b:
         43:86:08:b6:43:6a:90:24:e2:7c:d0:32:47:f9:9c:75:ef:eb:
         59:c0:6d:fd:c1:5e:bd:85:04:68:bc:41:3a:04:01:15:2d:cb:
         fa:13:03:b7:16:93:1c:35:7a:4b:19:50:67:4e:eb:c3:c3:a3:
         8a:b2:fd:d0:5f:c8:c3:f1:18:69:45:20:c3:a0:d1:6d:f9:73:
         0d:ed:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----