Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3333b7f1-6ad7-3936-8ace-e8324c3e00dd.roa
File:                     3333b7f1-6ad7-3936-8ace-e8324c3e00dd.roa (raw, json)
Hash identifier:          ulcqxb5f8+mwLE58EJbgAX/A6Jf3biLx1sYj1tGvh0o=
Subject key identifier:   36:5A:77:FF:86:C4:6C:3B:9F:C7:7A:A4:08:A1:D9:93:CF:AC:3E:6A
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F432858430A69EEE97C6187BE39FDF980
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3333b7f1-6ad7-3936-8ace-e8324c3e00dd.roa
Signing time:             Tue 29 Aug 2023 01:43:44 +0000
ROA not before:           Tue 29 Aug 2023 01:43:44 +0000
ROA not after:            Mon 27 Nov 2023 02:43:44 +0000
asID:                     14103
IP address blocks:        199.21.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:69:ee:e9:7c:61:87:be:39:fd:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Aug 29 01:43:44 2023 GMT
            Not After : Nov 27 02:43:44 2023 GMT
        Subject: CN=5cd0cbda-2d7d-4b4c-83f2-5604bbc75770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:61:52:62:1f:ac:93:85:6a:9f:b4:a3:8f:
                    f6:b7:c8:2f:b3:ac:49:fe:8b:dd:8f:b8:05:70:71:
                    9e:b6:6c:2b:3c:57:0f:01:37:5d:7a:fa:1a:b5:3e:
                    87:a2:ca:8f:8f:a2:f2:d5:dd:db:76:67:87:a1:6d:
                    3a:1a:cd:7e:ae:8b:3d:ed:68:0c:5b:d9:23:17:f4:
                    f7:09:98:39:be:11:81:a8:92:8b:82:68:11:9c:49:
                    33:09:9d:3b:e9:66:be:71:45:95:01:97:6b:f5:b0:
                    d2:c5:8e:af:9d:77:f8:29:9e:d7:78:cb:4d:f9:6e:
                    e2:69:25:e6:d4:58:61:d9:73:3b:a8:73:27:53:95:
                    14:a8:6a:c9:2f:7c:4f:bf:60:a6:34:1a:8f:02:05:
                    64:48:67:85:a4:c8:c8:62:44:38:62:fc:f3:4f:86:
                    96:99:b6:f5:82:c2:7d:97:ba:fe:aa:83:48:6f:37:
                    fd:7d:55:0a:cf:e9:af:0e:5b:1d:a3:9b:60:f5:55:
                    55:6c:89:1d:fe:fd:3a:aa:d4:f2:66:a1:ad:f7:5b:
                    c2:cb:90:58:d4:1c:18:55:3c:15:66:de:36:78:82:
                    d0:af:9b:b6:e2:ad:ed:92:10:34:61:91:6b:6e:4b:
                    c7:df:f2:e3:5d:13:6f:e9:83:63:30:10:bc:de:8a:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5A:77:FF:86:C4:6C:3B:9F:C7:7A:A4:08:A1:D9:93:CF:AC:3E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3333b7f1-6ad7-3936-8ace-e8324c3e00dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d6:4f:13:b1:9d:d5:b4:5c:93:4f:43:5a:6f:4d:02:44:ee:
         bc:49:d8:df:8e:7c:9c:6a:7d:9a:a0:ee:a7:83:98:78:98:ac:
         fd:1a:8b:41:11:4f:d8:30:8e:59:e3:c9:18:ee:d7:eb:9d:96:
         97:ca:cd:3b:15:4b:2c:f7:b4:cb:71:07:b3:cd:fe:cd:88:c4:
         6c:a5:4c:22:b8:c3:13:2d:ea:ad:e2:05:ec:31:ca:bb:22:a1:
         c1:54:53:87:82:ee:30:53:e4:d4:53:67:22:6f:5a:72:4c:9c:
         07:95:fb:19:2d:a9:f1:99:91:da:23:ad:ee:a0:e3:29:0c:a6:
         6e:91:29:25:ca:b9:af:2e:22:af:78:fc:fd:e2:34:b1:30:34:
         e3:5d:17:aa:df:7d:56:32:f0:8e:4b:0c:d6:e8:72:85:82:a6:
         57:b2:2b:ff:2f:b9:7a:1a:fc:89:54:74:3f:b1:19:34:49:62:
         0e:cd:1f:37:59:30:24:40:66:27:2d:74:79:a6:8d:c9:c4:e0:
         c3:cb:be:b7:9b:cf:19:4d:e6:7f:bd:7a:a9:c0:21:5c:56:89:
         65:12:c1:17:b2:b0:5d:07:bd:63:40:a9:ec:2f:23:b5:cd:5e:
         f4:9b:7c:4b:b6:25:3e:76:72:a2:eb:1d:61:f2:2e:78:a2:cd:
         ff:84:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----