Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/849285d8-8ed5-3e71-9cf2-ebc46815877b.roa
File:                     849285d8-8ed5-3e71-9cf2-ebc46815877b.roa (raw, json)
Hash identifier:          lvssBo4rlmEMeqtgc5SXUJT95RKghE5/Dl2bYfHaOR8=
Subject key identifier:   CD:C2:55:05:46:27:13:63:E3:DA:14:A0:C4:81:3D:2E:2A:F1:EB:81
Certificate issuer:       /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
Certificate serial:       010D0C9F43285842F15BFB0E496C127BA56A1200
Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/849285d8-8ed5-3e71-9cf2-ebc46815877b.roa
Signing time:             Sun 20 Aug 2023 02:20:24 +0000
ROA not before:           Sun 20 Aug 2023 02:20:24 +0000
ROA not after:            Sat 18 Nov 2023 03:20:24 +0000
asID:                     397181
IP address blocks:        206.168.174.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f1:5b:fb:0e:49:6c:12:7b:a5:6a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
        Validity
            Not Before: Aug 20 02:20:24 2023 GMT
            Not After : Nov 18 03:20:24 2023 GMT
        Subject: CN=27ff16ba-9cad-46a5-8eca-dacc88742be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:a8:f0:6c:d1:b2:0c:6c:50:5e:90:c8:be:
                    9d:51:58:de:86:29:60:fb:13:5c:87:36:64:e0:a7:
                    98:7f:5d:f1:e6:e7:e7:bb:ea:fe:da:bb:25:5c:d5:
                    4e:40:8e:41:3c:4e:af:97:3f:7a:26:32:c8:04:48:
                    f0:cc:a6:6b:0d:da:74:ee:1e:e4:96:39:c1:5d:20:
                    22:a7:cb:4d:66:5a:67:ff:c6:aa:33:68:52:88:d0:
                    2d:df:7b:7d:ed:0b:25:7a:62:08:4f:28:f2:8c:f7:
                    42:0e:dd:9c:70:7e:16:bb:5b:d0:57:23:d7:02:a1:
                    aa:03:c8:f1:b5:57:ac:67:c2:75:96:1d:1e:c9:7c:
                    4d:2d:a1:c7:53:eb:6e:33:dd:11:52:eb:a5:2e:10:
                    a7:51:7f:76:b8:89:9d:11:8d:94:65:ee:80:3d:3c:
                    f3:47:bb:39:04:ef:36:e4:56:69:84:ac:25:ca:22:
                    87:54:6b:46:68:d9:20:d0:7f:2b:d5:62:31:21:27:
                    bb:b8:73:3c:e5:a4:cd:3f:b6:3b:0b:a2:2e:0f:c6:
                    64:d3:9a:9a:68:94:40:89:1e:f2:71:19:04:38:33:
                    74:2b:5f:28:fd:52:48:d6:80:60:85:eb:d3:c0:31:
                    3c:aa:72:2b:49:97:66:61:ca:db:e4:4a:d0:39:d3:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C2:55:05:46:27:13:63:E3:DA:14:A0:C4:81:3D:2E:2A:F1:EB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/849285d8-8ed5-3e71-9cf2-ebc46815877b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f2:dd:d3:fd:b5:dc:9a:01:f2:40:ae:a8:bc:4d:36:3f:06:
         16:e4:7f:99:a0:6e:1a:2a:78:32:6d:ec:e1:3d:1a:cc:91:80:
         d8:0b:f0:14:43:43:1b:fe:d7:ef:7e:dd:38:a9:ee:8e:f5:bc:
         c9:d6:ba:0d:c0:c1:c6:64:67:bf:9c:2e:0b:df:36:fc:ad:e8:
         bd:63:42:7b:dd:9e:93:2e:17:ff:ef:99:3f:e5:60:bd:5b:30:
         aa:bc:83:50:10:dd:c1:67:1f:1b:c4:40:ad:f5:e4:71:3e:88:
         e0:1e:e9:7f:4b:42:65:00:ce:0e:63:19:e6:f4:9f:11:10:75:
         09:f4:19:69:8d:a4:d6:e7:91:9b:85:79:e4:b0:30:45:f7:aa:
         1d:8e:a4:da:3d:a2:63:07:92:68:9f:fd:5e:5a:47:d2:2a:8f:
         65:fd:03:ef:75:eb:73:9a:c2:e2:a7:03:bc:9a:b2:1d:d6:55:
         87:c2:4f:fa:19:fd:70:e7:c3:f2:14:17:a4:b4:6a:5b:d5:42:
         8d:49:46:78:f0:8b:2d:04:43:96:6a:2a:57:b1:31:f3:66:f8:
         2c:04:2e:38:16:cc:e0:8a:4f:f5:7e:e1:d1:54:40:38:f5:97:
         78:fb:d4:db:d3:1d:61:3e:45:43:04:1d:3c:a3:d6:f3:55:7c:
         07:b3:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----