Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/87d0dfba-cdac-3541-90d1-bea955290c9a.roa
File:                     87d0dfba-cdac-3541-90d1-bea955290c9a.roa (raw, json)
Hash identifier:          MztvhP8Tz4pob/h+vYhR/bT6whyrSdcw7ae2CZYmFt8=
Subject key identifier:   BD:32:18:C3:49:65:67:C1:FC:16:F9:08:BC:4F:A8:52:4D:CC:A6:F0
Certificate issuer:       /CN=35342562-4b31-4754-a32b-c5eec744d4a2
Certificate serial:       010D0C9F43285842DF168996C8890D3D2E4AB580
Authority key identifier: ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/87d0dfba-cdac-3541-90d1-bea955290c9a.roa
Signing time:             Sun 13 Aug 2023 13:15:56 +0000
ROA not before:           Sun 13 Aug 2023 13:15:56 +0000
ROA not after:            Sat 11 Nov 2023 14:15:56 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:df:16:89:96:c8:89:0d:3d:2e:4a:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35342562-4b31-4754-a32b-c5eec744d4a2
        Validity
            Not Before: Aug 13 13:15:56 2023 GMT
            Not After : Nov 11 14:15:56 2023 GMT
        Subject: CN=2583fbf7-82dd-4f0d-9a14-28e171361787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:43:d7:b3:fc:eb:77:8d:d6:e1:7a:83:c0:
                    4f:52:7c:40:3e:15:27:f0:7c:4c:fd:51:4a:92:4b:
                    af:5d:29:13:e4:eb:1d:4c:ae:b6:f0:2a:77:7f:d3:
                    97:74:00:48:eb:8e:43:5d:c2:47:b1:e5:50:88:c8:
                    ab:ef:46:8c:80:59:ca:16:aa:7a:eb:77:80:ec:6c:
                    94:90:51:c2:2f:9a:d9:f6:4f:a0:00:00:68:dd:61:
                    81:4d:36:a8:44:be:a7:bd:e9:20:94:81:0b:00:f5:
                    e6:a5:57:4c:44:73:59:cc:8c:46:83:53:aa:60:29:
                    63:8c:89:b5:b7:56:f5:9d:91:88:d8:77:45:44:4a:
                    10:d8:12:08:da:77:80:7c:5f:af:98:24:51:94:fd:
                    66:58:e1:c4:87:cf:85:cf:9f:45:7c:2e:74:d1:b2:
                    2c:3d:67:18:9e:80:1d:d4:fe:ff:70:0c:24:b1:81:
                    5c:6d:8c:60:8a:e3:b1:3a:71:75:fe:ed:6d:42:5d:
                    10:46:0b:5d:73:2d:1e:ce:9b:7c:e9:7f:a0:9b:bf:
                    f8:0d:03:a0:20:74:f2:7d:21:97:a5:89:e2:ed:f2:
                    1a:70:c4:c7:ea:3a:7d:ef:29:a7:3f:50:86:92:bf:
                    80:e6:6a:3b:57:3a:68:16:f1:71:97:a1:92:ee:a3:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:32:18:C3:49:65:67:C1:FC:16:F9:08:BC:4F:A8:52:4D:CC:A6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/87d0dfba-cdac-3541-90d1-bea955290c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/35342562-4b31-4754-a32b-c5eec744d4a2.crl

            X509v3 Authority Key Identifier:
                keyid:ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7b:77:b4:3e:8a:76:09:95:c0:35:40:1d:22:8a:23:fa:09:
         50:ad:2d:c2:95:32:dc:af:79:0f:46:d6:b2:bd:8a:b9:f7:39:
         55:9a:ac:cc:f0:d9:12:7f:51:e9:e9:b1:7a:aa:f8:17:67:20:
         b3:35:e3:21:01:43:29:93:17:a4:a0:c6:ca:37:a0:93:90:a3:
         19:04:17:34:c9:5b:05:b7:38:bb:90:f0:fc:f2:cf:37:eb:f9:
         86:fd:55:87:42:e0:31:eb:c1:8e:2f:f5:db:36:1b:f6:ba:f9:
         d6:48:fe:45:fb:23:d9:3a:9d:b9:8f:b2:7f:22:c4:1d:2f:8a:
         03:98:9d:bc:ca:33:a4:4e:e0:e2:01:d8:3f:df:4b:03:3a:f8:
         28:cd:b1:7f:94:c9:04:a8:f3:ce:0e:83:da:e2:e3:db:f6:8c:
         36:d0:c2:4b:36:93:a3:75:ef:2c:6c:e2:4c:45:b3:6f:fb:90:
         3e:00:25:e5:a9:1c:11:b0:ed:30:de:bd:7e:52:0a:61:c5:ef:
         cc:cd:28:0a:b9:6b:a5:e2:19:3e:34:cb:ae:68:1a:1f:aa:e0:
         e9:0d:5c:51:7d:f8:e9:0a:de:ea:80:07:c9:97:64:4e:b3:a7:
         18:db:84:14:a6:d9:c8:a7:da:1d:6a:d2:50:df:c6:8d:c8:d4:
         3c:60:1a:22
-----BEGIN CERTIFICATE-----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