Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/47cbb7bc-e255-35f8-b7f2-81532cb5b8df.roa
File:                     47cbb7bc-e255-35f8-b7f2-81532cb5b8df.roa (raw, json)
Hash identifier:          ZjduMJwXL6LKBqTEMN+c7kiAQ12POhMIZt6ZYGrS8Wg=
Subject key identifier:   5F:BB:9A:DF:FA:C7:E1:C3:26:29:E7:BD:EC:70:34:B7:7B:E2:13:AB
Certificate issuer:       /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial:       010D0C9F43285842ADA1305CEF58C49A9451C400
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/47cbb7bc-e255-35f8-b7f2-81532cb5b8df.roa
Signing time:             Wed 26 Jul 2023 20:04:53 +0000
ROA not before:           Wed 26 Jul 2023 20:04:53 +0000
ROA not after:            Tue 24 Oct 2023 20:04:53 +0000
asID:                     20101
IP address blocks:        216.18.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ad:a1:30:5c:ef:58:c4:9a:94:51:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
        Validity
            Not Before: Jul 26 20:04:53 2023 GMT
            Not After : Oct 24 20:04:53 2023 GMT
        Subject: CN=03967a47-f180-411f-8724-c4a958a9314d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:e7:44:7a:9a:f8:46:9b:65:63:16:97:b9:
                    4b:de:aa:e8:45:eb:7f:01:cb:23:48:e9:8c:7d:20:
                    60:f2:ab:aa:95:21:03:79:a0:db:ad:bd:07:60:1c:
                    ae:e6:b9:63:b3:c9:50:75:3c:88:4d:71:f6:9a:bd:
                    bd:39:3f:a6:fc:f7:95:3e:03:20:c5:1c:8a:f2:8f:
                    59:45:44:05:51:c8:a0:ae:31:f9:e5:58:b3:e3:97:
                    f9:7f:ea:94:c6:b3:98:0b:72:ae:e9:83:5c:08:3b:
                    80:e5:54:96:7f:a2:a9:f6:3b:1c:26:7d:ae:44:35:
                    67:ef:93:1f:80:0d:46:e5:29:d7:e9:fe:aa:7a:75:
                    f7:a2:52:30:2f:63:1e:1a:42:56:d1:da:5c:8b:3d:
                    67:6c:ee:97:d1:67:94:51:44:2c:3e:27:f1:b6:69:
                    a6:17:37:48:bf:90:8b:fc:55:cd:31:f1:1c:51:dc:
                    5a:c2:cc:85:ae:b9:98:4a:cf:b2:6a:2c:01:92:2d:
                    c6:d5:67:f1:4a:22:27:38:37:a5:55:2c:f9:d4:93:
                    d1:08:a1:eb:e8:9c:f2:da:fd:8d:c8:18:47:fa:1d:
                    1e:ca:46:81:72:24:75:52:0f:72:f6:3f:3f:60:b9:
                    fa:36:cf:7c:30:1d:7e:d3:76:c3:d4:1e:35:8e:f9:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:9A:DF:FA:C7:E1:C3:26:29:E7:BD:EC:70:34:B7:7B:E2:13:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/47cbb7bc-e255-35f8-b7f2-81532cb5b8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl

            X509v3 Authority Key Identifier:
                keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:41:53:d9:bf:be:b8:eb:0b:ad:2b:1f:6b:d6:ae:da:47:90:
         c8:e9:c7:30:a8:d2:8c:db:08:2c:e0:58:1a:0e:0b:19:cd:9e:
         0b:00:eb:6d:04:4a:fd:d1:f0:34:ff:58:10:9b:21:49:2f:55:
         2f:d4:6c:5f:d3:41:cb:c4:11:33:74:08:59:82:37:c2:40:f1:
         32:69:ba:56:17:20:44:a6:a5:6f:3b:75:1f:49:99:ae:8d:ee:
         3c:a2:bf:72:64:09:41:c5:66:ea:45:42:cc:21:85:55:ed:a2:
         91:12:ac:79:d6:34:0a:ba:19:43:a3:ad:25:a0:ad:ec:14:d8:
         41:a3:ab:95:47:b4:ee:73:ce:93:58:0b:cc:3a:32:bc:ed:57:
         f7:8b:3c:58:ab:97:28:82:4f:5d:0d:d6:45:72:12:38:30:27:
         a0:78:41:9c:64:e3:0c:49:5b:de:84:0d:d6:dc:1e:17:15:43:
         3c:98:48:51:00:8c:1a:16:96:39:5e:34:1c:bb:3d:00:c4:5f:
         9e:1e:3e:01:33:11:84:e9:97:51:cf:24:f8:c1:e7:04:01:95:
         d3:aa:f9:80:64:7c:b2:a8:2c:0e:1a:9b:7e:01:45:d4:e7:28:
         2a:3e:83:41:c0:13:37:38:69:57:17:fa:56:cc:6c:f9:f8:ae:
         b2:8c:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----