Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/89acc6ae-4b67-3ae9-a485-765cb10f3d0e.roa
File:                     89acc6ae-4b67-3ae9-a485-765cb10f3d0e.roa (raw, json)
Hash identifier:          5BWkxHJeRfUMpwL3m4ixBtxDLlDCRuqlJkChr1XKPXc=
Subject key identifier:   3C:F0:E8:74:CC:60:13:7C:49:02:62:D3:60:B3:29:30:7F:42:35:65
Certificate issuer:       /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial:       010D0C9F43285842990BA4BF513E1461C4803B00
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/89acc6ae-4b67-3ae9-a485-765cb10f3d0e.roa
Signing time:             Wed 19 Jul 2023 11:07:24 +0000
ROA not before:           Wed 19 Jul 2023 11:07:24 +0000
ROA not after:            Tue 17 Oct 2023 11:07:24 +0000
asID:                     62802
IP address blocks:        170.4.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:99:0b:a4:bf:51:3e:14:61:c4:80:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Validity
            Not Before: Jul 19 11:07:24 2023 GMT
            Not After : Oct 17 11:07:24 2023 GMT
        Subject: CN=5f64812a-92e4-443a-b7b0-6b65e3fc4b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:cb:47:fb:a3:1f:41:c2:f3:cd:40:fd:7c:
                    67:c7:3f:4b:2a:fd:81:3f:bb:5c:ef:2f:40:f3:bb:
                    47:f9:dd:92:a5:85:84:94:88:1c:80:27:b0:d0:f3:
                    87:34:cd:61:a5:5d:70:fc:c6:ab:54:70:4c:8e:9d:
                    6f:4b:0f:a8:02:af:42:17:d4:1d:d5:6f:7e:19:52:
                    12:42:9b:0f:00:4a:4d:4a:86:28:2c:af:1f:ea:58:
                    85:df:92:d3:54:be:81:8c:1a:f3:ba:18:bc:03:89:
                    03:68:52:45:27:68:a1:00:d7:00:41:c8:43:ce:f4:
                    3b:45:09:d9:ad:29:67:d1:df:0f:c4:5e:71:ca:d3:
                    5f:44:23:ce:4c:d3:18:08:34:82:4f:40:04:30:a5:
                    f6:a5:14:31:f1:fc:79:89:bb:04:ee:bd:7f:be:74:
                    55:ec:2c:bb:c9:f4:94:0d:20:50:f4:06:cd:2e:05:
                    48:a4:f0:86:ff:69:a5:3f:66:d2:26:12:a2:b2:b8:
                    6d:dc:2c:3a:98:0e:cd:49:d7:ed:d3:6e:65:cf:f9:
                    c9:f1:33:c4:c1:6e:48:cf:72:2a:97:db:36:8d:d5:
                    fe:87:cc:9d:c5:3b:c8:ce:a3:6a:53:be:9e:d8:95:
                    73:03:0b:74:69:3f:de:df:c7:38:4d:c3:9e:ad:f0:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F0:E8:74:CC:60:13:7C:49:02:62:D3:60:B3:29:30:7F:42:35:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/89acc6ae-4b67-3ae9-a485-765cb10f3d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl

            X509v3 Authority Key Identifier:
                keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:70:ae:73:92:09:49:91:bc:54:a9:44:22:16:db:67:c6:4a:
         5b:84:1c:9d:b0:06:5e:1a:5a:55:56:09:b5:90:ae:76:11:e2:
         fa:5b:a2:fb:bf:86:f2:9f:ea:43:50:f9:ee:f9:71:1d:d4:e4:
         d2:b0:ee:83:d7:db:a4:51:29:d0:51:12:7d:52:68:73:f7:d8:
         5c:82:c8:59:b1:8e:34:9a:2f:7e:a0:c5:9f:7d:ec:05:b7:7c:
         4d:12:58:7b:88:b3:5a:8a:fe:aa:cd:99:74:4e:a0:3f:45:ee:
         21:10:40:ab:4e:3c:c4:dc:be:e9:a0:a7:9c:1f:c6:c4:38:43:
         c5:b9:45:c6:37:c2:80:2f:3d:d2:fa:83:6e:0a:fd:28:f1:07:
         96:91:ab:89:6a:35:a4:ec:7e:e9:a5:aa:c2:b5:d0:48:b1:4d:
         5d:36:35:20:71:03:55:ee:ff:f0:06:88:36:fa:58:48:a3:f7:
         ea:10:13:e5:8f:66:26:e1:83:d4:25:b6:25:4a:72:bb:53:f5:
         f0:67:b1:01:e7:7c:43:b8:8a:45:d4:a8:85:54:63:07:3e:6b:
         ab:ae:a5:b8:a7:81:ee:b4:49:68:fb:72:9e:6a:2a:b8:c0:52:
         29:a2:58:98:54:f0:b8:af:02:87:e6:27:66:75:f8:80:cf:64:
         18:d9:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----