Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/8c39d613-4e57-3e56-9522-b44ab5fce7f4.roa
File:                     8c39d613-4e57-3e56-9522-b44ab5fce7f4.roa (raw, json)
Hash identifier:          Ql1bH7a3oL5gQ1CftkUcdrhW4+LbNf91t540+SOwbG0=
Subject key identifier:   F1:10:5F:A0:9B:87:35:C7:16:3F:B8:C3:A5:10:79:CD:9E:05:63:98
Certificate issuer:       /CN=b764fe0e-08f6-4216-a719-1ca6386e5571
Certificate serial:       010D0C9F432858428D3887E8BE6B3334FED55940
Authority key identifier: 71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/8c39d613-4e57-3e56-9522-b44ab5fce7f4.roa
Signing time:             Sat 15 Jul 2023 05:28:09 +0000
ROA not before:           Sat 15 Jul 2023 05:28:09 +0000
ROA not after:            Fri 13 Oct 2023 05:28:09 +0000
asID:                     400862
IP address blocks:        209.188.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8d:38:87:e8:be:6b:33:34:fe:d5:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b764fe0e-08f6-4216-a719-1ca6386e5571
        Validity
            Not Before: Jul 15 05:28:09 2023 GMT
            Not After : Oct 13 05:28:09 2023 GMT
        Subject: CN=7277253e-2321-4d62-b215-8a88fb137711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:96:7c:b4:0b:5b:7e:9a:e1:44:90:d3:be:
                    1c:6f:aa:e6:2d:53:79:75:38:6f:92:99:a0:78:7a:
                    c8:e6:51:13:76:cc:81:c7:1e:4d:28:0b:94:08:f6:
                    89:21:b7:bf:a4:42:4b:9d:cc:79:91:14:ae:50:a1:
                    f7:35:ba:ac:2c:cc:47:4b:20:c3:38:7a:ef:88:cb:
                    16:de:1e:20:de:6f:d1:18:d7:2a:21:16:5e:c4:42:
                    22:45:cf:aa:75:eb:e2:fe:a4:55:0e:71:3a:08:b9:
                    17:db:7e:09:21:7e:0d:8c:9d:36:03:9b:52:cd:52:
                    e0:30:6d:c5:26:10:88:01:0b:67:b7:fb:5f:fa:be:
                    d3:67:96:3c:8e:2a:99:bc:13:7c:91:17:30:89:50:
                    9b:06:3e:89:92:2b:42:e6:36:ce:b8:e5:91:eb:99:
                    db:e7:18:d1:be:6d:1b:44:3b:af:f7:1e:82:30:6a:
                    4a:05:a2:09:79:14:6f:8e:96:2c:b1:61:a7:6d:c0:
                    58:15:14:4b:4e:68:8c:7e:3d:ee:7a:a8:34:90:d4:
                    2b:1d:f3:b0:d9:82:70:88:4d:9d:e2:1e:a7:4e:4d:
                    50:33:92:3a:57:86:ca:91:53:d7:35:77:03:c7:40:
                    13:4b:ba:f3:65:98:e4:d4:34:c0:9d:51:c9:c1:5b:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:10:5F:A0:9B:87:35:C7:16:3F:B8:C3:A5:10:79:CD:9E:05:63:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/8c39d613-4e57-3e56-9522-b44ab5fce7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.crl

            X509v3 Authority Key Identifier:
                keyid:71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:24:9d:1e:20:c8:18:fd:95:1a:0e:19:3a:53:c7:48:e9:85:
         41:19:7c:ab:72:7e:ab:81:63:f3:60:7e:84:4e:bb:21:a1:9b:
         72:fc:03:b7:14:f7:16:ea:78:17:c2:a2:e1:87:be:5d:fe:f8:
         8d:e9:0a:73:45:65:84:7d:6f:7a:0a:fe:82:f5:e0:a1:20:3c:
         a7:67:88:49:b0:8e:9e:74:3b:4b:f2:ac:b5:d4:3a:74:4b:d8:
         81:ea:f7:37:2c:f9:23:4a:49:1a:e1:c8:b3:37:a1:3f:25:20:
         37:e3:aa:0e:5f:7d:eb:42:0a:ff:74:2b:b5:a7:4a:fa:66:17:
         95:82:1c:86:0c:6a:a1:31:16:7f:9d:da:cd:17:70:4e:2d:71:
         ec:62:91:c6:f6:7e:b2:04:df:68:d3:a7:02:70:3e:96:48:3a:
         1c:16:70:c6:2d:b2:5b:6b:5e:9c:b6:5a:24:7b:bc:69:30:bf:
         f8:4b:7b:e6:a4:fb:62:54:50:db:42:2f:f1:04:eb:c1:89:a7:
         43:bc:b6:09:81:61:d9:06:e8:e7:45:7b:04:b6:b9:b6:41:27:
         93:e5:88:34:f3:77:1c:28:20:2b:f2:68:c5:4e:24:bf:6b:b3:
         e9:8f:a4:98:c2:81:35:60:a1:48:10:79:ac:a2:27:b0:64:0e:
         82:de:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----