Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bcf77ed3-0956-3c76-aaf8-13a31589c748.roa
File:                     bcf77ed3-0956-3c76-aaf8-13a31589c748.roa (raw, json)
Hash identifier:          EzZkVEz/B9Cc5XEZcNUtbYaCMyHG/7KhBcjSf6u83Co=
Subject key identifier:   1A:F8:6C:24:2F:38:DE:AD:44:6C:78:28:FF:96:94:59:07:51:CA:6C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285843302E5600E24F611F6FFDDA68
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bcf77ed3-0956-3c76-aaf8-13a31589c748.roa
Signing time:             Mon 11 Sep 2023 14:24:22 +0000
ROA not before:           Mon 11 Sep 2023 14:24:22 +0000
ROA not after:            Sun 10 Dec 2023 15:24:22 +0000
asID:                     398371
IP address blocks:        198.160.26.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:2e:56:00:e2:4f:61:1f:6f:fd:da:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 11 14:24:22 2023 GMT
            Not After : Dec 10 15:24:22 2023 GMT
        Subject: CN=f8f76992-4a5d-42ca-9cb7-197578c74e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:dc:e1:3d:88:7b:8d:e6:a8:d0:e2:05:30:
                    8d:41:fc:aa:4e:91:bf:64:17:ed:06:db:23:5d:e0:
                    de:b8:df:66:29:f8:11:02:f8:a3:61:f8:c2:c7:38:
                    d8:3e:d8:d4:7f:ce:68:1d:a1:79:1f:57:48:bd:6d:
                    2c:a2:f1:93:ab:08:78:d6:df:a1:7d:11:48:19:71:
                    3b:e6:59:e8:01:d1:b0:37:d3:b7:df:b1:05:4c:e3:
                    63:63:7c:27:32:c9:b6:bf:3c:23:b7:4f:aa:17:d1:
                    03:56:3e:ae:94:0e:c2:d2:0e:83:88:7c:c1:45:1c:
                    48:fc:09:4d:f4:ca:a6:5f:5a:45:07:6f:ab:ec:ce:
                    c7:e7:81:c6:79:1d:5b:7f:65:f8:a2:ed:e2:ab:c8:
                    ba:40:f6:65:33:6a:c6:bc:fb:fc:d0:c2:29:38:dc:
                    85:2b:8f:3d:39:ae:46:26:d9:cf:9b:f1:ed:ed:04:
                    b5:23:92:ff:05:8b:2a:6e:d2:dd:3a:0d:8a:e4:5c:
                    af:29:1c:e5:80:5d:cd:27:84:55:e5:21:9a:48:13:
                    27:18:c4:94:cc:11:af:ec:a6:40:21:d1:90:36:df:
                    52:14:1e:ec:cb:b9:81:24:81:06:a0:03:a8:7c:27:
                    57:76:10:11:f1:46:30:2f:5e:81:91:77:65:9a:9b:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F8:6C:24:2F:38:DE:AD:44:6C:78:28:FF:96:94:59:07:51:CA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bcf77ed3-0956-3c76-aaf8-13a31589c748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:30:fb:da:e1:fb:fb:83:de:5e:0c:80:55:a0:84:5c:05:90:
         eb:60:5d:8a:6e:23:80:bb:1a:6f:47:4a:5d:e3:75:01:01:9e:
         03:79:e7:ac:76:84:3c:71:22:22:d9:74:35:ed:f8:92:c2:f0:
         42:2c:63:98:64:78:6e:02:52:18:ae:79:1e:0e:98:ea:46:01:
         a3:12:6a:d0:07:09:6a:37:22:89:83:49:2b:24:30:81:21:96:
         b5:b3:b5:8b:bd:72:ef:cb:50:26:67:fd:d7:a7:33:9c:6c:d7:
         69:0a:53:41:d7:db:47:b4:26:c2:df:1a:0c:98:cc:c1:55:12:
         40:74:a8:fa:85:e6:f1:73:75:41:7a:37:3b:63:1e:fd:52:ce:
         6d:b5:4b:1b:2f:73:7e:2d:21:71:94:a3:d2:26:13:43:eb:20:
         fd:c8:a9:ea:f9:e7:4d:39:e4:05:f0:68:3d:16:c9:43:e0:19:
         2a:de:7e:e3:56:6b:cd:46:dc:b6:97:b7:bd:24:a6:30:d6:ab:
         3f:3b:1a:dc:d0:2d:9b:e3:6b:90:42:f4:7e:93:6c:24:21:ed:
         77:02:75:55:ae:0f:9a:32:34:cf:86:35:70:45:9e:c2:ae:5d:
         da:20:0f:b0:b9:94:43:db:fe:07:24:4f:7e:cc:24:e7:03:88:
         c0:cb:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----