Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c43a85ee-e1d5-316a-bc39-69fef91be823.roa
File:                     c43a85ee-e1d5-316a-bc39-69fef91be823.roa (raw, json)
Hash identifier:          e34oZdmF8wdT0xJLb6FZ8eHe25sfYHi+mKb49N+VGCU=
Subject key identifier:   B1:94:D4:52:EE:E0:04:65:51:B4:93:12:5D:6D:9A:FC:7E:B4:4A:E6
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584330244CA90C47F89A5E6F9600
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c43a85ee-e1d5-316a-bc39-69fef91be823.roa
Signing time:             Mon 11 Sep 2023 14:04:08 +0000
ROA not before:           Mon 11 Sep 2023 14:04:08 +0000
ROA not after:            Sun 10 Dec 2023 15:04:08 +0000
asID:                     26744
IP address blocks:        68.170.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:24:4c:a9:0c:47:f8:9a:5e:6f:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 11 14:04:08 2023 GMT
            Not After : Dec 10 15:04:08 2023 GMT
        Subject: CN=216b9473-d863-4254-b6a5-0294ddaf6a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:6f:20:22:21:be:f1:d1:4a:7d:db:e7:ef:
                    4c:b8:e0:95:94:bc:66:91:1e:7c:44:71:d0:bd:e2:
                    f7:1a:2a:de:7a:a7:30:ee:a9:62:08:fa:fe:ca:71:
                    aa:59:b7:74:22:ac:1a:3a:3a:3a:22:f7:02:90:38:
                    b3:8f:da:f1:d1:41:6c:d0:8c:a4:d4:ba:65:8c:e2:
                    1d:d2:91:a4:44:2b:cb:4a:44:6f:5f:56:c4:95:cc:
                    61:05:14:f8:30:70:02:a5:25:ea:6b:12:f8:72:c3:
                    84:35:65:72:a9:ee:cf:b6:07:c3:f5:cf:fa:6c:60:
                    78:0d:6a:f2:b2:ba:b7:9b:9d:2e:f3:fe:00:04:49:
                    f4:0e:5f:88:3d:02:44:62:37:33:8f:cd:61:ca:3f:
                    ba:b6:ff:d4:fb:72:8d:ee:78:3c:a9:6e:62:36:8a:
                    b7:d4:48:b0:59:cf:21:65:d1:25:62:9b:da:04:31:
                    89:74:9b:23:3c:12:c2:0e:c8:80:5f:ee:41:49:8f:
                    48:57:e1:f9:5c:a4:cd:3b:18:a4:ad:bb:74:ca:d8:
                    47:b7:56:37:56:db:73:66:67:ae:b2:8c:3f:2c:7d:
                    1a:e4:97:a8:d6:ac:a5:b2:13:8b:3b:21:5d:5d:24:
                    d2:bf:93:a2:c9:b9:71:ce:8c:2e:1f:ac:89:08:1c:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:94:D4:52:EE:E0:04:65:51:B4:93:12:5D:6D:9A:FC:7E:B4:4A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c43a85ee-e1d5-316a-bc39-69fef91be823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c9:a4:9d:96:97:56:b4:e3:ef:f7:78:8d:62:7b:fc:7e:34:
         d9:23:0f:74:2b:da:09:c3:50:4f:ca:5e:be:a0:f0:75:ed:f5:
         b4:51:d8:1f:3a:33:84:22:3a:06:7c:3e:63:58:8c:68:b2:ad:
         a1:55:39:be:5d:cf:d3:fd:f0:9f:bd:34:34:ad:1e:64:ed:9c:
         23:57:a8:3d:19:70:be:9f:dc:9d:d6:61:80:8b:6b:71:dc:72:
         06:53:b1:a9:7a:bc:f0:89:18:d2:fc:a3:9e:f1:83:27:06:c2:
         62:50:3a:8f:84:a8:4f:c8:1c:1c:69:1d:c9:06:98:e8:37:60:
         d6:ad:61:9d:52:c2:64:b7:69:41:7f:57:c3:5a:64:9b:57:98:
         a1:b8:cb:cd:e6:82:aa:50:f3:f1:7a:57:1d:b6:41:34:bd:04:
         6a:23:c3:18:d3:aa:c0:35:b2:41:0c:78:bd:db:8b:97:57:be:
         37:39:b9:a5:00:2b:78:9a:6f:93:04:f1:2b:f0:89:4c:8e:33:
         46:43:23:e5:e6:22:5a:4d:48:3f:be:26:2c:fe:9f:d8:45:83:
         b1:0c:65:0f:49:e1:ba:12:59:63:7e:f6:8f:08:c1:1c:65:74:
         db:84:e0:71:1c:f3:f2:90:d5:98:50:64:d2:37:62:61:87:a9:
         2f:54:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----