Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/05c45f7b-7fab-3357-bdd9-ce9c33af5d04.roa
File:                     05c45f7b-7fab-3357-bdd9-ce9c33af5d04.roa (raw, json)
Hash identifier:          J+XMCd5AnTUsgvnvH+CIsvw8LtNuj1h/sLASgePo7/E=
Subject key identifier:   50:13:04:86:05:A4:A6:69:07:34:39:BA:05:31:BB:6B:87:1A:74:C0
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F432858441C09BB07DD6B81BCA91B37C0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/05c45f7b-7fab-3357-bdd9-ce9c33af5d04.roa
Signing time:             Tue 05 Dec 2023 02:01:23 +0000
ROA not before:           Tue 05 Dec 2023 02:01:23 +0000
ROA not after:            Mon 04 Mar 2024 02:01:23 +0000
asID:                     42689
IP address blocks:        208.52.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1c:09:bb:07:dd:6b:81:bc:a9:1b:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Dec  5 02:01:23 2023 GMT
            Not After : Mar  4 02:01:23 2024 GMT
        Subject: CN=1f44fc49-738b-48b9-ae31-be5a133a0506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:a2:54:23:df:93:f0:e6:f4:7d:a1:f3:d8:
                    89:3c:c8:cf:78:45:b3:3c:17:b4:b7:23:d6:6d:8c:
                    59:ec:05:7d:ce:09:b1:96:6a:dc:9e:ec:28:72:de:
                    c0:0e:b1:27:25:4a:3a:a6:b6:50:9d:5e:ec:cd:ae:
                    7b:97:60:ae:64:80:96:ff:44:59:c0:42:81:b7:44:
                    9d:8a:06:5e:52:99:79:b8:04:1b:ef:5c:ff:1a:c0:
                    f4:89:c7:b5:e8:cb:a1:63:7d:7e:54:f4:4b:0c:36:
                    34:5b:d0:f2:2d:d8:aa:11:9b:73:01:ba:43:5f:db:
                    f4:eb:52:80:25:e1:57:6d:5b:25:b1:e6:b3:32:22:
                    09:07:8d:8d:aa:5d:0b:b0:d8:55:70:c8:7d:81:a2:
                    36:5d:db:04:28:f6:c7:66:72:63:83:97:ab:e8:68:
                    05:29:e0:84:84:e3:51:97:04:40:69:92:f1:e5:8f:
                    0e:70:95:bb:93:7e:2b:45:bd:8e:75:f2:04:0b:af:
                    bd:ae:8b:3d:2f:fb:96:b2:04:25:63:04:32:aa:5f:
                    aa:c6:a6:27:4a:cb:11:bf:d6:f5:4c:fb:0f:13:f1:
                    6e:4e:a0:d5:1e:f4:ed:74:3a:09:88:ec:97:23:61:
                    01:49:8b:06:de:44:61:b9:7f:36:0e:eb:d8:8d:7b:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:04:86:05:A4:A6:69:07:34:39:BA:05:31:BB:6B:87:1A:74:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/05c45f7b-7fab-3357-bdd9-ce9c33af5d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:66:fc:5c:87:b0:90:4d:e9:2a:d8:a3:b3:b6:fe:bf:cd:
         e5:1f:3a:64:54:24:23:11:4f:8c:0e:14:25:83:8c:86:56:65:
         cb:98:ea:3f:d6:d1:d1:26:a9:68:46:72:c2:3f:75:c1:3e:35:
         fc:de:a8:19:1c:32:b2:f1:4c:76:83:f7:9f:27:bc:17:c1:20:
         0e:ee:4a:d3:63:0d:50:1b:4d:74:bb:0b:83:d0:78:9f:d6:7a:
         a6:fa:03:c1:70:33:8f:75:f8:19:bd:c2:00:eb:21:66:ef:cc:
         6f:06:dd:eb:ef:a0:cf:43:1d:3c:f0:06:14:9d:56:1e:bf:0f:
         e9:93:dc:a2:67:75:b6:9a:c7:b7:c9:28:fc:3c:ec:6c:c0:98:
         40:f4:82:51:6f:97:7a:e5:b0:ee:0e:58:b7:26:b2:09:8c:4f:
         7c:03:24:2e:eb:3e:b8:e9:5b:28:1a:fe:54:d9:d5:66:60:41:
         38:86:63:4b:65:e1:fc:bb:d7:16:d2:88:bd:9e:97:c4:6c:7e:
         59:6b:44:a4:9e:68:0d:22:bd:33:93:34:44:b7:04:33:54:ce:
         6d:d9:1c:e7:9b:5a:48:e4:eb:5d:ce:70:dc:72:c7:27:12:d9:
         18:6d:cd:e9:15:d3:ea:ca:6b:2a:2f:0a:d3:90:39:c4:69:64:
         f2:a1:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----