Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3bd9897-ec17-31b9-94e2-5cedff131713.roa
File:                     a3bd9897-ec17-31b9-94e2-5cedff131713.roa (raw, json)
Hash identifier:          WBvgf2Yw/hTVy6FNDnphONKs+kA4TV3cdG4RkxlG8G4=
Subject key identifier:   9B:A3:42:93:49:5F:EA:65:55:8A:61:83:FD:86:FE:51:F2:8D:71:A1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843EA3524360DD59E18EDD8D308
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3bd9897-ec17-31b9-94e2-5cedff131713.roa
Signing time:             Fri 17 Nov 2023 05:38:26 +0000
ROA not before:           Fri 17 Nov 2023 05:38:26 +0000
ROA not after:            Thu 15 Feb 2024 05:38:26 +0000
asID:                     64267
IP address blocks:        45.38.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ea:35:24:36:0d:d5:9e:18:ed:d8:d3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 17 05:38:26 2023 GMT
            Not After : Feb 15 05:38:26 2024 GMT
        Subject: CN=497d66d3-f223-45bd-918a-0081e9aa5ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:3a:e2:1a:dc:f4:c2:5b:84:55:c9:c4:b8:
                    46:22:39:40:68:44:cf:18:bf:05:ca:a0:7e:29:17:
                    b8:6c:33:69:fc:1c:f8:82:5e:0e:9a:57:00:1c:d5:
                    6b:95:b5:bc:cd:02:b4:12:e2:48:10:14:39:0b:c8:
                    e3:90:e2:f4:d5:fd:94:45:5c:85:34:b1:2a:9b:99:
                    0d:90:92:00:05:65:67:b6:c5:4b:1e:5f:be:52:19:
                    91:00:ba:14:31:ec:c9:4b:52:f1:d1:74:6c:4c:51:
                    1b:6a:d5:4b:61:30:5e:d6:4c:50:80:c1:82:f5:76:
                    16:2a:7e:3a:90:3c:b5:d0:72:43:fe:9d:ff:03:a8:
                    8b:36:b1:0e:b7:35:0f:6c:54:50:2d:54:da:dd:6f:
                    2c:e9:e7:54:ee:75:9e:2f:b1:89:3b:2b:d0:a4:61:
                    6d:d7:c0:9c:28:1b:59:68:0c:b2:94:74:7a:62:cc:
                    7b:2d:a8:01:01:ed:9e:cf:58:19:3d:2a:f6:74:31:
                    40:7e:75:6e:34:76:46:2a:d6:7f:7e:c0:92:b3:f5:
                    33:8c:cb:da:67:9a:ea:33:c1:c4:db:7f:db:2e:d0:
                    a1:bf:94:d8:96:80:43:79:8d:f6:c9:09:d9:ed:7e:
                    d1:8f:05:78:c1:8b:49:45:e2:2c:35:c7:4f:fb:83:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A3:42:93:49:5F:EA:65:55:8A:61:83:FD:86:FE:51:F2:8D:71:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3bd9897-ec17-31b9-94e2-5cedff131713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:60:75:b0:3a:b1:b3:4c:c1:40:bf:68:4d:b3:49:db:7e:
         87:29:8a:d6:7e:05:8b:cc:81:f0:4f:2a:3f:b3:b3:95:72:43:
         14:4c:c2:5a:a1:b6:a9:32:d4:76:4b:5b:18:ce:98:3c:c8:42:
         3a:97:91:4a:01:91:a1:4f:aa:35:65:00:35:c5:2a:fc:d1:47:
         d6:f4:8c:37:09:9a:a6:4e:31:85:8e:7b:02:42:bf:27:f0:e3:
         66:94:25:1e:59:d6:4b:14:9b:da:93:ce:20:23:1a:50:54:83:
         80:70:43:38:04:43:4f:07:47:c9:43:48:77:a4:d6:49:73:79:
         f3:0a:39:94:e1:aa:97:6f:7e:c5:4c:d4:d9:19:9c:ea:f5:73:
         e9:15:a7:99:16:4c:7a:92:b5:4a:1e:be:34:96:3c:e0:50:0a:
         2b:e7:2a:b4:18:76:4a:0a:92:98:82:cc:b0:72:fd:e2:59:9e:
         c0:65:69:02:56:64:b0:56:b4:d6:ad:e5:ce:49:34:b9:b0:7f:
         41:3f:5b:59:b3:5d:23:78:aa:9a:84:6c:a8:66:b0:53:3b:71:
         69:ce:d9:6b:7b:7c:8e:9c:74:1e:4c:26:00:f6:65:d2:ec:a6:
         b5:eb:b8:6a:fd:54:f7:82:c5:c6:f4:89:0c:0c:9c:85:23:24:
         7e:48:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----