Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3d173399-3a94-359b-85fa-678a079e42af.roa
File:                     3d173399-3a94-359b-85fa-678a079e42af.roa (raw, json)
Hash identifier:          kVlHQjx+95ctoATCY6zLs897qGik30nHjm31xn7xpKE=
Subject key identifier:   80:EB:5C:9D:DE:8B:67:BD:CE:0F:44:43:A5:5D:C9:0C:10:56:0E:D5
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285842C753FD065C66F369326E6980
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3d173399-3a94-359b-85fa-678a079e42af.roa
Signing time:             Sat 05 Aug 2023 01:00:17 +0000
ROA not before:           Sat 05 Aug 2023 01:00:17 +0000
ROA not after:            Fri 03 Nov 2023 01:00:17 +0000
asID:                     834
IP address blocks:        173.249.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c7:53:fd:06:5c:66:f3:69:32:6e:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Aug  5 01:00:17 2023 GMT
            Not After : Nov  3 01:00:17 2023 GMT
        Subject: CN=013cc622-13da-4cc6-8670-0c63fa0c29cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:38:52:ec:03:bb:d1:c3:77:5d:8b:f5:74:
                    bb:96:e3:b7:aa:51:6a:cc:4e:02:47:0b:12:cf:d8:
                    7a:87:f5:25:bc:22:16:45:d7:01:f9:25:65:bb:ec:
                    c5:16:30:0d:ff:4c:85:f5:00:ca:88:20:73:d8:71:
                    82:e0:bc:08:9d:69:7c:54:94:b1:e6:f8:fb:ef:23:
                    4b:6b:1b:e5:3c:55:21:e6:a0:1e:65:7f:76:16:25:
                    39:26:43:b7:8e:be:39:97:72:29:75:97:13:6b:f1:
                    0d:40:e1:fb:03:2f:22:b1:8c:ea:9b:78:a9:e8:13:
                    3a:0b:fc:12:b7:f1:ba:a1:22:85:77:89:64:2d:7d:
                    ab:33:a9:72:f1:d0:71:dd:a5:48:21:87:c5:f9:b3:
                    0f:5a:22:8b:98:93:c7:0e:13:e0:86:e1:ee:23:bf:
                    ee:7a:bd:ec:c0:c9:3b:fa:f9:d0:73:7c:c4:59:28:
                    8d:a3:a2:ef:4e:9b:87:d7:ce:4b:2a:5c:66:c5:7f:
                    38:99:c6:c3:e1:63:f8:9a:ce:9c:33:ca:bd:6b:58:
                    4d:86:f7:15:a8:87:c8:ac:e9:12:24:e8:5f:ec:38:
                    e1:5c:6f:af:6d:45:c8:ee:cc:4b:ff:51:16:88:fa:
                    eb:44:3d:cf:e4:99:f8:2e:f7:e3:4d:9a:a1:d3:2a:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EB:5C:9D:DE:8B:67:BD:CE:0F:44:43:A5:5D:C9:0C:10:56:0E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3d173399-3a94-359b-85fa-678a079e42af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:5f:44:97:51:55:2d:12:9e:3c:9d:7b:78:72:10:94:54:
         75:c8:a9:61:3d:46:4c:c2:7c:8b:75:e9:5a:fc:5e:04:ca:0a:
         02:b3:be:30:48:a3:21:01:62:dd:9a:fb:1e:8a:df:5b:7d:1b:
         35:5c:09:6a:a1:c0:df:be:64:5b:64:b9:c4:81:85:84:37:bf:
         f4:7b:89:fa:80:c8:36:b1:7d:74:e9:f5:db:3f:dc:18:7c:7d:
         ac:1c:2f:67:8a:22:eb:45:ba:c9:29:8a:42:ee:f5:5c:fd:f0:
         b2:22:62:49:30:96:e1:05:43:48:72:82:3d:0a:fe:df:27:88:
         34:de:11:97:98:20:f4:d8:c9:19:7f:f0:84:6c:0a:b8:62:fa:
         ba:96:2d:f0:e7:60:6a:e2:c8:07:13:5f:18:49:42:4c:c5:c8:
         fd:29:2b:a9:93:a6:f5:00:33:9e:43:7c:3e:94:da:39:52:ad:
         c4:1e:15:60:98:ee:9a:26:e8:e0:45:a7:b5:3e:a5:da:28:53:
         6c:22:4c:d6:bb:61:4b:95:f4:c1:23:78:b4:7f:46:7d:2a:77:
         80:7e:13:d4:c4:a0:32:d8:34:fe:f4:c4:30:d2:31:3a:85:b6:
         cf:ff:09:33:4a:b8:bd:4b:4a:db:48:7a:1f:22:a5:24:20:26:
         c9:02:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----