Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2b69861c-1d15-314f-b456-16b3c43e5b16.roa
File:                     2b69861c-1d15-314f-b456-16b3c43e5b16.roa (raw, json)
Hash identifier:          xXWvhXvluyMWGrulSeifYATxHGFgD8O+z0/PIevSEeM=
Subject key identifier:   DB:7C:4F:69:6D:CA:46:D9:75:FB:B3:4A:9D:15:44:D3:01:E8:98:2A
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584386CC4FDAF0A8BDBDEC6779F8
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2b69861c-1d15-314f-b456-16b3c43e5b16.roa
Signing time:             Thu 12 Oct 2023 15:02:11 +0000
ROA not before:           Thu 12 Oct 2023 15:02:11 +0000
ROA not after:            Wed 10 Jan 2024 16:02:11 +0000
asID:                     140543
IP address blocks:        170.205.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:86:cc:4f:da:f0:a8:bd:bd:ec:67:79:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Oct 12 15:02:11 2023 GMT
            Not After : Jan 10 16:02:11 2024 GMT
        Subject: CN=74a060bc-8a13-4fa2-9433-d3204c3d0ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:10:f0:6f:54:ae:cf:a5:75:df:3e:9d:13:0f:
                    de:ba:e2:34:4e:0a:98:bf:85:2d:fd:75:8e:0a:85:
                    81:c3:68:fb:4e:eb:21:97:1c:cc:2b:b5:73:ff:ff:
                    96:ad:f4:47:ed:18:b8:ad:0c:fd:8f:ed:dc:b4:6d:
                    43:96:c3:91:ab:75:34:21:fe:88:8c:4d:8c:50:37:
                    60:74:78:99:33:23:5a:82:0f:4f:86:f7:e0:d9:54:
                    d5:0b:77:75:41:d0:30:c3:bf:9e:3a:ad:5b:e0:19:
                    f4:60:65:8d:63:ac:a4:85:2e:c6:bd:42:a6:cf:23:
                    65:d9:95:59:0f:ac:68:50:0c:a3:27:9d:ab:1f:0e:
                    5a:c9:38:83:3a:84:1d:c5:b6:ce:60:e8:83:ee:38:
                    56:21:91:5d:b8:47:bb:89:87:64:a4:ef:4e:c7:3e:
                    c8:ee:c2:34:64:19:8b:94:ea:ba:b0:e7:b5:f4:15:
                    18:f7:2b:07:71:a3:cc:6e:75:71:c2:23:0b:23:0e:
                    d1:72:a8:44:5a:b5:44:f0:6b:7d:a8:97:7f:5b:57:
                    7b:10:27:78:aa:97:83:5f:cd:c5:80:f5:3c:b0:2c:
                    a7:47:4b:9e:e9:86:bb:48:74:bb:d8:22:ec:0b:7f:
                    38:28:fd:5a:32:48:52:91:29:5f:a2:40:90:35:73:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7C:4F:69:6D:CA:46:D9:75:FB:B3:4A:9D:15:44:D3:01:E8:98:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2b69861c-1d15-314f-b456-16b3c43e5b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1d:dd:5e:6b:56:e7:10:42:e0:00:2d:65:0d:b8:79:30:61:
         c2:59:c1:90:28:3b:87:00:8f:9e:c7:9c:60:e6:8b:ed:c5:1e:
         0d:03:01:c1:b4:de:2f:6e:e3:84:72:60:0d:91:b4:18:58:73:
         62:e1:6f:a6:86:7a:ec:0a:c3:7c:19:f2:77:0f:b8:1e:7d:55:
         64:91:4b:17:a3:3f:73:80:a9:aa:4c:3d:2b:bf:de:56:c5:55:
         71:2e:05:2e:1b:20:19:41:7f:53:73:0e:19:83:24:7b:53:ca:
         2e:5b:dc:56:f9:77:4e:17:46:79:b4:b4:a8:4c:28:07:b4:90:
         30:b8:30:d7:59:de:42:94:a4:93:77:9c:e2:6b:38:ed:fe:58:
         9c:15:83:91:8d:13:60:ef:0a:e8:cb:b3:51:61:e4:09:aa:e5:
         55:34:5a:cf:ef:28:65:9d:4c:7c:57:f9:c4:cd:1e:48:0d:5c:
         50:d3:38:d9:95:e2:b5:85:04:f0:3a:49:c2:3d:d9:1a:0a:cf:
         42:80:e7:cf:b3:cb:02:fb:ff:9e:75:f3:f4:b0:4d:4b:33:09:
         c9:09:22:e1:4f:e8:63:05:44:f8:40:a9:36:aa:48:65:c1:82:
         a3:02:b0:aa:35:a8:e0:75:4a:74:84:ee:5f:d6:49:00:32:d0:
         ef:fe:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----