Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4b7be733-fbb2-3f06-9880-d37f15e8ebf6.roa
File:                     4b7be733-fbb2-3f06-9880-d37f15e8ebf6.roa (raw, json)
Hash identifier:          PnzYPSYrDUikRIUPY6Ar6HHf5asgNrwBBDC5saI9Glk=
Subject key identifier:   BD:46:F7:FB:EB:09:F3:6C:29:B4:07:73:56:7F:D0:24:1F:24:B3:2E
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285842399B262FCCAC1412827CF580
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4b7be733-fbb2-3f06-9880-d37f15e8ebf6.roa
Signing time:             Thu 15 Jun 2023 06:38:57 +0000
ROA not before:           Thu 15 Jun 2023 06:38:57 +0000
ROA not after:            Wed 13 Sep 2023 06:38:57 +0000
asID:                     204843
IP address blocks:        64.40.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:39:9b:26:2f:cc:ac:14:12:82:7c:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jun 15 06:38:57 2023 GMT
            Not After : Sep 13 06:38:57 2023 GMT
        Subject: CN=324d917c-d74b-47ca-96ee-2e57aa326c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:36:07:3a:3a:bb:82:93:10:35:f4:51:d4:
                    0e:d2:88:da:61:e1:d3:f1:dd:8e:52:a2:89:80:cb:
                    f8:b0:7f:84:88:90:4e:92:01:99:67:1d:e4:03:a9:
                    d7:2b:a5:f8:0e:b5:13:75:a5:09:4e:45:cf:e2:15:
                    cb:f8:7a:b4:69:b6:39:a4:49:48:23:b8:09:ab:df:
                    f5:f6:9b:da:88:05:b7:53:07:9c:9c:80:fd:38:d6:
                    64:53:c5:0f:03:8d:b2:e3:b1:6f:65:4a:bb:c3:fa:
                    a0:0e:7c:d3:70:ad:c8:69:49:85:7f:e4:2e:a7:7c:
                    c3:53:74:f9:19:4c:eb:33:f6:c9:44:10:77:6f:10:
                    61:8e:df:3c:0a:2c:cb:ff:7c:9e:19:2f:71:ca:2d:
                    66:59:69:e8:25:01:df:35:b8:f1:1b:80:35:15:73:
                    ef:70:9c:6c:c5:9c:15:82:c5:5f:c5:e0:3e:3f:34:
                    97:c1:d4:0b:bb:99:1d:63:b9:16:21:26:53:f2:ff:
                    e7:e9:02:29:cc:4b:8d:2f:a3:2b:92:32:6a:19:17:
                    5e:42:5d:4c:b7:1f:23:db:2a:46:5c:1a:df:b1:3c:
                    19:f4:44:b1:97:f4:0d:4f:ac:6c:1e:be:34:e8:20:
                    6b:2e:b5:82:16:fb:ea:1a:24:88:5b:ca:5a:2f:31:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:46:F7:FB:EB:09:F3:6C:29:B4:07:73:56:7F:D0:24:1F:24:B3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4b7be733-fbb2-3f06-9880-d37f15e8ebf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:7e:50:cb:a7:d4:34:8e:e2:11:18:44:6f:b0:1a:97:7f:
         5d:89:c3:18:31:ea:18:67:3e:f4:36:51:9c:2e:8e:0c:12:f0:
         0e:e8:e5:98:cf:99:a1:cb:24:27:f0:f4:e7:04:67:70:06:6c:
         84:74:1b:60:46:c5:ac:6f:87:fd:a9:7e:0b:fe:ea:6d:5d:e0:
         c1:e9:4b:bb:38:16:b5:14:5b:67:3f:5b:1a:1c:c1:05:15:5c:
         d7:c0:ba:88:2f:bb:60:06:cb:4e:05:f8:a5:11:58:b5:47:e5:
         a6:1d:2e:77:62:8d:7d:45:df:bc:69:8c:ca:a6:8e:ac:11:e1:
         4c:b3:6c:df:d1:bb:d1:fd:68:c1:29:e3:95:36:3a:3e:0e:ee:
         7d:e4:8d:72:ec:9f:3d:8d:f0:d3:8c:e5:59:61:f8:0f:ac:77:
         b7:5e:dd:a3:21:da:8c:06:6d:0e:74:f2:77:b2:91:2b:a5:2a:
         d6:ed:d3:55:97:b5:6b:c9:0f:23:6a:4a:b0:e6:c4:ea:62:b1:
         53:73:aa:f6:94:9a:c1:10:49:80:2e:24:f1:6e:87:15:a7:d0:
         1d:3b:d7:00:23:c1:a3:f6:14:c3:f0:7d:78:a4:1f:86:bb:ef:
         75:f2:ce:8d:80:b8:d7:0d:be:f3:4e:8f:9e:6a:8b:21:82:10:
         e0:a8:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----