Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bb013e6a-d60f-328e-a90a-032309716591.roa
File:                     bb013e6a-d60f-328e-a90a-032309716591.roa (raw, json)
Hash identifier:          K5agWOkm5bEErC+JLPpY9eAn/okWYXniqp+RPkmAdK0=
Subject key identifier:   69:4C:7F:47:86:81:A6:BC:04:E5:0D:96:AD:96:62:1F:9A:91:3B:F6
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858425FCF6A4BA60E8AA45A25C600
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bb013e6a-d60f-328e-a90a-032309716591.roa
Signing time:             Wed 28 Jun 2023 23:04:58 +0000
ROA not before:           Wed 28 Jun 2023 23:04:58 +0000
ROA not after:            Tue 26 Sep 2023 23:04:58 +0000
asID:                     834
IP address blocks:        216.177.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:5f:cf:6a:4b:a6:0e:8a:a4:5a:25:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jun 28 23:04:58 2023 GMT
            Not After : Sep 26 23:04:58 2023 GMT
        Subject: CN=fe5a43d9-8791-4685-a785-e69e892cfd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:33:85:05:3a:4d:b9:1c:a2:31:bf:20:17:
                    fb:e1:31:84:8a:6b:b3:3d:91:a3:f2:f9:d4:14:16:
                    02:97:ef:05:eb:b0:88:a8:0f:eb:a2:d8:28:8d:22:
                    c6:a7:83:1b:b1:27:1a:51:b7:38:37:70:dd:96:8d:
                    f5:0c:bb:7c:f9:6f:2c:b2:94:36:f6:ed:6f:be:78:
                    e5:77:29:d9:64:c5:f6:cc:e7:db:cf:74:9b:b1:37:
                    e1:cd:c2:eb:94:8c:ab:58:51:0e:17:43:85:5d:b5:
                    12:3d:43:9d:59:fe:d0:e3:fc:0f:89:78:73:2e:ca:
                    29:a5:d0:67:41:e6:54:b8:1d:aa:c0:df:ff:41:90:
                    0c:9c:d5:c1:1e:fb:93:1e:7e:cf:fc:74:4b:b7:9a:
                    ac:71:07:5d:8a:12:20:71:71:1c:8b:d8:fe:fb:a0:
                    98:76:9b:f7:38:65:a2:5c:33:b2:95:62:76:a1:44:
                    90:e2:f3:71:0a:90:fd:2f:34:b4:31:24:7b:87:05:
                    e1:4f:ed:d4:ee:0e:66:2b:76:46:06:d7:af:cd:82:
                    2b:36:7b:95:8e:94:86:c7:00:64:8e:42:2b:ed:f0:
                    13:1c:40:d2:6e:b7:ba:4f:13:1f:bb:5b:08:a3:bc:
                    b9:46:e7:c3:89:11:1f:fa:93:13:1a:20:fc:08:13:
                    37:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4C:7F:47:86:81:A6:BC:04:E5:0D:96:AD:96:62:1F:9A:91:3B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bb013e6a-d60f-328e-a90a-032309716591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1f:06:84:46:e2:d3:9e:c5:3a:2b:84:59:1c:3c:11:25:64:
         9e:e4:cc:4c:06:72:20:70:ef:be:c1:a8:f8:79:98:fe:d0:0a:
         5c:6f:a3:9d:66:28:d0:77:53:41:6d:6c:d7:dc:dc:0e:88:dc:
         f1:b7:7f:2f:cb:ad:f2:45:53:a3:83:ec:22:f3:89:19:b5:82:
         7d:c1:29:86:dd:1b:8b:74:43:6b:0f:d1:b5:70:da:88:2a:a9:
         e4:30:e4:4b:55:7c:eb:bc:9b:77:ad:e6:61:43:8e:56:52:f3:
         47:ef:ab:fd:e7:52:c1:24:82:e3:5f:95:b3:1b:93:df:c1:09:
         55:09:2e:be:a1:33:9d:39:29:e4:13:83:4b:77:11:cc:64:a2:
         0c:2a:7c:fe:9c:12:27:d2:27:65:f8:d6:30:b1:25:21:71:28:
         04:ec:92:cf:68:ba:ee:98:3b:43:c8:ef:09:91:0e:dd:64:8d:
         80:45:72:18:1a:3f:14:7e:19:ec:a0:4d:81:aa:08:03:93:a3:
         2f:90:1e:53:8e:2d:4f:0c:8a:52:50:0f:09:25:d5:cd:d8:1f:
         8a:6c:c2:09:65:4a:33:6e:19:bf:62:1d:00:ff:6f:35:9d:2c:
         3d:b2:dc:41:58:65:f3:8e:3a:ed:91:5f:24:7b:ca:ea:6d:41:
         a9:1b:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----