Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bbec4b16-b10c-3cd9-90e7-faf4cf6c277e.roa
File:                     bbec4b16-b10c-3cd9-90e7-faf4cf6c277e.roa (raw, json)
Hash identifier:          95m1ak6dtavYBLBcRV08FG3WLYUFQuK4rrFRRZSzkNY=
Subject key identifier:   AE:46:CC:F7:73:AD:FB:71:C8:91:07:CF:07:41:21:B3:E2:67:14:29
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285842117D9A1700DAFBB632C59070
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bbec4b16-b10c-3cd9-90e7-faf4cf6c277e.roa
Signing time:             Wed 31 May 2023 21:47:05 +0000
ROA not before:           Wed 31 May 2023 21:47:05 +0000
ROA not after:            Tue 29 Aug 2023 21:47:05 +0000
asID:                     61317
IP address blocks:        216.177.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:11:7d:9a:17:00:da:fb:b6:32:c5:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May 31 21:47:05 2023 GMT
            Not After : Aug 29 21:47:05 2023 GMT
        Subject: CN=31aa34b4-6882-4944-a815-74843cf26871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b5:0d:a5:2d:1d:39:c4:2a:b2:4c:04:8c:e8:
                    7d:e2:86:2c:17:ed:9f:b3:e7:e8:4d:23:b8:99:85:
                    ae:46:ff:6f:80:37:d1:3a:dd:6a:c6:5c:5b:6d:c2:
                    38:5d:39:34:f9:fb:d6:0d:71:c5:4a:b7:a5:b6:36:
                    1c:63:94:5f:e0:d8:4c:50:1e:b5:44:51:c0:c6:1f:
                    81:cd:c3:dc:7d:8f:43:92:3e:14:9b:29:2b:b7:12:
                    98:c6:d2:b7:85:18:d3:9c:80:49:0e:fa:d9:f6:e3:
                    bc:a9:ea:76:25:7c:f5:65:c8:69:ac:a9:e0:9a:62:
                    0f:9b:84:ab:ce:48:ee:1f:5c:98:b8:2e:fc:f5:f7:
                    e9:26:d0:f0:77:b9:a3:05:3c:e4:51:75:51:99:c0:
                    1b:89:52:e9:23:d7:bc:41:61:52:88:b2:8e:2d:89:
                    fd:45:51:30:7b:50:18:42:f3:1b:a8:ee:db:a6:77:
                    a9:48:54:62:c4:f1:2a:e1:f3:a4:e3:48:bc:a3:da:
                    f4:b0:42:cc:36:f2:44:62:de:62:e5:48:8b:ef:3c:
                    fc:fb:f7:7c:90:37:c5:16:a6:23:48:59:06:30:a0:
                    6a:cf:88:d9:23:83:a9:11:50:65:bf:89:f4:1e:c9:
                    82:73:ff:4f:10:76:24:8a:33:27:a2:08:87:e9:de:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:CC:F7:73:AD:FB:71:C8:91:07:CF:07:41:21:B3:E2:67:14:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bbec4b16-b10c-3cd9-90e7-faf4cf6c277e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:92:c7:ae:d6:70:e3:49:7f:73:91:26:7c:37:48:a5:0f:
         1a:28:fc:a8:64:32:a0:5a:3d:b6:53:11:45:68:16:e8:b1:3a:
         f8:f9:fe:7a:76:81:da:fb:c4:04:0a:38:86:c8:31:76:51:a5:
         9f:42:da:96:84:5a:72:f2:ba:d2:a0:54:6c:5d:75:53:2c:aa:
         5c:38:28:cc:94:eb:20:d6:90:dc:68:b2:11:f7:8c:ee:0e:51:
         30:ee:dc:7c:78:af:39:3e:06:f8:0f:5f:a6:81:05:76:dd:f6:
         2e:6a:26:fc:4b:43:2a:e0:69:01:3f:e3:cf:ec:f7:80:c5:7e:
         84:22:a6:70:38:b4:6d:0e:41:f8:24:d2:c2:97:c7:c2:e8:83:
         fd:e0:5a:94:37:c3:d8:10:c9:15:dd:a1:ff:7c:08:45:de:85:
         81:15:66:1d:8a:76:59:b7:77:40:67:0e:6f:fa:e8:60:54:82:
         ba:5e:71:b9:c6:a7:a2:02:6b:62:c1:27:a4:3e:74:6d:f9:d1:
         11:1e:5c:a7:b8:74:c7:ff:b7:b5:c1:cf:da:4c:5a:98:b7:f0:
         18:cc:8b:30:78:e9:a0:d5:b0:ae:a2:69:e1:fb:15:20:8b:d9:
         aa:b8:42:1a:9a:46:f8:e5:1c:e2:a5:1e:3c:b6:d7:13:17:a1:
         29:a5:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----