Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/e46c28e5-16fb-3294-bc60-46ce7f1d5e1d.roa
File:                     e46c28e5-16fb-3294-bc60-46ce7f1d5e1d.roa (raw, json)
Hash identifier:          gmetM0AN1pYgnA4i4ATw95CAcOZw6mFVzQ1UDjkSQOc=
Subject key identifier:   36:11:38:E8:F2:A4:02:2A:26:67:4C:27:67:0B:28:3A:5B:34:42:4E
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285843157F3C764E9B3FA067531D00
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/e46c28e5-16fb-3294-bc60-46ce7f1d5e1d.roa
Signing time:             Sat 02 Sep 2023 01:00:27 +0000
ROA not before:           Sat 02 Sep 2023 01:00:27 +0000
ROA not after:            Fri 01 Dec 2023 02:00:27 +0000
asID:                     393841
IP address blocks:        68.65.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:15:7f:3c:76:4e:9b:3f:a0:67:53:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep  2 01:00:27 2023 GMT
            Not After : Dec  1 02:00:27 2023 GMT
        Subject: CN=895391e3-25ce-4628-9daa-42629bbc499a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:97:9e:a3:3e:df:3a:b4:af:6a:6c:63:70:
                    19:81:51:cd:e9:ce:89:92:51:25:22:50:a3:08:d9:
                    69:80:21:71:b1:71:50:7a:19:0d:41:d4:cc:95:4e:
                    45:d9:10:a9:0f:42:65:a0:74:84:bc:b2:67:6f:0e:
                    c6:f5:22:84:10:2a:b0:7c:d5:8e:93:b7:e9:1b:59:
                    b2:72:92:db:b9:94:6b:47:3d:9f:fb:29:98:f9:a6:
                    ac:44:39:ee:d2:37:28:78:01:ff:9f:b3:16:ef:e0:
                    98:54:89:70:66:36:35:ff:b9:e1:9f:5b:67:ae:35:
                    f8:92:61:a4:51:e8:e0:c0:8a:23:fa:bb:fc:48:84:
                    26:a2:10:ae:bf:d5:59:e1:3b:1b:bb:68:ec:c9:a8:
                    ae:34:3f:cc:6a:43:e8:a8:fa:e6:2c:16:13:71:a3:
                    5b:01:ba:02:00:86:0a:30:61:5d:9b:6b:99:63:e8:
                    70:1b:9a:13:44:cb:85:71:00:4b:11:d5:97:72:be:
                    f6:07:d4:bb:d6:5b:da:d4:aa:68:e8:80:0e:92:79:
                    f0:ba:0f:cc:ed:da:69:13:96:88:35:ce:9f:e4:2f:
                    80:91:e4:a7:9e:91:69:60:06:2b:6a:f5:28:52:0b:
                    6c:6b:fa:46:74:f1:aa:df:13:32:76:82:f3:63:f5:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:11:38:E8:F2:A4:02:2A:26:67:4C:27:67:0B:28:3A:5B:34:42:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/e46c28e5-16fb-3294-bc60-46ce7f1d5e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:0d:85:20:be:40:35:0f:0f:0b:95:c8:8a:bf:71:e4:fe:
         f2:7f:ef:f4:b6:ee:32:3a:98:bc:65:65:9c:13:6d:69:b4:40:
         02:ee:c0:9a:b5:99:d0:77:86:ac:79:81:46:4e:41:04:78:73:
         0a:9f:ce:b4:d1:8c:77:26:48:73:90:8b:f5:c6:4a:d9:18:6b:
         92:83:eb:14:32:d1:bf:44:f5:30:81:25:81:80:d5:83:60:7f:
         b4:25:32:71:e0:98:86:3a:50:55:09:fc:f8:89:ae:86:13:e2:
         c8:dc:fb:7d:fc:c3:b0:20:eb:5b:47:bb:a7:c5:b0:5a:53:4a:
         f3:52:fc:71:b6:04:6e:6c:34:b1:09:18:06:7b:f4:54:dc:fa:
         18:d0:c1:f7:9e:ab:d9:0a:fc:a0:f8:58:a0:4e:40:99:52:ce:
         79:65:61:2f:f5:49:a6:7a:67:a9:87:44:fe:5f:fc:fd:55:cc:
         42:97:c3:95:c5:a8:8e:c6:1b:75:7c:45:b9:e4:d5:64:e3:28:
         b4:da:89:23:dc:3f:91:dd:90:85:36:ef:2d:33:f8:72:19:fa:
         59:68:1b:09:ab:62:03:22:13:d2:77:2e:2a:2f:54:8d:eb:85:
         ce:ab:b7:ed:69:63:74:8d:f0:04:6b:62:6c:0b:8b:52:e3:18:
         d7:fc:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----