Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/9dbdb1a1-206e-3da5-ad26-5593d91ba110.roa
File:                     9dbdb1a1-206e-3da5-ad26-5593d91ba110.roa (raw, json)
Hash identifier:          FpixQcfewK5t55mRND7/vl1OwTL1q1d9dgw2kkNDFT0=
Subject key identifier:   88:20:F8:45:FD:0E:EC:35:72:77:12:01:09:37:03:87:8C:B1:A5:1C
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F43285842D3E419086621D39752DCEFC0
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/9dbdb1a1-206e-3da5-ad26-5593d91ba110.roa
Signing time:             Wed 09 Aug 2023 13:00:23 +0000
ROA not before:           Wed 09 Aug 2023 13:00:23 +0000
ROA not after:            Tue 07 Nov 2023 14:00:23 +0000
asID:                     398722
IP address blocks:        167.248.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d3:e4:19:08:66:21:d3:97:52:dc:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Aug  9 13:00:23 2023 GMT
            Not After : Nov  7 14:00:23 2023 GMT
        Subject: CN=09c88675-f746-4393-86c6-994e2b151534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:b4:b2:d9:07:e4:60:9c:3d:38:f7:d3:00:
                    bb:9a:75:ea:0a:26:4b:24:db:be:d4:6a:79:0d:7c:
                    98:95:22:fe:7f:72:6d:d5:1b:b3:5c:4c:95:9b:20:
                    62:57:5e:ee:4c:a4:b4:be:f9:6e:38:9b:eb:2f:28:
                    2d:c7:8c:03:42:35:33:ad:b4:2c:ab:99:4d:ee:5c:
                    cc:1a:3b:2e:55:bc:0f:62:19:c1:47:80:7e:d7:62:
                    9e:11:a6:69:74:ca:fa:a4:b9:02:7b:25:99:c0:a2:
                    4d:7e:e0:ef:fa:86:92:92:f5:2e:d3:47:7e:c7:be:
                    38:0c:76:1e:97:a7:15:0f:b4:79:f9:0e:59:21:b9:
                    94:8c:91:1c:91:9e:70:50:2e:15:20:58:a9:fb:ec:
                    ef:1a:de:b3:75:ba:5e:e1:35:7a:fa:ac:3a:fd:78:
                    ba:30:09:b4:69:5c:88:46:ef:7e:44:9b:57:76:83:
                    0a:57:17:cc:0a:8a:c8:a9:f5:7e:8e:77:a4:59:48:
                    ff:43:d9:6e:17:30:fa:19:64:c5:f6:b1:01:d8:9c:
                    c9:3a:49:b9:42:88:7c:7c:77:53:45:cc:3f:bb:b5:
                    2d:16:71:d5:db:4a:70:b6:85:aa:fb:11:71:0c:8e:
                    d8:c1:dc:bd:55:31:dc:7f:d8:27:cd:86:4f:09:dd:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:20:F8:45:FD:0E:EC:35:72:77:12:01:09:37:03:87:8C:B1:A5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/9dbdb1a1-206e-3da5-ad26-5593d91ba110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.248.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:10:11:2b:6c:7c:fd:ab:7b:82:b5:50:0f:c7:8e:22:32:
         9b:91:dd:cc:2b:75:2b:46:e6:b9:f2:fd:97:0f:46:55:a1:ba:
         73:c8:1f:79:70:d4:c0:e8:ef:5f:68:da:cd:95:f5:09:d2:33:
         df:d3:eb:df:dd:c5:83:a6:c3:55:85:98:d9:1a:c9:b1:ad:01:
         a4:30:ea:57:49:3e:fd:1f:9a:86:1a:df:95:cc:8c:af:e0:7c:
         82:de:f8:a3:cc:58:88:ba:f5:4b:cc:39:be:de:f9:a5:52:d5:
         7d:3e:ed:6a:bd:84:b5:2b:86:f3:fc:5f:10:3f:0c:0d:f0:70:
         ba:bf:8e:66:33:37:79:f8:62:54:7d:e8:7b:79:01:25:f0:59:
         7c:49:e4:4c:2f:31:b3:a2:37:28:c8:62:3b:88:6b:bd:52:d6:
         6a:cd:28:7c:54:de:f9:36:f5:fa:f2:94:09:7a:2b:98:14:e1:
         88:00:27:e0:18:28:cb:24:55:4b:e5:9a:2c:20:86:82:f8:e5:
         2e:a7:63:71:f2:67:d9:81:67:40:55:52:59:22:3a:aa:df:15:
         ad:0b:17:43:14:48:ce:30:81:3e:77:43:89:2a:14:c1:d3:f0:
         b5:17:d2:3e:d6:0f:f5:a0:37:7a:5e:03:56:7a:6c:53:6d:ac:
         c1:ff:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----