Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01a0903b-87e8-3571-b326-7ed408199a03.roa
File:                     01a0903b-87e8-3571-b326-7ed408199a03.roa (raw, json)
Hash identifier:          hZb6xBAxPvNj1Tt/CGMj1Qd5U1j6OQOL59ziuQ8cQWc=
Subject key identifier:   79:60:B7:F5:87:8D:E0:CD:D6:34:4B:3F:E5:22:64:A8:BE:05:35:55
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E246AFE52B6D15A617980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01a0903b-87e8-3571-b326-7ed408199a03.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 09 Aug 2023 21:32:07 +0000
asID:                     397441
IP address blocks:        69.171.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:24:6a:fe:52:b6:d1:5a:61:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug  9 21:32:07 2023 GMT
        Subject: CN=c1268c8b-e8d5-4ec1-a324-35c0ba44b661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:a3:dc:72:4b:ea:13:53:95:30:6c:30:36:
                    e2:ce:1e:6c:bf:5d:20:42:f7:8e:17:fe:25:4d:89:
                    8d:5d:31:ef:f4:c3:dc:3a:dc:56:4e:9b:5c:e2:26:
                    42:36:13:e0:f9:c6:1e:f1:67:a1:58:de:19:36:b0:
                    56:5d:e3:6c:42:14:32:7d:be:00:ac:27:44:eb:1b:
                    e2:1d:ce:4f:20:7c:ef:f7:b2:fb:fd:e9:8e:db:c7:
                    48:a2:eb:8d:92:c4:ae:81:a6:86:05:cb:a3:17:d7:
                    46:e7:13:9f:c6:d8:56:37:24:f3:5e:fc:2c:cb:ec:
                    95:23:07:ad:9b:f4:4e:eb:4e:4b:52:19:c4:31:43:
                    a2:7d:b2:e7:65:8b:ec:0a:20:c0:0b:63:fd:d8:60:
                    a6:5f:1f:42:03:de:82:89:ce:e6:31:f1:97:0d:86:
                    3d:35:df:35:c7:13:ca:11:52:9c:0d:d8:36:1d:92:
                    42:0c:62:a1:cc:ed:4e:90:37:40:58:63:9d:eb:b1:
                    6f:c2:ed:bd:13:d0:48:63:70:0d:ce:06:08:b7:be:
                    ce:05:f3:b1:81:7a:76:a6:1e:57:71:f6:be:de:3a:
                    37:dd:bc:78:7c:4d:07:9c:92:2d:45:f1:6a:aa:80:
                    41:de:b9:5a:57:a9:a6:04:40:52:c0:8b:08:f1:c5:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:60:B7:F5:87:8D:E0:CD:D6:34:4B:3F:E5:22:64:A8:BE:05:35:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01a0903b-87e8-3571-b326-7ed408199a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.171.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:83:12:7c:3e:14:48:3a:54:1e:5b:af:1b:eb:c9:3b:56:94:
         95:5e:18:60:28:b1:d1:78:f0:f4:a7:80:3f:db:97:f5:88:77:
         34:12:d7:27:a5:90:fe:50:ad:66:19:41:32:d8:2d:61:c5:3b:
         94:b2:52:9d:52:c8:c6:f4:a9:2e:c0:b2:73:f4:99:b7:21:3b:
         a8:71:6c:de:ea:f5:d5:56:67:46:15:0b:55:57:1f:52:4e:13:
         1d:4e:48:d9:e1:e3:79:69:bc:ae:02:43:b8:b0:71:a7:4f:52:
         40:b5:f6:6e:12:aa:9c:99:34:f8:c5:9c:84:52:b3:b2:d8:23:
         37:6b:09:c0:e3:a5:0e:f0:1e:da:5e:bc:8f:5f:e4:f9:f4:fa:
         4c:61:6e:48:f4:34:23:ae:e9:fe:1b:b3:e4:b2:6e:c8:b8:14:
         be:90:98:69:dc:36:87:2f:2f:a7:20:1b:ba:50:68:bc:32:34:
         cb:eb:5c:35:ae:68:ab:48:1c:44:9e:4c:cf:da:77:fb:20:c5:
         95:04:01:d7:b2:fa:d0:f9:39:19:de:c5:c4:fa:c2:a6:0b:5d:
         9c:ee:84:23:9d:15:3f:26:ea:95:61:fd:26:20:93:fa:93:16:
         29:1c:a3:d4:e3:be:16:27:f8:df:ab:f7:3a:8c:0d:83:73:b7:
         ef:0c:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----