Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/023b79ef-14ff-395b-84db-5145e3fe6e04.roa
File:                     023b79ef-14ff-395b-84db-5145e3fe6e04.roa (raw, json)
Hash identifier:          tKuVkh6uAUoXbZ/7IxPmJBaQ9HLxGGdtcDmfyT+dal8=
Subject key identifier:   B8:91:29:74:B4:8C:F6:4D:A5:F6:BD:7F:E3:5B:9F:CC:80:E8:B8:77
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843FD53B6B85796CC46D75F4220
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/023b79ef-14ff-395b-84db-5145e3fe6e04.roa
Signing time:             Fri 24 Nov 2023 02:00:16 +0000
ROA not before:           Fri 24 Nov 2023 02:00:16 +0000
ROA not after:            Thu 22 Feb 2024 02:00:16 +0000
asID:                     13332
IP address blocks:        206.206.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 17:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fd:53:b6:b8:57:96:cc:46:d7:5f:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 24 02:00:16 2023 GMT
            Not After : Feb 22 02:00:16 2024 GMT
        Subject: CN=16afda4a-c4f3-4a9e-9d3d-ec0ab204dee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:8a:76:1b:b7:9c:7c:a6:dc:0b:c5:84:ad:
                    59:e2:b3:ad:86:3d:54:14:f5:01:ef:78:30:64:03:
                    09:b7:86:f3:51:84:af:08:c5:01:cb:68:59:47:2d:
                    09:9e:f3:2f:5b:f6:4d:5e:9f:0e:6d:e4:7f:f6:ee:
                    c7:3f:ba:0c:59:ba:8c:fd:55:c2:5f:a4:46:6f:de:
                    1c:51:cf:2f:e4:cc:3a:98:6a:7c:c9:e3:60:dd:af:
                    96:56:ea:bb:19:97:a7:2a:3e:9b:ba:81:9b:02:0c:
                    e7:c4:18:7e:89:1a:24:b8:8a:5c:bf:c2:65:11:1f:
                    d7:fe:b6:e9:e6:b5:f5:21:ec:ee:ba:82:dd:69:37:
                    1a:72:dc:02:dc:10:f7:59:57:45:4a:d3:ff:ac:f6:
                    26:98:a1:96:e0:fc:55:60:ed:ea:fa:29:03:f2:58:
                    a1:e0:6a:34:3a:ca:1b:93:e7:8f:37:d0:8f:a0:b5:
                    6a:58:27:ff:45:99:1e:83:eb:a3:ef:a5:7e:d0:57:
                    a3:a8:64:01:89:0c:ba:7a:3d:9f:bf:47:c1:a1:4a:
                    ae:56:89:64:7d:1c:48:01:59:a3:f3:56:31:c4:e2:
                    7a:37:e8:dd:c6:9b:aa:c1:4a:16:f3:60:d0:3c:dc:
                    12:12:a9:0b:ea:ef:e8:e5:18:24:86:f6:f6:b6:c0:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:29:74:B4:8C:F6:4D:A5:F6:BD:7F:E3:5B:9F:CC:80:E8:B8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/023b79ef-14ff-395b-84db-5145e3fe6e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:5a:0d:39:2a:78:92:20:d8:78:c1:62:c8:4b:f4:53:a6:
         91:f7:06:46:17:44:7e:a5:c0:35:77:fb:98:04:26:fe:43:5a:
         cf:13:a5:33:fe:bd:40:7c:da:af:8c:f3:0a:b4:17:0b:29:a9:
         93:63:6b:52:77:a3:bf:3a:a9:72:e8:96:ac:19:65:7b:d0:82:
         5e:ec:96:e1:a5:62:4f:a5:3a:f7:90:54:9f:27:4f:b4:05:42:
         48:9a:57:7e:64:db:75:d9:43:6e:89:1a:28:ab:cd:21:12:17:
         13:b3:1d:f4:fb:63:06:c6:1f:4a:6b:b6:c1:78:0e:48:59:d9:
         23:a8:6b:6a:39:b6:fb:87:8a:99:b6:bf:47:e6:5f:af:fe:a3:
         a9:38:e8:5a:81:f7:fa:c6:7f:82:95:b2:e0:90:9d:9c:f3:55:
         79:60:e9:a8:01:8b:c7:96:c9:18:9e:85:87:aa:2c:cb:86:bf:
         e1:2e:d4:ca:ce:2d:cc:97:14:5b:ae:0f:1e:81:ce:6c:f1:66:
         8b:91:f5:f8:1f:1c:08:30:90:7a:65:85:1d:51:81:20:c8:68:
         18:a2:79:f6:1e:b7:9f:68:46:ea:28:bd:11:60:bb:dd:72:65:
         e2:ed:2e:28:c6:d3:d0:f3:f9:56:63:3b:fb:ca:08:94:9e:1a:
         0e:70:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----