Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/282c0256-6dfb-33b5-829d-952850872413.roa
File:                     282c0256-6dfb-33b5-829d-952850872413.roa (raw, json)
Hash identifier:          +OsvIgbYAv17w0+VaDoL2wNkTuXlSK+0dveAb5OUobw=
Subject key identifier:   EB:01:D6:74:79:02:E5:11:F2:0C:EB:FC:18:DC:42:66:2F:C5:AC:24
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858426367E8B393DD83025D978E60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/282c0256-6dfb-33b5-829d-952850872413.roa
Signing time:             Fri 30 Jun 2023 05:59:39 +0000
ROA not before:           Fri 30 Jun 2023 05:59:39 +0000
ROA not after:            Thu 28 Sep 2023 05:59:39 +0000
asID:                     834
IP address blocks:        206.206.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:63:67:e8:b3:93:dd:83:02:5d:97:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 30 05:59:39 2023 GMT
            Not After : Sep 28 05:59:39 2023 GMT
        Subject: CN=1a6a73af-2ab3-4695-9b6d-f3716bad07ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:fa:59:35:ef:8f:7d:ec:a3:1e:2b:84:d1:
                    12:22:71:75:ab:41:44:f3:d5:84:9c:a4:0e:cc:5f:
                    6e:0d:85:79:96:85:43:5c:98:7f:42:cb:11:76:e5:
                    94:36:aa:38:82:b2:0f:6d:37:33:32:3b:5a:6d:40:
                    e2:01:6b:6b:6f:4d:4e:d7:10:9f:29:98:d6:f0:9c:
                    d5:7d:98:30:60:27:5b:c3:0d:6f:06:c6:56:3e:6e:
                    1e:0b:82:8c:01:42:81:5b:a6:89:5a:60:6e:3d:27:
                    dc:da:44:1d:e5:d9:45:ab:4a:19:ea:57:9a:ca:35:
                    03:e8:0a:26:bd:0a:d6:7a:32:d1:44:7e:dd:e5:f4:
                    72:f1:46:56:88:8a:0a:3b:3d:74:13:cb:4f:b6:0a:
                    bf:dc:c7:59:de:11:03:f2:6b:83:e3:78:4a:5a:c2:
                    0b:c3:11:a6:6d:f4:97:a2:85:9b:75:c8:c7:b5:f0:
                    41:a8:6e:61:e4:63:84:10:8f:57:ee:ba:6a:3f:6c:
                    8b:9e:2e:8d:cd:48:b5:80:8c:ba:6b:7f:6d:8b:07:
                    97:77:e4:f8:da:2f:ea:2d:a1:0d:d6:ac:9c:ba:73:
                    bf:4a:7a:9f:8e:3f:dd:25:8f:a3:2c:01:b1:9c:f4:
                    91:46:ed:fa:2b:cb:b9:f9:fd:51:bc:6d:35:5e:96:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:D6:74:79:02:E5:11:F2:0C:EB:FC:18:DC:42:66:2F:C5:AC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/282c0256-6dfb-33b5-829d-952850872413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:bf:aa:d0:0a:41:47:d6:2e:f1:b3:6b:b7:a8:4b:48:f8:9e:
         f1:05:01:a4:e8:dd:74:6c:71:ed:cc:5d:01:3b:4c:0f:62:30:
         41:1e:25:e9:aa:f5:ec:58:1f:79:fc:e3:07:a7:fd:86:b6:be:
         45:78:b2:38:ae:94:21:ab:4a:24:ff:bc:17:c9:1b:53:d9:ff:
         b8:10:06:a9:c1:b9:8c:5a:41:d7:78:ea:ca:2c:a9:b8:31:fe:
         37:81:43:3b:e6:83:f9:9a:6b:a4:98:ae:ff:46:6b:33:16:44:
         c1:c7:3a:ed:76:76:a7:e5:d8:49:1b:7c:fe:fd:a6:21:e2:d6:
         1e:0f:30:47:fd:c2:3f:5d:02:1d:e1:9b:69:17:18:c6:c0:80:
         6c:33:bb:cd:45:7f:85:7a:c4:0f:c5:96:30:54:0f:07:7b:30:
         a1:e1:d1:0f:26:34:f3:7c:ec:f9:f2:11:cd:dc:37:61:6c:d0:
         18:3d:e0:5b:04:0e:eb:cc:56:5f:a7:9b:d6:52:1d:98:31:8e:
         ef:43:7b:9a:10:35:51:8b:51:0f:4b:d2:ca:29:c4:c7:21:bf:
         09:1d:be:7a:c7:d2:68:45:f4:34:46:e1:68:93:21:de:2e:35:
         d1:b3:ee:a6:e9:ee:c5:3c:e3:5f:f3:0c:71:04:a9:9a:99:8a:
         b9:3f:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----