Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa
File:                     374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa (raw, json)
Hash identifier:          MMXPWRRn50FJvsXR3gkZs7rOK9+CpMtRt2DnQybieMg=
Subject key identifier:   54:D0:0B:D1:8C:1C:63:BA:53:18:CB:E0:95:EA:94:D7:3B:DE:EF:1C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843849EEC836F9B4824166D30E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa
Signing time:             Wed 11 Oct 2023 20:19:07 +0000
ROA not before:           Wed 11 Oct 2023 20:19:07 +0000
ROA not after:            Tue 09 Jan 2024 21:19:07 +0000
asID:                     852
IP address blocks:        216.74.82.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:84:9e:ec:83:6f:9b:48:24:16:6d:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 11 20:19:07 2023 GMT
            Not After : Jan  9 21:19:07 2024 GMT
        Subject: CN=5d274daa-6da2-41a9-8fa9-322d41065d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:b4:d8:b8:ea:cc:ae:a0:03:b8:8a:7a:dc:
                    a4:2c:52:8a:8a:22:56:41:ee:6b:b8:8a:41:79:5c:
                    c5:29:50:73:c6:1b:b3:51:33:e0:5a:3b:ae:6e:5c:
                    74:b0:78:1f:20:f5:18:00:6b:c6:0c:b3:1a:e0:9c:
                    b2:70:bb:9a:1b:d1:f0:2f:6c:c6:f0:d2:55:49:74:
                    b1:8b:a2:d2:44:16:85:1e:ed:f6:f1:3a:2e:b0:f1:
                    f0:38:b1:64:3e:2c:96:2b:d0:c6:b2:6a:d1:cb:b7:
                    31:fd:78:46:8e:10:68:5b:b6:d1:be:dc:ed:0a:a0:
                    69:99:ea:a4:13:83:1a:f6:c7:29:32:b7:14:7e:c1:
                    71:33:b7:80:ba:40:40:23:0e:52:7c:9b:a1:57:04:
                    e3:61:ca:cf:f0:c8:e8:d8:e8:17:94:22:a7:6b:3c:
                    5e:b5:ed:2c:18:2d:2e:6d:ab:11:c1:82:45:1a:54:
                    f5:72:19:e0:b6:3f:22:07:8a:d1:11:1d:33:33:2a:
                    50:77:cc:4c:fc:01:63:96:b5:8e:44:7c:15:f6:38:
                    88:c5:1e:de:60:22:b8:27:70:71:62:7a:24:3a:a6:
                    03:9c:5c:0c:a1:ba:de:4e:94:b1:38:5e:86:2d:50:
                    18:89:b7:19:36:48:d5:c6:90:be:46:2a:48:bc:20:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:0B:D1:8C:1C:63:BA:53:18:CB:E0:95:EA:94:D7:3B:DE:EF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:f7:cf:6a:9e:90:e8:33:db:09:f8:29:b8:ca:e4:89:09:
         8c:90:ab:98:d3:62:02:84:dc:d9:f4:a9:30:2e:46:65:b5:5c:
         27:32:92:03:50:ce:e6:96:27:b6:9a:31:73:c0:26:6e:fa:e2:
         84:58:b0:d6:43:94:d3:d6:6b:bc:a7:25:12:84:b9:d2:b4:e6:
         5a:da:6e:7f:fa:1a:c6:6f:46:46:82:0b:a2:16:cb:39:97:65:
         84:a1:02:66:09:79:ca:32:2a:34:a0:22:55:ed:d8:ff:f4:99:
         33:35:99:50:c7:8c:a7:3b:0e:70:de:df:22:3c:1d:fc:7f:b8:
         b9:01:0c:77:d1:ad:ac:3b:9d:5f:89:b2:89:87:a9:e4:cf:88:
         42:65:38:e6:ef:03:62:21:bc:2b:ea:7a:d4:03:06:0b:ae:0f:
         83:3f:0a:02:7f:a7:bb:d3:67:79:1a:10:94:11:12:be:33:b3:
         d2:ad:83:ef:6d:03:8d:10:12:a2:9a:42:a9:77:41:cd:8a:cc:
         1b:2d:59:c8:f6:24:8c:ba:d5:75:8a:cf:51:45:5a:13:11:f7:
         bf:ac:69:e0:b4:c4:ab:20:33:f3:24:9f:d7:37:b2:da:71:24:
         fb:6d:66:24:03:c0:07:f1:81:9c:e4:a6:dd:b3:3f:45:81:b1:
         80:b9:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----