Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7caf0249-5644-3421-9902-7f272b63baa9.roa
File:                     7caf0249-5644-3421-9902-7f272b63baa9.roa (raw, json)
Hash identifier:          yN3u+0iU8oKo2k8RjkYDPLPmjD7P/5JqM6QgUTt3SEg=
Subject key identifier:   65:00:34:8B:88:29:E5:FD:7B:21:CA:62:0A:86:D6:45:26:85:77:04
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584386FE4E4E9EBB13D096F40F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7caf0249-5644-3421-9902-7f272b63baa9.roa
Signing time:             Thu 12 Oct 2023 16:42:55 +0000
ROA not before:           Thu 12 Oct 2023 16:42:55 +0000
ROA not after:            Wed 10 Jan 2024 17:42:55 +0000
asID:                     42055
IP address blocks:        216.122.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:86:fe:4e:4e:9e:bb:13:d0:96:f4:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 12 16:42:55 2023 GMT
            Not After : Jan 10 17:42:55 2024 GMT
        Subject: CN=78fe2f4b-7323-4f13-bf5a-2789b364799a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:14:7e:08:ad:f1:63:97:98:80:d8:80:dd:4e:
                    9d:34:5a:a8:86:b3:24:d1:64:25:bc:cb:7c:73:db:
                    c6:2f:6b:4e:09:0e:80:dd:d1:e8:75:76:88:3b:b5:
                    30:d0:e9:cf:d5:4d:a9:95:74:58:98:21:74:ff:1a:
                    14:0b:1f:b6:5e:7e:eb:13:70:e3:c0:8a:ea:fa:0e:
                    1d:f1:54:3c:e4:d2:a1:2f:e9:73:54:74:ea:fc:cf:
                    41:20:cc:a0:36:a7:d8:09:6c:a2:95:4e:56:98:7b:
                    44:03:89:94:c3:87:6b:9c:aa:57:34:c0:8e:6c:28:
                    f9:9f:45:8f:8d:c9:14:cc:41:5d:37:03:51:b7:c1:
                    27:11:83:65:b0:17:fc:9e:44:ec:58:4a:e8:a6:f2:
                    a1:90:03:28:fb:ef:e6:c7:79:a1:50:cf:d2:4b:0c:
                    77:2c:bc:8f:7b:ef:f7:da:8e:65:b0:32:6b:9a:73:
                    07:48:9f:d1:00:d6:1d:f9:85:29:8e:da:c3:d9:45:
                    7b:4a:c9:57:b2:62:6b:d3:0b:40:bf:47:00:a0:89:
                    f1:f3:30:96:2c:c7:54:f2:8d:10:41:24:8f:f8:82:
                    e5:a5:36:87:8b:53:1e:23:b9:9b:41:2b:d0:bc:6f:
                    38:f9:ab:93:06:a5:06:78:51:ed:95:64:e1:b6:b8:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:34:8B:88:29:E5:FD:7B:21:CA:62:0A:86:D6:45:26:85:77:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7caf0249-5644-3421-9902-7f272b63baa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:87:12:b5:3f:83:80:2f:32:99:f3:2f:b5:55:fd:2b:56:79:
         9e:19:f4:70:b4:5a:f8:0c:82:1c:34:e1:cb:cc:26:f7:45:3f:
         04:18:12:0e:b0:97:f0:7c:cc:b3:ce:7d:0a:56:c7:f1:67:72:
         61:dc:b4:7c:d0:f4:5b:2f:94:cd:3b:dc:fb:a4:8d:29:b7:4c:
         c8:9c:e4:fc:23:1f:b9:ae:74:84:f8:84:ba:ee:65:e4:21:13:
         06:44:7d:ff:4e:6f:3f:e1:ff:a4:ef:3b:67:02:b1:68:f6:ce:
         c2:5f:7b:51:b3:20:91:50:8c:55:e5:d2:e1:44:b4:f5:00:f9:
         a5:0d:e0:87:5b:8c:ba:b7:b9:c3:c1:79:58:ed:b6:cc:38:5c:
         8d:89:57:16:4c:90:bc:00:06:fe:1f:7a:7e:19:ac:30:e5:67:
         94:e1:73:86:b3:b0:b2:b5:c9:c6:48:b8:af:12:8e:b9:76:21:
         31:8b:c2:b5:5e:cc:4d:6c:f8:61:56:80:8b:8a:9e:d2:7b:e6:
         f2:4c:49:18:d4:f7:ee:45:bf:98:ec:43:d5:02:af:4b:5d:05:
         24:ba:ea:2a:eb:93:f2:c1:9e:73:63:2c:cb:dd:30:40:88:e2:
         60:25:9d:b6:3c:ce:ae:2e:8d:64:81:33:75:8d:9a:47:f6:aa:
         de:d3:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----