Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8804114f-8537-3823-b993-38b0726a3e4c.roa
File:                     8804114f-8537-3823-b993-38b0726a3e4c.roa (raw, json)
Hash identifier:          HTN/HUdxv5JX+zy/fF8j/wpYYBFDnebnnBJIQI70d2Q=
Subject key identifier:   28:F2:F8:45:2F:D0:C7:FD:BC:41:C5:FE:E4:73:EC:D7:49:06:1B:B2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843FD53B5461616B2C6545B5580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8804114f-8537-3823-b993-38b0726a3e4c.roa
Signing time:             Fri 24 Nov 2023 02:00:16 +0000
ROA not before:           Fri 24 Nov 2023 02:00:16 +0000
ROA not after:            Thu 22 Feb 2024 02:00:16 +0000
asID:                     13332
IP address blocks:        206.206.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 17:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fd:53:b5:46:16:16:b2:c6:54:5b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 24 02:00:16 2023 GMT
            Not After : Feb 22 02:00:16 2024 GMT
        Subject: CN=b1b802bc-6090-4a2a-8385-60857b757a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:4c:a2:e6:3f:8c:15:93:e5:93:76:7e:a8:
                    ef:5e:33:71:4c:26:e0:6a:16:41:19:26:68:9e:6a:
                    49:87:35:3a:13:7f:82:c8:e3:61:25:2a:5e:52:35:
                    79:06:6d:7d:a2:7c:32:96:ca:21:12:77:56:be:e7:
                    f4:04:6a:3a:a8:dc:2f:61:1b:a5:32:26:54:b2:ab:
                    3c:5a:6d:54:7e:0e:bc:79:5b:f0:ea:f8:15:2e:db:
                    0b:de:b0:f5:82:82:88:4d:9c:f4:ea:11:4f:25:54:
                    c9:96:d8:68:9a:c0:53:77:86:f4:7f:b0:24:2c:a9:
                    72:7c:53:b7:d0:f5:78:e0:7a:c3:e1:9c:20:4b:70:
                    5f:3e:83:a2:10:45:c0:24:ac:07:d1:1a:c2:98:38:
                    8f:54:89:24:f5:41:9e:44:cb:b0:73:a2:dc:d8:ec:
                    d4:84:05:36:35:00:64:24:4b:5a:37:3b:92:15:94:
                    d8:24:e5:15:07:c4:69:0a:69:6e:0b:3f:41:13:ac:
                    f7:56:5e:ab:a9:4f:12:d3:84:41:54:60:4d:fa:9c:
                    76:51:49:55:6c:44:e6:fa:ba:75:59:21:88:41:7c:
                    db:24:53:bc:e2:27:74:bc:37:b1:04:bc:05:91:ee:
                    34:f5:b9:ea:24:8d:89:34:04:7d:bb:59:25:c3:2c:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F2:F8:45:2F:D0:C7:FD:BC:41:C5:FE:E4:73:EC:D7:49:06:1B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8804114f-8537-3823-b993-38b0726a3e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:b3:fb:b9:68:de:9f:be:f0:93:84:d4:d3:9d:69:98:e4:
         29:9c:a8:33:43:e2:0e:25:48:7c:00:65:89:f7:7a:7e:09:8d:
         6e:4d:3b:79:e1:23:18:33:2d:d5:db:60:a2:21:f3:42:42:c4:
         5e:f4:bc:75:1c:eb:29:7c:79:9c:a4:49:1b:d9:34:bb:9e:ee:
         c3:8b:88:42:e2:c5:b0:7e:a3:67:e6:0a:92:3f:f6:0b:61:3d:
         87:75:8b:06:36:91:4a:80:95:0f:52:47:37:fb:29:66:38:54:
         36:f3:50:f3:a1:95:e9:8b:db:26:a6:48:80:11:96:76:73:f8:
         d0:a3:b0:42:3f:e3:6e:ab:17:39:dc:eb:63:64:f9:7d:27:55:
         97:b9:cf:8a:6f:7b:26:f3:a1:09:a3:70:d3:9f:9a:c3:65:2b:
         a7:5b:30:1d:72:d1:aa:35:d3:37:4c:f8:41:64:31:76:b1:12:
         d4:dc:da:39:a5:1c:5a:dd:34:1a:01:49:1c:8f:66:b9:27:84:
         e2:8a:eb:b8:d5:2f:e3:ef:57:ca:9b:34:64:53:90:0f:30:c5:
         9d:5e:dd:4d:0c:dc:e1:b0:b7:ba:15:13:ce:bd:e4:ee:13:4c:
         2f:31:9e:c0:b6:bf:ec:10:b5:11:1b:ec:3f:e5:59:90:82:d3:
         ef:ac:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----