Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c6fef8e2-b93e-3c15-a249-a81073da0a0c.roa
File:                     c6fef8e2-b93e-3c15-a249-a81073da0a0c.roa (raw, json)
Hash identifier:          51CnKJ+D3rbNZW1/OlUfIRh2sOkNnfIOoeydabP0pnM=
Subject key identifier:   A2:57:FC:50:9F:7A:A8:F9:AC:0A:4E:4C:0F:34:86:7D:EA:B7:79:67
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E1B3CF85F8BB669966900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c6fef8e2-b93e-3c15-a249-a81073da0a0c.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 20 Jul 2023 18:55:58 +0000
asID:                     7018
IP address blocks:        206.206.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:1b:3c:f8:5f:8b:b6:69:96:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 20 18:55:58 2023 GMT
        Subject: CN=f88622ff-ff64-44b8-bfb9-e212b5226723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:71:3b:fa:05:44:24:67:0e:f6:cf:f8:b2:
                    fb:7e:12:54:ca:5a:7f:e0:22:9e:cd:9d:7e:79:51:
                    06:90:e9:61:a7:ee:c2:ad:cc:ba:3a:81:72:c2:0b:
                    04:91:2e:19:4e:5d:fd:b8:83:ba:1f:fb:bb:2a:7d:
                    d8:46:16:5c:c2:96:fa:32:a5:76:0b:cc:3c:37:03:
                    2e:9d:7a:60:d5:21:b0:d6:9e:bf:e3:77:17:5c:44:
                    9c:11:72:4e:27:cf:da:ac:3b:ff:b0:d7:fb:8b:55:
                    4a:3f:8f:16:2f:d3:d2:be:62:79:72:63:aa:b6:23:
                    f1:7a:12:ac:d2:65:22:e4:34:e3:30:72:a4:0d:ed:
                    1c:0d:13:62:e2:ee:36:c7:e4:b8:10:bd:11:c2:42:
                    29:6a:6c:f0:7d:e5:e9:c0:69:b8:eb:af:4c:f8:53:
                    e4:f2:4e:b5:26:e2:62:71:ae:66:bf:31:93:ad:3f:
                    f6:a1:f3:0b:b4:a2:26:0d:9a:ea:0f:64:c4:d6:e6:
                    c0:8b:be:86:5a:e7:f8:dc:1a:ca:89:57:89:52:7a:
                    fc:4b:72:13:b4:33:7c:8e:bb:d6:d5:59:d9:32:14:
                    97:0c:09:8a:51:3a:2f:4f:d1:d4:15:e3:0a:95:24:
                    b3:d2:d4:5c:af:65:79:f5:6d:3a:ea:68:25:a5:40:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:57:FC:50:9F:7A:A8:F9:AC:0A:4E:4C:0F:34:86:7D:EA:B7:79:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c6fef8e2-b93e-3c15-a249-a81073da0a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:71:b4:f4:a0:c1:3c:40:31:34:3f:68:42:a2:dc:b3:94:
         37:70:44:d4:37:57:73:42:c9:fa:34:68:5f:4b:49:11:9a:cd:
         a6:a4:69:2b:72:f2:de:da:0b:4d:ed:84:f4:17:a8:57:cf:2f:
         ff:e9:93:80:7b:40:a1:40:a0:4e:5d:7a:e4:5c:e2:9f:3b:d5:
         7d:f3:cd:46:51:66:45:51:e6:89:aa:c7:a6:08:25:b9:03:84:
         ed:51:5a:37:11:52:52:62:a7:21:f9:e8:0c:d8:d0:28:d7:e8:
         bc:9e:84:9c:21:b6:ea:63:78:e1:e2:ea:e8:4e:06:6e:00:14:
         0f:3a:21:2e:ff:bc:cd:5d:bf:bf:47:78:48:56:15:5c:52:65:
         d3:5f:9c:4d:d4:40:9a:32:b9:14:e0:32:12:dc:ad:b4:37:c5:
         31:17:3e:c2:21:fe:bc:2e:67:53:83:80:3b:eb:71:35:2b:45:
         b7:2a:de:b6:93:ec:bd:fe:6c:64:00:21:2b:7d:7e:85:24:69:
         cf:e4:0f:0b:32:5c:50:3d:bd:90:a6:1b:c7:72:05:29:e9:0f:
         8b:d6:33:29:bf:20:04:06:45:87:74:0f:6c:3e:3d:44:2f:c1:
         63:83:42:56:ed:4c:94:7f:d6:26:0d:c1:c2:6f:92:7f:48:5e:
         cd:79:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----