Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea563039-8fe6-37c3-96e7-dab1a4c94e6b.roa
File:                     ea563039-8fe6-37c3-96e7-dab1a4c94e6b.roa (raw, json)
Hash identifier:          RRAz4oDrnNMNKE4mKDYE9KicnjC1Y5dHq2+304VsVfI=
Subject key identifier:   7A:DA:1B:6E:A8:9D:D7:DE:C0:F3:3C:C1:67:40:3C:2E:E9:F1:6C:8F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285842CEB77EE8F912D7D70F88E100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea563039-8fe6-37c3-96e7-dab1a4c94e6b.roa
Signing time:             Mon 07 Aug 2023 16:31:30 +0000
ROA not before:           Mon 07 Aug 2023 16:31:30 +0000
ROA not after:            Sun 05 Nov 2023 17:31:30 +0000
asID:                     834
IP address blocks:        206.206.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:b7:7e:e8:f9:12:d7:d7:0f:88:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  7 16:31:30 2023 GMT
            Not After : Nov  5 17:31:30 2023 GMT
        Subject: CN=7312215c-e002-4953-9f04-d575941eabad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:57:8c:28:a3:b0:f8:a2:33:71:d9:fc:48:
                    7d:43:d7:c6:85:92:01:f2:75:e6:89:88:8c:51:fe:
                    5e:eb:1b:d9:e3:b7:26:12:99:32:ec:1c:02:7a:a8:
                    0c:ae:80:16:3f:af:c7:8a:31:62:1e:91:60:27:54:
                    c2:7b:b9:ad:1e:a8:67:a8:e7:b6:a8:5a:cc:ab:22:
                    6b:25:d2:1f:d2:7a:b3:88:5e:0e:0b:fb:21:c7:8e:
                    89:40:22:3e:86:55:10:eb:c0:7b:e8:96:1b:98:17:
                    7d:d8:36:62:58:0d:ea:db:ec:57:0f:37:8a:bf:c4:
                    3e:58:55:f2:35:eb:75:42:cc:a6:65:2f:f2:c9:1f:
                    7f:c5:0a:8f:b3:a2:9b:d3:fe:65:cc:59:f1:bd:93:
                    47:9e:ea:f6:44:6b:a8:7e:d0:c7:20:81:22:98:81:
                    ec:2c:13:e4:c8:57:3f:e2:9d:a6:26:4a:26:32:a9:
                    ac:4d:63:cb:dc:8b:8e:a8:f2:cc:21:83:e1:6f:8f:
                    7d:d9:9a:c0:1f:59:19:db:1c:46:92:70:77:6f:e4:
                    d8:20:66:51:a4:20:11:f7:78:ff:56:da:d6:b5:78:
                    0b:f3:88:ee:28:52:dc:e7:23:e8:2a:76:aa:e0:c9:
                    cd:0c:aa:84:d8:a5:09:e4:9f:c2:68:98:01:b0:df:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:1B:6E:A8:9D:D7:DE:C0:F3:3C:C1:67:40:3C:2E:E9:F1:6C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea563039-8fe6-37c3-96e7-dab1a4c94e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cf:95:f1:e9:98:83:10:2f:2b:c8:da:4a:26:4b:6d:75:a5:
         38:c3:59:0b:f8:ee:6c:47:6a:67:fc:27:54:ae:66:e5:69:f7:
         b5:e4:64:59:78:15:66:4d:b5:64:00:70:40:9c:ad:fe:5e:2a:
         bf:0f:a0:80:23:ce:e6:eb:58:9c:7f:43:d9:76:df:99:f6:4b:
         3b:a8:a3:dc:5e:6e:3d:63:ab:59:97:90:27:19:c3:eb:e8:80:
         57:3b:40:42:9d:d2:ba:ef:ac:5e:a1:2c:b1:77:a3:19:2a:63:
         32:78:ac:23:ef:98:6a:db:e7:40:0b:45:f5:25:e8:04:ca:f9:
         e1:b7:0e:a5:a7:ae:46:dd:62:04:31:6f:d0:da:8b:83:3b:c8:
         3f:8e:52:4b:71:17:ef:2e:a2:5c:67:43:d7:1f:a0:4d:a2:10:
         06:71:6d:9d:d0:98:e5:d3:37:65:1d:0c:54:57:7d:64:f8:20:
         31:13:e6:2c:cf:12:51:fb:df:f6:e4:9d:ee:2e:87:37:9e:b5:
         79:9a:95:ff:70:3c:51:08:62:19:6d:19:a1:62:1b:4b:34:5d:
         67:2b:b5:21:52:c5:c5:cc:53:a1:20:8b:f5:45:a5:4a:b6:41:
         fc:cd:85:2f:ce:c8:29:88:e5:a5:e9:9e:f6:52:dc:84:01:c8:
         bb:e4:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----