Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f401feeb-3eb2-3606-8d08-862348c99df1.roa
File:                     f401feeb-3eb2-3606-8d08-862348c99df1.roa (raw, json)
Hash identifier:          7WYDvPN29ayADsgXYmdL7/3PlSxBEsaoqIVx+blwm3Y=
Subject key identifier:   D2:CC:1F:42:83:C9:67:F2:E6:B5:8B:10:86:FE:EA:EA:DE:BA:DE:2B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858436675010C29565B2CF5E13880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f401feeb-3eb2-3606-8d08-862348c99df1.roa
Signing time:             Sun 01 Oct 2023 01:00:23 +0000
ROA not before:           Sun 01 Oct 2023 01:00:23 +0000
ROA not after:            Sat 30 Dec 2023 02:00:23 +0000
asID:                     834
IP address blocks:        216.122.184.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:66:75:01:0c:29:56:5b:2c:f5:e1:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  1 01:00:23 2023 GMT
            Not After : Dec 30 02:00:23 2023 GMT
        Subject: CN=a4c34db1-e0f9-45d0-b386-1834ebb3b9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:4a:9c:a1:5a:13:0d:76:a2:86:68:57:11:
                    c3:53:da:ea:51:40:9e:0f:dc:d2:ca:96:72:77:2e:
                    53:48:14:03:98:1a:df:f0:1b:18:0f:80:03:5a:76:
                    c9:73:64:9f:8a:99:2c:02:8b:ed:f3:e4:5f:40:4a:
                    f2:19:bf:be:5c:a1:d0:04:ad:e0:0b:8b:f2:d9:10:
                    d0:3b:de:8c:f1:77:50:f0:97:ca:f1:44:66:95:a6:
                    1d:5a:73:b5:92:b2:ca:fa:8b:0b:f8:c0:c0:fa:05:
                    5a:1e:50:2c:07:2f:9c:52:86:d7:a2:5a:5e:88:05:
                    79:ae:89:df:43:81:75:6f:8e:40:55:96:79:b5:74:
                    67:ee:b8:f4:f9:34:44:0e:15:7f:26:eb:3e:9b:d7:
                    ea:d1:88:5e:a5:f8:9b:8b:21:2b:34:a5:be:28:0c:
                    08:a6:1a:44:23:0b:71:b9:29:76:4b:e3:46:3b:90:
                    2a:0a:e8:43:93:45:20:89:45:7a:10:a8:d1:ae:06:
                    9e:71:99:7b:91:86:a7:23:54:9f:ea:ae:07:a5:6d:
                    8c:d1:89:5e:95:73:88:40:db:d9:f8:23:7d:42:0e:
                    60:31:84:0c:33:11:df:b4:e8:d6:35:db:61:30:57:
                    a5:75:7d:09:ed:5e:fe:43:fc:a6:64:ef:ac:ed:99:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:1F:42:83:C9:67:F2:E6:B5:8B:10:86:FE:EA:EA:DE:BA:DE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f401feeb-3eb2-3606-8d08-862348c99df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:25:fe:3d:da:9d:97:ea:8f:50:f2:e3:76:69:ed:fd:b1:dc:
         7b:7f:f1:8b:9e:61:6d:42:75:4b:7d:89:13:40:06:55:d8:b8:
         1d:05:32:ee:34:68:81:97:f6:27:1c:48:f8:3b:d3:f0:6d:b5:
         1f:43:fe:44:10:af:89:84:13:bc:b1:26:15:7a:8c:b0:7c:b7:
         7a:a2:cd:5e:01:2c:b3:cc:f6:14:ce:1f:c7:f6:12:d0:4e:2a:
         8d:31:58:f1:18:96:8a:7c:03:a8:6e:9f:b7:ff:b6:84:59:05:
         cd:08:a1:34:9f:56:a4:3e:49:ff:23:86:48:3c:d8:2a:9f:ba:
         ae:6e:c0:35:9f:d6:16:07:93:c5:34:bb:e1:6e:7a:f3:93:47:
         e1:a1:62:37:12:e8:50:98:4c:57:2e:04:17:f9:0b:bc:ce:d1:
         24:ce:9c:5d:55:8d:07:9e:10:6d:04:ac:46:8e:d3:97:29:bf:
         fd:8d:ee:5b:44:85:fb:e9:8f:e9:36:f0:82:a3:41:e4:75:05:
         1e:ec:21:d0:f1:1c:57:5b:a6:b9:00:87:cf:b8:f0:9f:bc:97:
         e5:65:00:9a:50:9f:ac:b3:20:de:7d:51:b7:53:be:74:6e:5a:
         fa:32:f5:8a:d8:ae:3a:1d:2f:e9:ab:a7:ee:5e:14:99:48:c6:
         19:5a:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----