Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa
File:                     66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa (raw, json)
Hash identifier:          AgRxN+RDFXkYLRpeSlIdlDX/iXb7HEaM7aJH+awloRs=
Subject key identifier:   34:D2:D4:9A:0F:59:DC:07:90:C5:DB:FE:FE:03:21:8D:C7:33:27:E4
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584242B8843BC4C7C77156B5BD00
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa
Signing time:             Sun 18 Jun 2023 13:00:19 +0000
ROA not before:           Sun 18 Jun 2023 13:00:19 +0000
ROA not after:            Sat 16 Sep 2023 13:00:19 +0000
asID:                     399150
IP address blocks:        23.234.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:42:b8:84:3b:c4:c7:c7:71:56:b5:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jun 18 13:00:19 2023 GMT
            Not After : Sep 16 13:00:19 2023 GMT
        Subject: CN=a90fd1c5-303f-4462-a790-0a4b89c650a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:91:8a:c6:70:2c:ae:cd:a1:0f:a5:cb:3d:
                    c7:ca:41:17:59:35:f6:6d:2a:fe:5b:b9:7b:6f:b8:
                    c9:b2:1d:8e:22:93:9d:69:b8:2e:73:6e:1d:98:e5:
                    8d:64:94:08:80:9d:c3:5a:f6:48:ce:b9:6d:7d:6d:
                    73:cb:98:ae:92:be:27:9e:1f:af:0d:63:aa:f3:7e:
                    bb:7d:ab:02:ac:ce:e2:37:88:e0:67:12:a9:ba:bb:
                    77:66:eb:d2:d7:7d:2b:86:5c:86:e3:17:57:e5:03:
                    ae:6d:6b:be:2d:c7:bd:38:4e:d2:3a:8e:45:e2:d2:
                    0d:4b:5e:02:f6:90:e1:4f:a9:0b:52:d8:64:84:2e:
                    00:93:36:61:a2:0d:fe:6d:17:9a:4a:78:96:9f:ae:
                    e3:5e:e3:41:cc:0a:12:bf:ba:12:01:0b:76:d2:53:
                    ca:ca:c8:ce:18:de:83:80:90:4e:11:0a:ae:be:b7:
                    69:e9:69:eb:ae:2b:3b:44:4c:39:71:40:ce:36:a0:
                    43:6a:40:9d:a6:5c:c2:aa:8d:f1:d5:dd:99:97:06:
                    21:30:77:f4:f6:0d:37:ec:83:c5:3b:8c:63:09:9f:
                    f7:ff:11:01:da:71:67:5f:b6:0a:2d:bf:bc:4e:60:
                    44:bc:f3:ba:9c:6a:42:af:56:c4:68:b8:bc:cb:98:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D2:D4:9A:0F:59:DC:07:90:C5:DB:FE:FE:03:21:8D:C7:33:27:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:df:0c:4a:ff:31:8b:f5:ec:35:44:98:2e:48:55:8f:76:70:
         32:b5:cf:32:8a:5a:01:29:d5:bd:60:95:d3:fd:63:f7:ed:d3:
         0a:25:2b:59:52:c4:a8:4a:c1:25:14:bb:3d:40:cd:22:f1:f7:
         bc:a2:7b:06:ce:a6:13:37:a6:52:b6:b6:71:ac:39:34:4b:18:
         5a:fa:01:e3:92:94:f7:e4:29:c0:c9:a7:08:00:e0:ad:55:7f:
         9d:c1:a6:41:0d:76:11:75:03:f8:a6:86:db:e5:7e:38:ed:65:
         1f:88:45:01:e4:93:2b:6f:3d:c9:f0:e1:f3:7d:f2:a6:77:18:
         2f:6b:ac:36:85:d4:34:c0:f2:1b:5b:c6:d5:9d:1f:75:a1:ad:
         cb:7e:e1:4c:37:ee:9c:c9:b3:06:3f:82:fa:a6:07:a5:cd:17:
         9d:97:4a:97:61:30:a0:9e:cb:b4:e7:4c:01:f8:39:5d:a5:52:
         72:95:0e:68:b7:0b:37:66:51:f8:14:ca:1c:3d:2c:d9:74:f8:
         6c:b6:b9:42:72:03:86:89:e8:8e:2f:bc:81:9e:a0:51:99:9f:
         b2:36:2d:a5:36:5e:85:ed:69:26:68:98:91:70:78:e6:91:6f:
         a7:ab:80:60:de:48:c9:4f:4f:89:cd:80:df:b7:10:1b:d3:12:
         93:f2:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----