Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e8cccbd7-b6bd-3ec3-a442-4660cf18814e.roa
File:                     e8cccbd7-b6bd-3ec3-a442-4660cf18814e.roa (raw, json)
Hash identifier:          jViDILNX5Bq5vrBgcMFIXJSYa4qQlUi/U8GNKg2t/dc=
Subject key identifier:   DA:B5:FB:2C:8C:87:33:54:A9:E2:5C:EB:0C:D2:4E:FB:03:62:8E:EA
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328583EA7984B73E924F77304A53A40
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e8cccbd7-b6bd-3ec3-a442-4660cf18814e.roa
Signing time:             Fri 31 Dec 2021 12:00:00 +0000
ROA not before:           Fri 31 Dec 2021 12:00:00 +0000
ROA not after:            Sun 31 Dec 2023 05:00:00 +0000
asID:                     1239
IP address blocks:        23.234.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a7:98:4b:73:e9:24:f7:73:04:a5:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Dec 31 12:00:00 2021 GMT
            Not After : Dec 31 05:00:00 2023 GMT
        Subject: CN=3eb43066-ad01-4b3a-9999-2af393bdc6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:de:77:64:a0:f7:be:e2:76:55:78:fb:51:
                    48:56:47:cc:cd:07:34:69:c9:19:48:55:23:11:4a:
                    ad:06:aa:dc:1e:23:db:96:07:98:4b:e1:e2:cb:61:
                    78:db:11:74:3a:91:11:98:02:b7:ca:fa:1b:27:7e:
                    ad:89:01:e5:7b:6a:b8:1e:c9:30:10:77:79:3c:df:
                    fe:b1:ea:dc:29:5d:79:be:85:22:64:4a:e4:01:41:
                    5d:66:7b:10:46:ae:2a:bc:fa:4e:92:c5:e8:c2:0f:
                    b9:47:86:80:a7:6f:b1:7a:b7:f2:41:f8:f7:a5:e9:
                    57:5d:35:83:c3:a6:73:b0:eb:e7:ea:9c:29:47:b1:
                    56:bf:97:83:9d:f5:dc:ec:77:42:9d:4a:90:33:8d:
                    02:ce:08:ca:69:86:e2:79:86:06:e8:5c:ae:fc:52:
                    47:31:01:ef:85:ba:38:0d:0b:0a:7b:60:d0:b6:d2:
                    23:df:10:77:27:8f:95:5f:ad:b5:b4:1c:d6:2e:0c:
                    fc:ae:ee:51:65:d5:ef:dc:41:61:31:4a:8a:61:09:
                    02:35:78:ba:60:39:70:46:f0:cc:9d:42:4d:78:58:
                    1a:45:4f:4e:bc:95:79:fb:fe:23:e5:2d:ae:ce:cf:
                    c9:79:eb:7b:22:99:d2:50:c6:38:15:1b:90:30:27:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B5:FB:2C:8C:87:33:54:A9:E2:5C:EB:0C:D2:4E:FB:03:62:8E:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e8cccbd7-b6bd-3ec3-a442-4660cf18814e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:ae:1f:6f:ca:88:6f:c2:86:20:a9:ad:75:7b:64:c2:a4:
         10:72:03:21:64:f7:2f:a4:89:41:2d:cd:5f:f5:26:e2:a1:62:
         d9:c9:5c:f5:f6:3d:c6:6d:87:fe:ab:79:27:a7:fc:f2:23:43:
         e9:6d:76:12:4e:05:42:29:51:28:07:64:d2:59:18:fe:7e:1c:
         25:c4:7d:1a:ec:8c:8c:58:f1:9f:da:12:65:d9:37:73:f3:64:
         9e:37:2f:0c:4f:ab:3b:8a:9f:b0:e8:6e:05:11:96:8f:90:51:
         6d:0c:0e:32:ef:d1:9c:1a:29:02:93:5f:7b:c0:b0:8b:a7:44:
         f7:06:54:18:8c:93:ff:91:bf:d9:f5:a6:ee:5c:02:4c:0f:ba:
         3a:28:e0:96:43:74:9a:c3:7d:0f:eb:75:ce:e0:36:c8:61:cf:
         9b:81:d0:a8:36:30:a7:47:2b:76:be:1c:4d:b8:ce:5c:49:92:
         1b:8b:bb:78:8d:60:83:14:24:ff:30:1d:a1:ef:39:b6:63:9c:
         5e:c6:96:fb:2d:45:7c:08:6e:4b:dd:85:97:bc:c5:31:ba:a7:
         98:cf:80:7d:78:69:5f:45:26:55:7a:17:e1:70:1e:28:0a:14:
         c8:c8:86:11:59:1a:ca:2f:4b:b5:8e:f8:83:08:fd:12:48:a5:
         8a:03:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----