Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e97b5650-8cda-30f7-be0a-35720afcb0f5.roa
File:                     e97b5650-8cda-30f7-be0a-35720afcb0f5.roa (raw, json)
Hash identifier:          kfJs7MkFx48B8tlh7TV8totLes1LoAtozS41TXLrb+o=
Subject key identifier:   86:8F:EB:5C:06:FD:E3:AF:A9:13:E2:93:33:85:88:55:9A:9C:9A:3F
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285842ADF62D6A09E095296A196E70
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e97b5650-8cda-30f7-be0a-35720afcb0f5.roa
Signing time:             Wed 26 Jul 2023 22:56:07 +0000
ROA not before:           Wed 26 Jul 2023 22:56:07 +0000
ROA not after:            Tue 24 Oct 2023 22:56:07 +0000
asID:                     398436
IP address blocks:        23.234.148.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ad:f6:2d:6a:09:e0:95:29:6a:19:6e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul 26 22:56:07 2023 GMT
            Not After : Oct 24 22:56:07 2023 GMT
        Subject: CN=21c374e5-20d5-4803-8777-6d015ef73f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:2c:8e:ef:64:b5:0a:43:9f:a8:e7:85:9c:
                    95:ed:b5:fa:ef:7a:b0:54:3b:9e:3f:40:3c:23:fc:
                    ee:cf:9c:c4:6f:25:e4:43:ff:9c:78:1b:e7:4b:4d:
                    16:48:3d:9e:05:c3:74:a9:0e:4b:c7:03:70:72:fc:
                    48:44:21:3c:37:c5:bc:47:c3:4c:3b:0e:c8:e5:a2:
                    e4:c9:32:a2:38:57:68:d6:79:f6:b4:0d:74:73:9a:
                    e3:37:dd:ab:00:e5:45:cd:0d:7b:89:d9:86:b2:38:
                    7c:7a:c6:c6:1f:14:53:aa:50:56:16:57:f7:24:6a:
                    5b:e6:1c:12:da:c0:ab:1c:83:d4:36:f9:3a:95:0c:
                    d6:f7:5f:96:a6:30:65:6e:19:f0:1c:33:64:5b:56:
                    bb:6d:88:86:1e:d7:bf:c2:af:28:14:b4:5a:25:77:
                    7d:11:1f:a0:29:ad:80:2f:5e:19:07:c2:22:13:b4:
                    62:1f:10:b0:90:c1:e1:1f:03:12:32:47:f4:57:3b:
                    10:ae:71:b3:34:a2:a0:e7:b7:c0:37:93:83:3a:b7:
                    5f:fb:47:c8:15:39:76:60:84:21:62:dd:6a:e9:c5:
                    cd:e5:80:79:7a:83:1e:7c:89:46:09:b8:f3:73:e1:
                    bc:1e:8e:34:65:7a:70:ad:df:3e:0c:a4:a1:fb:9a:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8F:EB:5C:06:FD:E3:AF:A9:13:E2:93:33:85:88:55:9A:9C:9A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e97b5650-8cda-30f7-be0a-35720afcb0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:0a:fc:da:5c:c1:34:6b:50:b1:6d:c5:d2:44:b0:21:19:
         b0:d0:cb:8b:e5:f9:11:b0:ac:bc:9c:d0:74:4b:3e:27:ed:98:
         1b:46:17:96:a3:c5:5d:f7:05:74:8d:6c:a5:5e:7b:3f:f0:d5:
         36:e9:f6:79:2b:a2:36:aa:7e:07:16:ec:3b:31:0f:45:89:70:
         3c:58:c6:73:0c:01:42:74:69:a8:db:4d:c2:08:74:75:6d:7e:
         94:66:40:5c:31:64:cd:67:ea:3f:d3:52:24:1a:d5:d2:d3:86:
         1c:af:a9:d3:e7:f2:19:2b:b2:da:fe:a8:ca:ef:1e:9b:05:e9:
         0a:72:cd:7d:2c:cf:6a:57:8c:a9:5c:d4:22:4d:4b:53:5f:57:
         ec:84:90:cd:f3:f6:e3:69:7a:37:6e:85:d2:4a:75:6a:e8:08:
         f2:ba:f4:f7:ff:65:b8:7c:30:c0:7d:94:7f:b6:dc:bc:e5:8f:
         28:c3:a9:ff:c3:b3:a0:00:46:d2:bf:27:b8:54:bf:ba:6a:83:
         a4:63:3a:da:fd:d6:b4:4e:93:e7:7a:d3:e1:35:be:0c:c1:25:
         a5:9b:94:55:b5:77:b3:21:c4:e4:1c:e3:99:92:87:aa:88:0c:
         72:a1:d1:41:4f:96:8f:a3:29:79:39:f3:d5:e0:f1:49:4f:1b:
         b5:e8:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----