Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9b6d3f83-3b25-3b83-8809-f6402217a7cd.roa
File:                     9b6d3f83-3b25-3b83-8809-f6402217a7cd.roa (raw, json)
Hash identifier:          LSjE5fP1RcDwnlAd6F2T8WCxAiITqUpemTI1hsV/zoY=
Subject key identifier:   CF:47:C1:32:C9:15:C0:DB:94:54:4D:CA:DC:EA:61:75:38:53:ED:1F
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285843F91A330DA3FCB9F725617CC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9b6d3f83-3b25-3b83-8809-f6402217a7cd.roa
Signing time:             Wed 22 Nov 2023 13:41:16 +0000
ROA not before:           Wed 22 Nov 2023 13:41:16 +0000
ROA not after:            Tue 20 Feb 2024 13:41:16 +0000
asID:                     208287
IP address blocks:        172.111.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f9:1a:33:0d:a3:fc:b9:f7:25:61:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Nov 22 13:41:16 2023 GMT
            Not After : Feb 20 13:41:16 2024 GMT
        Subject: CN=7ec425b2-1b9d-47ad-a8f0-702de386370e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:e6:90:41:fb:26:a2:91:0b:97:ca:4d:71:
                    f0:a9:b1:ef:7a:d9:18:0e:75:c3:4b:e3:1f:1a:de:
                    07:1f:0c:ba:f4:24:f5:fd:15:ce:29:61:57:35:d5:
                    e0:96:6f:9b:3e:ec:51:9a:cc:64:67:db:63:9b:71:
                    ca:01:11:65:5f:55:04:b9:cd:74:3e:f7:fa:d8:b6:
                    3b:e0:01:81:8d:7e:25:35:19:bd:6e:5e:ab:9f:76:
                    6b:6b:54:ad:85:b1:b7:c7:71:b0:af:a8:18:a4:7f:
                    35:4d:dd:bf:56:1c:c1:56:f8:54:00:ce:78:57:ff:
                    94:13:aa:b2:68:88:4a:03:29:d4:ed:8f:4a:c5:67:
                    1f:03:7a:48:ba:0a:fa:0c:ad:25:ed:c8:48:a5:14:
                    d5:fe:0f:a4:60:0e:79:da:c6:bf:a6:34:41:f0:2e:
                    24:01:d9:1b:e5:86:95:6f:4f:50:7e:5d:ae:5f:77:
                    82:75:d2:1d:8e:a8:54:d0:b0:91:3f:78:65:15:2c:
                    24:86:3d:00:7a:62:1c:90:00:0e:0a:74:8a:0c:3a:
                    e7:fb:51:41:3e:a4:16:72:91:a9:76:84:5a:ff:03:
                    16:f9:80:28:55:aa:77:73:77:03:d1:52:3b:05:5c:
                    64:d5:9e:74:fa:f5:be:98:70:f4:17:93:33:e2:1c:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:47:C1:32:C9:15:C0:DB:94:54:4D:CA:DC:EA:61:75:38:53:ED:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9b6d3f83-3b25-3b83-8809-f6402217a7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a8:a4:62:1f:70:87:23:e8:92:bd:6b:91:c9:93:34:e4:23:
         c3:71:b6:b6:bd:1d:40:7e:5d:91:33:ee:5c:d5:76:a5:d1:7a:
         64:27:f3:53:f9:36:e6:ff:2a:fd:9c:f1:a2:96:37:5b:38:65:
         3d:e9:16:27:5e:a4:36:80:98:d8:f6:03:a8:e6:be:eb:9f:67:
         d0:40:9e:e1:a7:bf:aa:83:5c:6d:09:25:13:be:e2:a8:22:80:
         51:83:90:2d:e1:88:63:02:72:e1:08:97:db:74:0f:96:be:68:
         37:90:5c:32:9f:1c:fc:ba:ec:2c:fa:bd:82:7f:13:ba:5d:2e:
         af:cb:99:46:c8:eb:fd:f9:d8:01:34:f8:75:a3:3e:c2:c6:a8:
         b3:d5:f6:71:7c:aa:a6:02:1d:ac:6a:4b:1d:8f:30:da:5c:21:
         84:73:96:de:0a:97:c7:2a:57:ad:58:97:d8:c6:07:1e:29:d4:
         85:87:97:ee:b5:8e:b5:8f:7f:55:9f:5a:f5:ab:9f:d7:4a:10:
         cb:fd:f3:1f:00:7a:07:a4:a3:d2:36:c4:08:71:26:72:b0:59:
         7c:b4:fb:aa:f3:3c:08:6e:09:87:53:1c:a0:b8:74:97:d4:b6:
         81:62:4e:32:8f:97:dc:99:3c:6b:62:af:e4:a6:86:ad:5b:31:
         96:d9:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----