Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/c6937995-a78d-3501-af9b-fe4921638979.roa
File:                     c6937995-a78d-3501-af9b-fe4921638979.roa (raw, json)
Hash identifier:          AJqztXH31Q2Vs83QLSpc2+4CIUT6Ndit8IpMpjkqvy8=
Subject key identifier:   6E:67:0B:D1:87:D0:79:A0:74:82:87:FA:17:A2:10:93:7F:80:27:EC
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285843587F99B6EBDAF7BEFB56DF80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/c6937995-a78d-3501-af9b-fe4921638979.roa
Signing time:             Tue 26 Sep 2023 01:00:22 +0000
ROA not before:           Tue 26 Sep 2023 01:00:22 +0000
ROA not after:            Mon 25 Dec 2023 02:00:22 +0000
asID:                     61317
IP address blocks:        172.111.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:58:7f:99:b6:eb:da:f7:be:fb:56:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 26 01:00:22 2023 GMT
            Not After : Dec 25 02:00:22 2023 GMT
        Subject: CN=5a4c897e-c700-4671-b2a3-96e8ca090f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:64:f2:bf:69:65:0d:22:96:72:94:da:ff:
                    d2:6d:3a:3d:3e:38:6b:73:6f:36:b4:16:4e:cd:23:
                    7f:2c:1a:78:f1:22:d2:1b:41:dd:cc:bf:1e:d4:f1:
                    47:d3:dc:d7:c8:4a:21:57:9e:99:f5:02:d1:78:9e:
                    bb:43:be:1e:78:17:d5:a6:09:9d:e0:7d:e4:20:7f:
                    bd:cd:e9:21:99:c7:17:d9:71:46:5e:15:91:72:54:
                    c6:b0:7c:f3:52:15:8a:9d:3f:cd:94:4f:ec:b7:e8:
                    2c:9a:62:1d:24:f5:81:86:54:b6:35:55:ce:ef:20:
                    3b:1d:02:11:89:d6:4f:35:27:0c:13:9e:55:be:80:
                    7a:8e:6f:5e:e3:7e:9c:bd:00:1b:b2:6e:d0:c5:96:
                    a6:f7:f9:47:08:a7:fb:51:08:4f:ee:c9:8b:6f:54:
                    f5:7d:44:bb:cf:81:c0:49:42:50:fb:80:d8:e9:29:
                    ce:bd:9e:28:21:74:18:5e:3d:37:24:81:43:c4:9c:
                    40:17:e4:81:85:bb:16:f3:e9:f5:4b:1c:a5:d1:d8:
                    0f:d7:08:47:35:c4:6d:0d:35:fc:80:b5:b8:92:12:
                    2e:9c:9f:23:d5:7b:68:7a:6e:9f:e2:35:63:57:1b:
                    2e:36:c3:97:af:41:74:1f:30:b8:64:4f:e9:da:04:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:67:0B:D1:87:D0:79:A0:74:82:87:FA:17:A2:10:93:7F:80:27:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/c6937995-a78d-3501-af9b-fe4921638979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:d0:f8:25:70:6f:8e:39:08:56:d1:f5:56:ea:9d:c8:8d:
         9e:61:fb:de:5d:48:b0:f4:f8:f3:a7:51:c1:fe:12:e2:87:07:
         3e:30:10:42:57:3a:02:5c:29:e1:fa:1a:40:c0:76:29:27:84:
         1c:37:e3:de:7f:27:91:2a:f8:0b:86:2a:a7:7d:40:6e:39:61:
         62:28:1e:35:35:e6:5a:f3:fe:c8:c3:3c:24:bd:07:52:f2:13:
         c9:17:39:7a:f7:97:4f:5b:d2:a3:ba:7c:d5:57:d0:74:68:4a:
         e1:e8:95:b8:ff:ac:06:cf:c1:f0:03:01:b6:a6:7b:ac:b3:25:
         f8:91:ff:75:bd:6a:94:8d:9c:b9:2b:da:d8:12:e5:ab:53:1e:
         ae:72:e2:50:8b:22:ea:e9:30:3e:96:ce:73:25:ad:a4:ce:ef:
         35:68:72:c6:b2:d6:45:c2:4b:78:83:51:23:22:f1:8b:33:34:
         fc:11:16:58:d8:2f:79:a7:2c:f7:e3:9a:47:9c:c6:33:86:74:
         61:35:89:96:a7:36:e2:09:82:58:04:df:29:f5:56:da:15:87:
         b0:32:12:f3:1f:cb:00:6d:cc:9e:35:66:58:f9:45:73:c6:fb:
         ca:60:eb:76:e5:9f:8e:f7:59:a5:fc:19:df:46:97:15:43:5b:
         44:fd:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----