Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d7a75453-0cbe-3734-a10f-98c67c0045ba.roa
File:                     d7a75453-0cbe-3734-a10f-98c67c0045ba.roa (raw, json)
Hash identifier:          oLkKeP+0slnT2UyOil5iuJ1DKeT1Ummj17fgfZTfwQM=
Subject key identifier:   D0:2E:A9:0C:88:39:25:8C:BE:98:A2:E3:6A:2F:A6:57:22:EF:6A:F4
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858433004B8829E2404FB94682580
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d7a75453-0cbe-3734-a10f-98c67c0045ba.roa
Signing time:             Mon 11 Sep 2023 13:00:25 +0000
ROA not before:           Mon 11 Sep 2023 13:00:25 +0000
ROA not after:            Sun 10 Dec 2023 14:00:25 +0000
asID:                     62164
IP address blocks:        104.156.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:04:b8:82:9e:24:04:fb:94:68:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 11 13:00:25 2023 GMT
            Not After : Dec 10 14:00:25 2023 GMT
        Subject: CN=8d63f05b-51c1-4566-be03-bf798768efba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:90:91:f9:56:b2:15:3e:99:e0:ab:3a:ed:
                    dc:df:10:f0:ff:0a:19:4f:7c:aa:b7:24:b6:e0:7e:
                    c9:41:6d:3c:5d:97:5d:23:7d:99:54:40:1f:73:7e:
                    a7:21:e6:4a:ca:15:46:96:e3:32:0c:b8:13:fe:03:
                    20:57:80:ef:ce:f1:7d:08:0a:e6:32:9d:78:20:c5:
                    11:8f:1c:20:be:f6:8b:2e:5c:2a:ce:2e:94:c5:69:
                    53:5c:d9:c3:9f:e3:99:ec:f2:fe:a7:6f:6e:0a:83:
                    8b:32:63:56:04:42:99:0b:7a:8c:51:26:42:0a:66:
                    09:e0:ca:76:a6:66:8c:ab:7a:6c:e2:cd:79:0d:8c:
                    b9:7f:96:0e:cf:07:d8:48:eb:24:17:19:e8:a0:63:
                    eb:ca:d5:6c:ca:4e:4d:3e:28:98:f0:00:81:de:5d:
                    7e:7a:b3:cc:19:a3:2c:ad:dc:d7:f4:e7:9e:2e:40:
                    49:77:5d:79:f4:eb:e4:5a:26:b5:f2:ef:75:f2:68:
                    2c:2a:c4:7b:fe:ad:d5:cf:81:45:48:14:43:36:48:
                    90:21:06:d1:42:e3:47:54:34:50:6e:21:ab:67:36:
                    52:61:10:a7:31:8b:45:4e:8b:9e:df:d6:c6:6f:a4:
                    9a:0b:d7:90:7c:38:c6:36:76:e7:6a:8e:f4:c2:5b:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:A9:0C:88:39:25:8C:BE:98:A2:E3:6A:2F:A6:57:22:EF:6A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d7a75453-0cbe-3734-a10f-98c67c0045ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:7d:20:ee:a0:49:36:2b:ea:88:31:e1:21:b5:ee:17:c5:
         12:07:b6:39:45:26:be:95:61:82:44:cc:95:a8:ee:fe:d0:1e:
         69:54:eb:42:a9:26:c5:23:cb:11:5a:88:99:39:5e:2b:4b:29:
         aa:a8:c9:d8:48:67:5c:ee:08:e9:df:8e:4b:8b:ed:84:99:e1:
         43:9f:3f:f0:43:9f:25:b7:1b:4e:e9:bf:75:2b:86:65:eb:79:
         65:d3:b3:e4:ac:e9:72:97:79:7f:34:75:d4:fd:4d:0c:86:e6:
         e4:2c:46:16:6a:0a:e0:00:4a:35:4e:8e:af:69:32:1f:09:15:
         0f:77:30:fd:8b:f4:e1:ed:04:a1:87:9a:2c:b0:44:50:2d:82:
         78:b0:6c:54:f8:70:3e:2d:dd:74:81:d4:0d:1b:4e:dc:04:99:
         54:38:69:fb:5f:8c:cc:77:bd:63:b7:68:31:06:c0:7a:f0:44:
         18:d0:02:65:e1:14:ee:8d:2c:25:52:10:55:1c:df:18:6b:22:
         17:69:7a:de:33:59:d7:5c:b9:28:49:af:b8:5a:ff:0e:99:fe:
         7d:9b:87:ec:07:c2:46:0b:2b:9d:1d:b1:05:4b:d3:9a:53:c2:
         1b:d9:f7:3a:68:d2:01:6a:41:bb:36:10:e2:ae:c3:51:a5:a4:
         30:b8:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----