Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/23569e6f-ab1c-319a-915a-f5ec6ee4012d.roa
File:                     23569e6f-ab1c-319a-915a-f5ec6ee4012d.roa (raw, json)
Hash identifier:          liHNS1QEPFAtm5pu709Y00M9gKd2fMIPAUJ0k9frJzM=
Subject key identifier:   33:59:9D:DB:46:9F:16:6E:FC:8A:51:6F:F5:AF:33:2F:73:7C:AD:5D
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F43285841E46CE8338FF354EC1E71D280
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/23569e6f-ab1c-319a-915a-f5ec6ee4012d.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 10 Aug 2023 18:00:15 +0000
asID:                     7922
IP address blocks:        142.214.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:e8:33:8f:f3:54:ec:1e:71:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug 10 18:00:15 2023 GMT
        Subject: CN=3d03e8fe-ffd3-4937-8ec6-a462e37eb274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:97:5d:50:7f:c9:8b:50:29:69:bb:aa:c9:
                    97:d9:46:bc:33:59:89:8c:d1:4c:2e:99:91:45:31:
                    74:95:fc:8c:1c:a9:30:4a:d5:93:85:14:9e:fe:7e:
                    27:1e:82:75:03:56:fb:9a:2a:4e:0a:0c:01:05:5b:
                    25:7d:38:91:70:ee:46:af:bf:1a:85:ae:88:27:35:
                    6b:a7:0b:a3:8a:f9:96:0e:96:d5:8f:c8:28:4b:d8:
                    3b:fe:0d:5a:bd:f5:a6:61:14:dd:15:16:7a:4a:10:
                    5f:5c:d9:9d:c7:0e:41:2f:ef:0a:cf:0a:33:43:e5:
                    7d:cf:96:e1:f1:f3:81:3d:c0:59:14:8e:54:e4:4b:
                    1f:21:c6:3e:24:9a:7a:4a:46:94:ed:a0:aa:83:39:
                    fc:f5:97:3b:83:44:13:c3:27:f8:37:ac:22:00:1e:
                    b8:43:14:99:ae:84:56:82:ac:bc:b7:de:20:4b:d9:
                    1e:e5:2a:4d:e4:53:22:7c:2a:a6:00:42:08:f7:7a:
                    88:97:d9:02:b3:e0:91:ff:5d:4a:f4:d0:d1:3d:6d:
                    f3:01:1e:cf:fd:3e:6f:b9:57:fb:02:21:d2:bd:aa:
                    a0:ff:41:0c:9e:b3:40:4b:29:ca:1b:4f:53:a2:bd:
                    20:bb:08:85:bc:9f:bf:4d:f5:52:67:d1:c6:5c:5f:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:9D:DB:46:9F:16:6E:FC:8A:51:6F:F5:AF:33:2F:73:7C:AD:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/23569e6f-ab1c-319a-915a-f5ec6ee4012d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:c4:38:13:09:bb:f1:95:0d:cc:91:34:0c:41:cc:1e:1c:
         2f:aa:bd:70:5d:11:14:25:52:8b:50:0e:06:c9:f3:1e:71:36:
         ac:27:b6:70:1b:fe:da:b8:a8:9b:ee:9d:1e:f0:5c:cc:39:3d:
         f2:03:33:89:1c:c6:cf:8f:09:f2:e2:ea:1c:45:a6:ec:62:28:
         c8:92:12:eb:53:66:34:55:c1:c9:73:90:d6:cd:60:aa:39:7d:
         8a:16:5e:9a:f4:bc:aa:49:bf:84:e9:cb:dc:a2:c6:99:f3:89:
         77:d5:56:0b:b4:af:51:15:9a:f2:49:13:90:f4:79:52:30:28:
         a4:a8:e8:f4:76:61:88:1e:6e:39:56:80:3b:b1:65:8e:8b:4d:
         0f:33:18:ad:3b:d9:d5:88:b6:6a:2f:db:48:a0:a9:61:32:5a:
         30:34:2f:b4:aa:db:06:42:6a:1c:eb:80:3d:94:ed:ae:e5:cf:
         bb:ec:18:db:6e:09:2b:68:de:e5:d8:77:32:a1:87:8c:61:64:
         90:e6:41:a9:e7:07:7f:40:1d:f9:03:b1:24:96:61:f1:8f:67:
         b7:ab:90:b5:cd:b3:76:aa:89:4c:4f:6c:9b:c6:f8:8f:90:cc:
         c9:19:41:a3:3d:9a:1a:9b:64:46:c4:f8:b4:d0:1a:f6:40:27:
         a9:c8:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----