Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f4a70371-08c0-3f07-8852-686a0099ae68.roa
File:                     f4a70371-08c0-3f07-8852-686a0099ae68.roa (raw, json)
Hash identifier:          APkc7Y02CysrEJ2WwZ1JNi8VciebeultE9cVpNUCBGc=
Subject key identifier:   2F:2A:1C:A4:EB:A4:E4:58:0F:42:C7:9B:FF:A1:48:D5:07:1E:DF:84
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F43285841AC337F2E2B8FCEFFDC345900
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f4a70371-08c0-3f07-8852-686a0099ae68.roa
Signing time:             Tue 25 Apr 2023 14:24:02 +0000
ROA not before:           Tue 25 Apr 2023 14:24:02 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     55244
IP address blocks:        192.16.78.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ac:33:7f:2e:2b:8f:ce:ff:dc:34:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Apr 25 14:24:02 2023 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=488edcab-531c-4c1e-9caa-b41286e5b0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:fb:64:66:5b:48:da:d1:3e:bd:6c:f5:57:
                    50:d7:d4:cf:29:fd:f9:89:05:0c:7e:b8:eb:5e:00:
                    e0:1b:29:59:82:86:05:9a:4a:a7:f8:7b:05:3f:b8:
                    b2:87:83:a3:09:66:a3:79:3b:8c:cd:5c:99:12:ba:
                    f1:66:29:1a:d8:70:79:ca:be:20:d6:43:39:de:0e:
                    90:08:8f:cf:1d:f0:ab:ad:a4:08:a2:cc:ee:3a:3f:
                    db:ea:2b:07:1b:d2:24:c5:91:63:0c:68:a2:b9:76:
                    da:c6:94:f7:81:f0:92:bf:87:c1:68:59:42:ea:b7:
                    d3:4a:98:eb:bb:d8:ee:b5:09:a7:9a:44:7b:e6:8c:
                    d2:13:cd:6f:f9:5d:b8:71:48:47:b7:c2:71:27:b7:
                    22:c6:3f:51:35:9d:f6:19:cb:ba:19:9e:a7:f8:24:
                    7f:67:4a:c9:8e:54:ae:c6:98:1f:3a:b0:69:71:de:
                    c6:05:14:47:60:0b:89:07:f0:1f:ee:3b:b0:49:ca:
                    fe:03:51:17:a1:24:59:d6:dd:a5:a3:b3:b3:ca:28:
                    7b:55:91:b7:fe:37:4b:b0:24:fe:26:ed:b3:fd:47:
                    07:e5:22:2a:20:6e:a8:6e:47:96:70:68:fe:fe:e1:
                    2b:1b:05:93:94:6d:7b:f5:63:eb:52:a1:c6:74:72:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2A:1C:A4:EB:A4:E4:58:0F:42:C7:9B:FF:A1:48:D5:07:1E:DF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f4a70371-08c0-3f07-8852-686a0099ae68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:e0:f7:00:f2:c7:54:27:a8:32:55:0a:05:14:83:b2:dc:
         6e:5a:56:6f:c5:5b:1e:b2:cc:c8:db:e6:e6:93:4e:82:52:50:
         58:8e:a3:17:23:18:82:09:31:40:7f:ca:cb:ef:1f:2b:b4:2d:
         77:37:95:91:d9:28:c3:58:62:74:64:93:de:da:b0:21:d5:7d:
         b4:3b:ce:ba:2f:aa:a8:66:d4:2b:ab:d3:76:40:45:30:33:d8:
         c2:96:15:8b:d9:3d:b8:dc:1c:5a:31:87:bb:2d:7b:47:f7:d3:
         8b:f6:c6:38:f8:cd:09:68:f1:7e:f2:c2:2c:ce:4c:96:0a:3f:
         90:e6:15:e1:1f:a2:37:ff:07:0c:3d:1f:8f:f5:26:91:b8:29:
         e4:9e:6f:ab:d1:3c:37:a3:05:d4:5e:aa:68:a1:ac:c0:90:3c:
         ed:ff:bd:59:31:67:85:05:63:75:33:04:e9:46:f4:1d:5d:a3:
         80:c0:f8:28:2f:c7:53:06:42:49:b9:3c:78:f1:9c:d2:ce:be:
         92:40:e2:35:78:f9:bb:25:4b:c9:4d:cd:d7:d6:dd:e7:05:79:
         56:e7:c5:36:ba:ba:53:cf:e6:f0:59:09:fc:ad:d9:1c:c1:3d:
         0e:34:a6:37:43:ee:a4:41:3a:80:df:67:f5:49:78:9e:07:f0:
         47:76:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----