Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/74a0c701-d81e-3a3f-8b98-69fd8450631e.roa
File:                     74a0c701-d81e-3a3f-8b98-69fd8450631e.roa (raw, json)
Hash identifier:          mgp8/YgNMRBk0bB4E5d0MLYh0znmsyIaUeQy9y2ebT8=
Subject key identifier:   91:43:53:67:5B:FC:3C:AA:A8:3D:7A:A8:3E:D9:4E:1F:1B:10:00:DF
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584432149BB9FB3D90DAE1A0F880
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/74a0c701-d81e-3a3f-8b98-69fd8450631e.roa
Signing time:             Tue 12 Dec 2023 23:31:05 +0000
ROA not before:           Tue 12 Dec 2023 23:31:05 +0000
ROA not after:            Mon 11 Mar 2024 22:31:05 +0000
asID:                     4647
IP address blocks:        185.167.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:32:14:9b:b9:fb:3d:90:da:e1:a0:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Dec 12 23:31:05 2023 GMT
            Not After : Mar 11 22:31:05 2024 GMT
        Subject: CN=6d6938c7-cc1f-4bd6-aba7-e1fbc2c8d1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:44:32:73:8c:4c:c4:37:6d:c4:25:a1:f3:
                    9e:af:25:a5:79:6d:04:6a:30:fb:aa:8f:ea:c3:65:
                    54:cc:8b:3c:b5:61:1d:8f:bd:3f:df:56:b2:14:18:
                    d0:0e:eb:e3:55:4f:5e:d9:c9:56:15:b7:19:1a:d1:
                    43:46:e4:0d:ff:82:c8:af:69:9c:27:7f:63:e4:f4:
                    92:2c:74:ac:0d:4a:75:25:43:b1:38:e4:ba:e2:d7:
                    ef:a4:82:7b:de:ab:d4:b8:74:50:3a:53:af:17:61:
                    d4:f7:33:f2:3e:52:f0:89:9b:e9:1a:78:02:51:c0:
                    04:76:90:83:2c:c1:78:52:6a:02:3c:cb:97:a8:92:
                    5c:b2:2c:6f:45:f0:60:da:6a:53:89:11:c8:17:3c:
                    61:ad:16:89:b5:52:cc:84:0a:6f:c4:27:e4:0a:71:
                    7e:1c:10:a9:94:e8:43:a6:5e:1b:22:90:7f:23:75:
                    7c:94:45:05:9a:51:ad:bb:49:e5:65:d8:8c:19:91:
                    02:8c:86:89:03:67:fa:cf:67:a8:36:07:5b:2f:c8:
                    70:09:15:5a:ae:b1:98:ed:24:49:42:6e:9a:05:b6:
                    25:97:63:35:15:42:ba:af:df:74:ac:80:64:10:4f:
                    40:df:b2:c8:ce:ad:dc:c1:72:f1:83:31:81:7f:a1:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:43:53:67:5B:FC:3C:AA:A8:3D:7A:A8:3E:D9:4E:1F:1B:10:00:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/74a0c701-d81e-3a3f-8b98-69fd8450631e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:4f:b1:b6:f6:ec:d4:12:90:3d:23:84:16:97:29:33:84:9b:
         26:4e:42:8a:70:2d:41:f5:57:d7:34:f3:c3:73:5b:ab:b9:63:
         6b:e8:e6:97:02:9d:eb:43:c3:24:b9:23:68:dc:67:42:86:80:
         1c:91:66:d3:36:f0:f5:da:05:42:34:d7:99:cc:f1:f9:74:d4:
         b5:a6:20:93:c0:ee:68:a8:5d:89:3f:a0:fd:55:18:36:23:c1:
         4c:ca:d2:81:38:ad:9d:4b:78:ab:f0:13:e8:06:33:16:ea:98:
         a2:79:09:6e:df:18:91:ed:d3:c5:68:94:8a:06:6d:18:46:e8:
         b8:67:b1:78:a8:9b:78:1a:c9:c7:d4:87:5e:a5:74:99:c6:aa:
         fe:98:2a:1d:5c:4a:be:e7:a6:97:b2:56:d6:e5:63:f1:b9:4a:
         67:cf:5f:14:36:7e:05:f9:e8:29:45:fa:d3:a8:7b:b9:6a:6a:
         5c:e1:b4:85:eb:03:9b:74:d6:34:7b:4b:f5:d2:2a:a5:54:ce:
         65:69:98:b0:bf:2d:30:6d:fe:34:03:26:21:3d:ae:13:ae:c5:
         ef:c7:ca:e0:39:0f:df:6e:5a:71:fd:be:cf:b0:4f:3b:01:14:
         56:1a:89:15:01:88:41:2d:d3:44:77:3f:42:7f:a1:85:69:b8:
         77:c6:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----