Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e820ca08-6919-35cc-9cc1-6badeddb52bf.roa
File:                     e820ca08-6919-35cc-9cc1-6badeddb52bf.roa (raw, json)
Hash identifier:          CFzvyWOqaGqCUsMG1AHR6G+K7spfsHH2ubtt/+6BkcE=
Subject key identifier:   37:AB:D3:93:F3:C3:8C:43:6B:6E:A4:FF:D1:EB:57:89:31:7A:0A:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5091E2C0761244F0BA6200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e820ca08-6919-35cc-9cc1-6badeddb52bf.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     40496
IP address blocks:        216.66.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:91:e2:c0:76:12:44:f0:ba:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=9bfb0955-b30c-4edf-b0f7-83e222153036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2f:bd:2e:e9:f7:17:bc:92:e3:15:92:a0:39:
                    98:53:cc:ba:68:4f:1a:a6:db:02:92:14:49:cc:4b:
                    20:9a:ae:f6:2d:23:7d:d2:4e:e0:9f:c3:2a:b4:43:
                    07:62:ad:42:37:45:e6:f3:e0:79:84:9f:a4:34:06:
                    dd:ec:39:22:8a:88:e3:80:09:62:d5:5b:f2:c2:de:
                    bb:31:f3:a3:a9:d0:44:f3:1d:94:a7:9b:52:f2:32:
                    92:83:dc:b0:f2:01:c9:4e:a6:73:25:98:9d:ca:d2:
                    e6:9b:fa:0d:13:2b:5b:cf:fb:69:35:8b:25:e5:c0:
                    12:c8:da:25:95:77:30:51:03:6b:86:a7:67:2a:71:
                    7f:3a:13:b4:7f:77:12:04:22:58:66:7a:98:a0:1a:
                    76:00:4a:d3:a2:7e:56:bc:00:4e:1b:8b:91:f8:d0:
                    8f:04:26:dd:a5:7f:29:74:e4:d8:0e:e1:f0:e2:e8:
                    e3:23:68:00:46:ec:e7:03:bf:48:ee:c6:a4:29:7d:
                    75:40:81:68:c7:53:db:25:46:c7:d7:64:6d:f4:15:
                    6d:f1:38:c5:91:91:e3:28:54:f0:c0:71:f7:83:53:
                    33:d7:97:36:45:9b:45:8d:37:3e:3b:78:b3:18:6c:
                    e7:5b:10:ad:91:19:57:f1:18:f4:c3:3f:4e:45:5c:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AB:D3:93:F3:C3:8C:43:6B:6E:A4:FF:D1:EB:57:89:31:7A:0A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e820ca08-6919-35cc-9cc1-6badeddb52bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:64:9e:13:e8:07:6a:ef:c7:64:aa:a3:23:b8:1a:de:34:a4:
         69:3d:39:80:61:7b:fd:88:a7:12:34:f1:fe:66:23:06:5b:34:
         90:79:8f:f4:b8:e3:c5:b3:ff:5d:d8:eb:ed:80:a6:00:8d:bb:
         d5:70:a3:2e:da:f9:d9:65:07:52:8f:26:b9:39:0c:ad:f7:57:
         7c:1e:d7:1d:04:55:3a:ff:b8:af:42:84:c0:5e:f9:2b:40:2b:
         ff:80:8c:b9:99:97:74:39:28:2a:69:32:56:f1:3d:5f:02:ef:
         6a:bc:84:fc:ae:f8:bf:d0:e6:d0:c5:81:46:54:b8:26:63:6a:
         14:2e:b7:fc:d5:11:aa:e2:a7:83:30:ae:12:0b:b3:b7:89:99:
         4b:dd:9f:97:17:bd:c7:8e:4a:7b:24:6f:2f:ec:35:55:1a:22:
         e8:aa:dc:00:7c:8b:94:99:d5:96:5f:09:95:af:93:9e:16:98:
         a4:2d:06:7d:a2:46:90:de:fe:47:75:17:9b:16:0b:ee:00:c7:
         05:76:ff:93:93:33:c6:53:9d:e8:5b:65:b8:ce:0d:79:4d:f7:
         5c:ff:02:6e:62:7d:df:0b:23:8c:41:d4:6a:6c:d6:d1:0c:ce:
         24:80:bb:ab:5d:22:17:43:e9:f0:10:c3:bd:9a:2b:02:7d:37:
         1c:dd:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----