Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/01b69bb4-c761-36cc-ab00-be5467d4db97.roa
File:                     01b69bb4-c761-36cc-ab00-be5467d4db97.roa (raw, json)
Hash identifier:          UWt4bqBjdHtbsCX+P9gh7sIRjbo6P7BCs8eKXz87p60=
Subject key identifier:   B3:DF:C2:D4:96:12:8D:13:1A:6D:46:90:B8:08:FE:63:F2:23:B6:32
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F43285841E471AB41F2DEA2094D5F1E00
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/01b69bb4-c761-36cc-ab00-be5467d4db97.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Mon 31 Jul 2023 09:57:53 +0000
asID:                     918
IP address blocks:        64.112.124.0/24 maxlen: 24
                          206.168.212.0/23 maxlen: 23
                          2602:fbdf::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:ab:41:f2:de:a2:09:4d:5f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Jul 31 09:57:53 2023 GMT
        Subject: CN=8eeef9fd-e30e-446b-a2f4-b21877994cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:04:e0:7c:9a:ae:e0:5e:6b:a3:82:e4:8c:
                    72:b6:93:1f:96:8f:35:47:14:fb:46:ff:e0:64:e7:
                    a4:f5:4d:93:73:1a:b4:5f:ff:c7:81:2f:5c:ff:cc:
                    8f:6c:36:c7:29:e7:e6:f9:a9:76:81:17:d2:6c:8a:
                    1f:63:bb:1a:b8:40:da:22:83:76:4c:1f:55:26:52:
                    2c:77:2f:a1:16:b6:73:e6:8f:f5:cf:61:cf:1c:28:
                    42:b8:90:48:88:cb:be:61:93:d2:1a:ad:bd:e4:ff:
                    11:c9:ad:cc:1e:e2:0a:68:b5:21:72:26:3c:0a:0a:
                    48:23:77:13:bf:d3:06:2f:e3:9c:f8:29:84:b5:9d:
                    a7:84:92:a5:52:0b:4f:5b:8c:65:6a:47:71:55:d7:
                    88:13:da:08:62:29:86:0c:85:6d:a0:27:7e:42:58:
                    73:54:27:91:15:cf:45:5b:db:61:0f:dc:d6:34:ef:
                    d8:33:d8:48:95:dd:aa:13:a2:18:e9:89:fe:73:67:
                    63:28:0d:d2:6d:06:a0:1e:fb:b2:87:52:99:1a:ce:
                    8b:d5:4e:01:87:bd:b7:4e:06:85:61:42:7f:9f:f7:
                    98:eb:c2:c5:07:56:82:75:60:85:85:bd:22:c0:81:
                    b7:6c:d4:b1:df:ad:fe:d4:2d:13:96:80:7f:ae:e0:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DF:C2:D4:96:12:8D:13:1A:6D:46:90:B8:08:FE:63:F2:23:B6:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/01b69bb4-c761-36cc-ab00-be5467d4db97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.124.0/24
                  206.168.212.0/23
                IPv6:
                  2602:fbdf::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:e0:80:96:c5:16:0a:e8:26:5d:9e:43:5f:dd:f6:dd:92:
         64:fc:27:ce:25:bc:fd:b4:63:14:27:4e:9a:26:62:a1:9d:f1:
         49:5b:8e:93:cb:92:61:b3:e9:b4:ad:f0:6c:c8:49:e2:de:f0:
         68:23:cf:fc:81:28:51:7b:a6:b4:7c:cf:26:b5:3e:d7:46:60:
         22:0a:43:48:23:56:26:05:19:8f:c6:49:23:0f:a1:2c:98:6d:
         21:e5:6d:83:a1:5c:73:72:53:dc:f6:42:ad:63:03:76:97:04:
         e5:6f:06:1f:24:44:0f:f8:39:b4:81:b3:b5:38:97:94:9b:2e:
         8c:7c:f7:0d:7e:47:64:61:7b:b9:19:7e:c5:6c:c8:75:d1:65:
         00:55:78:53:18:2c:13:5a:99:38:7b:15:c4:50:b3:8f:33:98:
         d5:0e:be:f5:7f:a9:7f:d5:40:e5:c6:af:ef:b0:6f:86:05:66:
         73:46:1e:67:50:8c:42:4b:c6:e8:77:0e:8d:6a:c5:05:97:d7:
         38:bc:fc:49:d3:28:9c:14:3c:be:5c:d7:14:be:59:22:f6:26:
         bc:00:97:09:9a:00:c4:97:5d:bb:2c:4b:42:bc:f5:4e:a1:bd:
         ca:92:51:8e:cb:b7:c4:18:4b:59:22:71:2c:ff:3e:3e:c7:76:
         ad:5a:ed:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----