Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/aefb78c9-7957-37a5-9290-9a5169cf4967.roa
File:                     aefb78c9-7957-37a5-9290-9a5169cf4967.roa (raw, json)
Hash identifier:          6OI7fa1h81pLE9dlzur/plJSdGj/eSj/9Y0D4aHkBHU=
Subject key identifier:   E5:AA:44:8E:AD:5A:B4:22:BF:DF:7B:AC:B3:69:8F:0A:8B:D1:E0:96
Certificate issuer:       /CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
Certificate serial:       010D0C9F43285841217B9C325A09ABF4E0BB0540
Authority key identifier: 3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/aefb78c9-7957-37a5-9290-9a5169cf4967.roa
Signing time:             Wed 22 Feb 2023 17:04:43 +0000
ROA not before:           Wed 22 Feb 2023 17:04:43 +0000
ROA not after:            Tue 27 May 2025 04:00:00 +0000
asID:                     55105
IP address blocks:        69.57.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:21:7b:9c:32:5a:09:ab:f4:e0:bb:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
        Validity
            Not Before: Feb 22 17:04:43 2023 GMT
            Not After : May 27 04:00:00 2025 GMT
        Subject: CN=807cb43a-379d-4a8d-b225-2ad3e60559d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:fa:99:94:91:04:7e:5b:7d:a0:5b:c0:0e:
                    03:ce:c9:d6:a1:d6:89:26:b5:86:b2:b5:80:ca:e8:
                    a0:99:47:81:48:ec:b7:5c:41:84:47:cd:9b:c7:3c:
                    4e:df:41:4f:3b:30:38:ea:49:2c:3b:2c:4e:30:d7:
                    a1:5f:5a:d8:df:82:20:c3:1d:63:c7:13:ce:36:10:
                    a9:06:4c:a0:b1:1b:23:d1:62:8b:75:28:10:19:6c:
                    a2:c0:05:d8:1d:62:19:49:58:98:88:0b:53:53:67:
                    9d:5a:21:dc:f3:9e:30:c3:88:6b:ab:d1:c4:68:b5:
                    2e:4d:4e:1e:f9:36:b7:9c:a3:ff:af:50:8d:80:47:
                    c5:d2:45:e5:e1:aa:50:d1:a1:f5:d0:24:69:16:a6:
                    91:cf:9c:bd:7a:63:78:a3:c0:6c:e6:f0:db:5b:5d:
                    8a:ab:f7:70:8a:e5:e3:6a:cd:1d:59:2e:12:5f:0e:
                    ce:6b:d4:06:aa:2f:7f:0f:c6:ad:56:59:fd:82:0d:
                    cb:5c:01:4a:86:53:cd:10:97:ac:a2:d7:5d:85:08:
                    48:8e:72:8e:46:ca:fc:80:ab:52:11:eb:39:b3:cf:
                    54:84:e4:cb:a9:78:7d:de:da:4b:1b:1a:3b:f0:e3:
                    54:41:80:f1:65:2d:76:7b:25:d8:ef:0e:89:ca:2d:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:44:8E:AD:5A:B4:22:BF:DF:7B:AC:B3:69:8F:0A:8B:D1:E0:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/aefb78c9-7957-37a5-9290-9a5169cf4967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4e:91:63:83:23:82:7d:bc:56:26:60:35:b9:2b:aa:eb:84:
         23:f4:68:0d:e9:5d:9c:8b:22:48:88:28:94:ed:84:5d:b6:4d:
         c6:e5:eb:f1:00:71:3c:9f:7f:ee:f2:51:f9:48:d1:e3:7d:7a:
         37:ac:f1:10:a3:2a:b7:0d:f8:e2:73:bf:dd:30:6e:82:b8:da:
         4b:b5:82:70:ed:5f:fe:e9:ce:5a:9c:95:f3:33:ee:c3:a6:2b:
         22:c4:68:d7:6b:1f:2e:b2:22:45:46:0a:22:c1:d0:13:ee:8d:
         ee:db:15:00:fa:28:0e:32:9d:81:36:45:a0:1f:87:8f:ce:30:
         5c:84:92:11:c6:2c:bf:17:90:7e:e1:68:3f:03:04:80:4e:a8:
         f2:4f:a3:43:a3:a1:28:34:4a:32:ec:2a:d1:21:7b:c3:ac:98:
         7c:9e:4e:37:e3:02:d7:90:59:4e:d1:b8:eb:d5:20:84:59:0d:
         ac:aa:90:67:5d:b2:4e:f6:55:d1:90:d2:c3:42:d4:ae:6c:9f:
         1c:ca:19:5b:1b:c8:7a:a3:1f:6b:ba:b0:e7:ce:27:ce:dc:d2:
         43:f1:6e:4d:c9:e5:8f:07:16:d7:71:f1:14:53:ff:f5:c9:05:
         4c:41:78:df:36:aa:d4:59:4d:b0:e6:33:ad:89:42:2b:76:d4:
         12:9e:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----