Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a09c0fc-3522-3a8f-a021-c93dc1f0e0cf.roa
File:                     6a09c0fc-3522-3a8f-a021-c93dc1f0e0cf.roa (raw, json)
Hash identifier:          NxRkS4EOc9Dn17bE7SOXA6x4vGOhvjbZASNXVVupHXg=
Subject key identifier:   39:26:2C:3F:41:A7:F0:E1:04:8E:47:4E:01:3E:C0:7E:F6:54:98:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB534904370F4021AE82D0900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a09c0fc-3522-3a8f-a021-c93dc1f0e0cf.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        100.16.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:34:90:43:70:f4:02:1a:e8:2d:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=c5d1729f-ab15-4b71-a38f-a40ed9cff1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:fe:77:1d:21:e7:1e:a7:84:be:4b:5f:87:
                    37:b3:1f:cc:18:ad:8c:18:43:ab:d6:d5:99:50:3b:
                    6d:b1:2e:3e:ed:a2:8d:14:fb:13:84:2a:2e:d0:2a:
                    ad:6c:00:2c:b5:94:11:56:38:78:d9:89:fe:0c:f5:
                    f8:88:7e:d6:16:bf:78:c6:e3:69:03:c4:2c:83:1f:
                    17:b9:e7:41:63:6d:91:39:b5:8e:05:e6:60:a9:e4:
                    e3:ea:ae:65:a0:4f:d4:f5:ee:c1:20:57:a2:0b:38:
                    62:d0:f2:e2:d7:b0:c0:21:c4:ee:23:58:0f:08:c4:
                    99:6f:bb:62:30:83:77:fd:0e:b2:c2:e6:db:45:bd:
                    46:39:f0:e5:db:3a:ac:95:28:fe:2f:6d:c0:7c:67:
                    98:db:18:e5:52:af:94:da:40:7c:68:0b:39:04:fd:
                    34:e8:4d:5f:62:db:f0:72:db:a3:9e:bd:c0:66:e7:
                    54:fb:4b:d1:53:d9:ef:3b:1d:db:e9:1a:61:ce:f1:
                    57:d5:f3:00:b2:8f:28:ca:a8:c3:8a:0c:1f:5a:8d:
                    7a:c2:4e:58:b0:3f:49:41:3e:89:e9:b0:08:df:3c:
                    66:b1:e8:28:13:80:cf:ec:0a:78:2d:a4:6a:2c:bb:
                    49:03:5c:d0:29:2c:b5:42:7c:6e:dc:fd:55:c2:40:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:2C:3F:41:A7:F0:E1:04:8E:47:4E:01:3E:C0:7E:F6:54:98:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a09c0fc-3522-3a8f-a021-c93dc1f0e0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:57:f8:7a:87:34:04:79:cc:0f:e8:01:81:57:9a:a8:03:
         da:0a:11:ec:02:8d:f7:a8:65:77:f6:aa:68:1c:18:65:08:e1:
         dc:10:af:b3:33:fe:7f:d2:3c:80:ba:1f:3b:b8:4d:32:69:42:
         bd:ec:96:2c:f7:94:f7:69:d5:08:5d:02:86:29:f0:48:01:7e:
         da:ea:c5:f5:2a:47:e9:b7:2e:eb:40:24:73:4a:7e:7b:12:9e:
         38:7c:3e:35:e8:d1:29:52:60:0c:c8:44:b7:b5:94:2b:c1:05:
         da:bb:09:43:3d:e8:31:53:21:79:55:af:2d:f0:1d:f3:95:26:
         e8:56:48:a3:b7:42:a3:c8:24:e8:1f:fe:16:a7:a8:97:99:63:
         21:68:57:9c:f7:0b:cd:12:1a:ba:61:36:56:27:62:35:50:46:
         af:ab:ba:92:cb:d8:d0:c3:29:d0:29:57:15:b5:ef:16:4e:b5:
         86:a3:ae:9c:b8:ee:2c:f4:b9:21:9c:05:cb:a2:b9:32:49:23:
         fd:c7:1a:31:92:63:d0:2a:cd:ee:92:e2:49:39:80:63:84:78:
         e6:33:52:b3:9d:11:5c:2a:72:e7:fb:e3:2b:d5:36:27:70:7c:
         55:44:59:da:75:d5:07:a6:a9:7d:8f:a1:bf:77:79:c9:2f:a6:
         f2:18:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----