Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/6d408b3e-1fbf-3426-859c-a9ed1d662aad.roa
File:                     6d408b3e-1fbf-3426-859c-a9ed1d662aad.roa (raw, json)
Hash identifier:          Gkeu0jDKsuT3R8R9mCtDYtz0lk2Mo22WnWEG5pDG3P4=
Subject key identifier:   70:24:C3:92:98:DB:AE:88:A4:AA:A1:3C:46:A5:FB:86:6E:9F:F4:C2
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B179275D6BD7C69CE8086900
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/6d408b3e-1fbf-3426-859c-a9ed1d662aad.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 27 Apr 2023 13:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:79:27:5d:6b:d7:c6:9c:e8:08:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=748baa9e-280b-4d53-9c64-a7cb89ea75d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1c:70:ef:a1:f9:a6:d9:3d:00:f8:df:c3:ea:
                    fd:13:06:d2:3b:f4:a8:ed:ad:b9:85:49:0e:e7:1f:
                    9c:cd:78:2c:6a:6b:52:35:c2:ca:08:20:df:44:52:
                    79:78:0e:15:07:67:cf:a5:9d:27:61:18:aa:82:b8:
                    f4:c6:57:f9:c8:32:f2:1f:64:14:c6:ba:a7:9d:40:
                    90:e0:f6:7a:30:a3:cc:9a:d3:94:31:1c:00:50:f0:
                    13:5d:5a:eb:5d:8b:53:27:04:bb:05:3c:80:47:f2:
                    53:06:bc:50:13:8f:89:e6:dc:9d:b7:fe:e5:50:dd:
                    27:66:13:e5:3d:70:5c:2e:db:68:4e:1c:33:58:f1:
                    a2:34:0c:cf:79:64:13:91:c1:30:23:ca:bb:2e:d0:
                    6c:94:ba:dc:d9:3e:1a:4f:da:ef:7d:f5:a6:50:48:
                    ed:1b:16:6e:a4:b3:4f:40:3c:c2:a9:8f:b3:d4:11:
                    56:0c:c4:b4:d4:f6:1e:76:7f:a3:43:f7:3d:ec:48:
                    4a:d4:39:b8:49:fd:bf:26:30:2e:74:0b:25:97:2f:
                    5a:55:f0:0a:2e:66:be:ac:c1:bf:e8:a5:11:5f:c3:
                    92:e8:b2:85:24:26:66:16:61:8c:cd:a8:09:7e:64:
                    84:a1:77:b0:ba:a3:d7:17:fc:dc:71:22:7b:dc:61:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:24:C3:92:98:DB:AE:88:A4:AA:A1:3C:46:A5:FB:86:6E:9F:F4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/6d408b3e-1fbf-3426-859c-a9ed1d662aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:67:d2:e5:7a:82:b7:08:93:de:84:ae:f2:05:57:b5:33:13:
         7d:49:ab:bf:46:63:78:70:b6:72:a2:ac:73:92:26:6d:c9:59:
         7b:04:df:6f:e4:42:1c:24:c0:42:8e:a4:20:2a:b8:62:34:57:
         d6:89:2f:f8:a8:86:f1:b2:23:80:77:0f:fa:4a:39:cd:fe:a1:
         1c:37:1e:9a:db:9b:24:af:e5:d5:16:b9:33:19:13:52:c9:36:
         a5:5b:77:95:75:c6:ac:f4:86:29:55:25:1d:64:95:f5:fc:f9:
         96:04:0f:7d:78:5b:7e:0d:72:02:37:3a:6d:7b:3f:6e:d3:b5:
         f3:13:ad:ee:b0:17:0f:ba:14:26:c0:e5:f1:f9:78:4d:ed:0b:
         7b:d7:57:53:28:01:fa:5e:70:32:bd:0c:e6:1f:07:6d:58:18:
         17:03:ae:bd:98:54:1a:04:8a:f5:4f:f9:eb:c7:45:d6:2a:aa:
         6d:b2:f2:c1:fb:0e:6b:6b:86:41:8f:1b:13:e6:4f:db:b4:77:
         21:22:ba:e7:6a:15:83:56:0c:21:ea:f2:24:b4:0b:79:6e:07:
         62:39:ee:05:c4:a0:a5:f1:ab:a0:28:c9:e8:23:fd:2e:18:2c:
         2e:b7:d8:6d:0d:f0:58:26:4e:ee:57:49:06:44:41:17:f1:45:
         06:5f:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----