Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/f8c4818d-7728-35a1-86c5-6b5ae4be5b50.roa
File:                     f8c4818d-7728-35a1-86c5-6b5ae4be5b50.roa (raw, json)
Hash identifier:          Y8rJS24cdIgsyCuPbQafDO5erQdO4NvM3scolYsi368=
Subject key identifier:   F8:71:64:7B:04:98:B0:CE:BE:D3:F1:76:34:8C:21:7C:E4:C5:FB:4D
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B1795579AFBE321A1C85FF00
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/f8c4818d-7728-35a1-86c5-6b5ae4be5b50.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 27 Apr 2023 13:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:79:55:79:af:be:32:1a:1c:85:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=318e2179-e914-412f-a4e1-b8973b16fed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:73:a5:91:69:15:c9:af:0b:37:03:63:0f:
                    34:fc:d1:22:48:28:b7:49:74:e7:be:6f:25:25:50:
                    1a:32:bd:c4:f9:e5:86:a7:02:90:f1:c7:84:0c:53:
                    15:d9:ab:52:9f:ed:8a:74:2c:6a:00:c5:6a:1c:1a:
                    86:39:86:c1:37:d7:15:22:ba:9c:bb:96:5d:d8:87:
                    11:3f:ff:75:13:f4:76:9f:41:cf:f0:2e:c9:f8:40:
                    20:6c:39:9f:2d:4b:bf:55:13:5e:52:83:02:0d:d2:
                    f9:82:5b:77:e3:f7:5b:8e:30:01:61:f5:c7:a2:54:
                    61:55:34:81:f5:13:0b:ce:1e:b5:09:0a:87:83:05:
                    73:45:41:56:14:1b:7c:64:3d:29:24:4a:ff:c0:2b:
                    0c:1f:8f:c6:48:72:0c:31:57:ea:ec:59:6c:6a:bc:
                    d4:1e:0a:74:05:4c:6e:70:0f:da:2c:3d:0b:0c:26:
                    26:45:56:85:d7:35:e2:9e:6b:bd:bf:2c:05:6d:f9:
                    81:55:55:c1:cb:29:39:f9:20:b8:4d:c5:20:ea:18:
                    fc:c6:dc:a1:d2:63:17:76:c0:30:53:a1:86:28:e9:
                    f6:76:e9:03:8c:b4:8a:d0:fc:4a:0e:a0:76:97:62:
                    9d:49:83:ab:88:e9:ab:b1:80:fd:b1:b4:98:c5:8d:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:64:7B:04:98:B0:CE:BE:D3:F1:76:34:8C:21:7C:E4:C5:FB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/f8c4818d-7728-35a1-86c5-6b5ae4be5b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:91:c0:75:1e:10:42:53:0b:85:0b:57:f0:c1:7d:55:87:61:
         13:6d:d3:fa:1d:72:59:9d:c7:37:b7:ca:6f:33:06:0c:5c:bf:
         20:49:a1:52:09:a1:a1:68:92:1e:53:b5:6d:9c:a5:09:c9:5f:
         1b:31:3f:44:5a:27:1f:60:1e:59:ee:dd:f5:6e:dc:9a:a6:58:
         50:6b:0b:bc:e5:fb:c2:c2:e6:a7:bd:16:64:6e:f5:d3:85:af:
         a5:56:b6:bd:aa:00:fd:43:28:a9:0e:ee:3b:be:16:17:36:3b:
         75:34:23:7c:5b:51:af:fd:47:64:eb:ab:28:9a:50:23:2c:d0:
         18:54:6f:cf:78:58:59:77:d4:5c:f5:f0:c0:86:f5:16:05:4a:
         7e:80:9e:8c:42:18:1d:b3:27:84:52:9b:25:be:4f:f0:3f:e0:
         69:cb:7e:79:04:17:9b:98:3d:88:5d:58:82:0a:6d:e4:c0:f0:
         92:e2:88:46:9e:19:ad:d4:26:fe:fd:83:fc:69:9d:46:bf:b1:
         27:cf:b2:91:63:67:2a:df:96:ec:83:fb:1e:0e:1c:3a:40:8a:
         24:94:a8:45:21:57:8d:ba:41:f2:30:b5:ba:28:2e:f7:ed:e7:
         53:f1:94:71:98:ec:08:ea:ad:0b:de:87:a1:43:49:7d:9e:4e:
         03:bb:d1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----