Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/32a65794-0e77-3aec-bd27-883231260c77.roa
File:                     32a65794-0e77-3aec-bd27-883231260c77.roa (raw, json)
Hash identifier:          8MfGWD9FurLUYQ74eUXf650FMLophNdQyqF1b3mRHgI=
Subject key identifier:   A4:BA:39:4D:2B:E8:D9:CA:22:B0:EE:CD:F8:3E:EA:A8:24:16:C4:60
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583FC393433C03C926E0E8C27500
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/32a65794-0e77-3aec-bd27-883231260c77.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        74.56.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c3:93:43:3c:03:c9:26:e0:e8:c2:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=5183f1a0-607c-402c-84a2-5a047e916b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:a9:37:92:57:bb:44:59:6c:6c:e8:86:e8:
                    69:9f:34:06:10:31:57:0c:29:e5:0a:d9:79:92:45:
                    c6:61:1b:f7:84:1e:aa:d2:be:f8:78:7e:fe:ea:9e:
                    34:20:87:ea:90:ba:a7:2f:d7:67:ec:3b:fe:2e:b5:
                    b0:76:23:d4:d1:23:da:8a:0a:61:f2:ad:27:08:c5:
                    c0:6a:68:eb:fb:2f:c8:41:cc:a0:eb:c7:db:14:69:
                    77:bb:00:80:86:07:98:ee:f0:79:6f:0c:ab:9d:4a:
                    14:8c:c7:cd:b5:fa:3a:38:50:11:9d:78:2a:ce:7e:
                    d0:69:75:19:8d:e5:03:79:ee:a1:89:ff:c6:04:4f:
                    5a:f6:4a:e5:4a:92:24:ae:ef:75:bd:2c:28:96:6f:
                    cf:ce:8c:84:78:f2:1a:84:a4:1d:90:bc:62:7c:c8:
                    e8:a7:5a:13:25:12:17:81:31:e6:8b:cc:f0:e2:0d:
                    c8:14:f7:aa:a1:76:ff:f7:94:52:dc:47:7a:29:c9:
                    81:1b:4e:d4:c7:96:7e:6c:c6:c3:59:c4:98:b9:96:
                    1e:f7:a0:ea:7e:ae:89:da:9e:b9:86:11:d0:c5:1e:
                    b3:76:3a:b8:00:bc:45:47:d0:2a:14:39:9b:b9:6b:
                    00:e8:84:51:75:ad:49:9f:57:e3:a3:82:e3:a2:04:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BA:39:4D:2B:E8:D9:CA:22:B0:EE:CD:F8:3E:EA:A8:24:16:C4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/32a65794-0e77-3aec-bd27-883231260c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.56.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:c2:bc:17:02:18:86:34:0b:6f:af:3c:3c:da:ea:b3:e8:
         be:5f:5d:ec:d9:6b:79:04:bd:b3:07:0b:10:ff:be:5c:2f:99:
         f8:21:68:d7:5d:34:68:ed:26:ad:08:a1:67:3d:ec:af:e1:aa:
         5d:dd:a5:cb:8c:db:e6:11:ae:81:2b:b2:f4:91:13:43:69:18:
         00:4f:c1:53:aa:05:a1:11:15:ea:48:c1:d7:a3:63:32:96:07:
         56:ab:3a:8a:25:94:ea:be:39:43:15:6e:e6:5c:4e:28:f8:00:
         e2:74:3a:7a:8b:29:da:a7:02:ff:dc:c9:b6:1b:2c:b7:7e:0c:
         aa:95:d6:8b:1c:49:f0:81:28:47:ab:a4:67:78:a2:df:1d:8b:
         ad:4b:30:60:a2:43:dc:eb:fc:49:8f:c2:c3:cc:4d:d7:f3:8d:
         de:0e:f3:a2:c0:12:6a:d8:47:4e:c0:1e:cd:de:8b:16:c6:db:
         33:59:2e:04:e2:2d:89:2b:cb:2a:9f:0d:35:b2:32:40:dc:33:
         99:88:35:0a:54:ac:64:71:b0:bf:ac:40:af:c0:c5:19:8a:06:
         82:a8:65:92:2c:92:ff:2a:ea:82:6d:85:e4:e8:e6:98:5c:d5:
         4d:b8:a5:31:56:36:88:2c:6c:92:dc:a3:eb:2c:15:0f:cb:fb:
         e5:61:02:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----