Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/57b9ab97-c30b-3031-98fa-0633fb3b8e32.roa
File:                     57b9ab97-c30b-3031-98fa-0633fb3b8e32.roa (raw, json)
Hash identifier:          Qau52H9zLAlA4l9GqzAhyLnu8plU5ULRR+rPhqaKHf8=
Subject key identifier:   2E:6E:91:39:DD:31:42:33:D3:85:B2:81:00:4E:AF:5A:D5:FB:42:4F
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583FAD54789218BF7CFC190B1880
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/57b9ab97-c30b-3031-98fa-0633fb3b8e32.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        135.19.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ad:54:78:92:18:bf:7c:fc:19:0b:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=796a9ed1-c064-4c14-bb1d-1f7238570f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:9d:74:79:39:3a:f6:87:29:c6:c3:fc:0a:
                    ee:8d:4e:1d:67:f9:7e:7f:59:a5:e7:45:5d:69:20:
                    c9:4c:24:77:8b:5d:be:ea:58:53:72:b6:61:25:19:
                    bd:e0:37:a3:f3:d7:1c:be:2d:13:8c:69:4e:62:79:
                    2a:61:6c:21:d6:b9:97:09:5f:18:bb:91:f5:57:f6:
                    55:b8:78:de:09:7a:8a:2b:55:e6:92:20:99:d0:10:
                    25:85:c8:47:51:7e:0b:74:d4:b6:3c:b5:db:e2:4c:
                    fc:ba:48:e4:fd:2d:a9:25:fd:8b:e9:ab:f4:15:c7:
                    9a:2a:fd:14:3e:10:10:da:41:bb:0d:d6:92:d8:14:
                    b1:fa:5a:c4:c1:eb:21:22:7e:96:8a:85:05:2a:4d:
                    56:20:64:53:dd:5c:b0:82:78:0d:35:c4:c3:f6:7b:
                    e8:68:44:06:b4:0b:ae:52:0e:95:1a:b0:df:dd:93:
                    dc:9c:a9:c0:b6:47:0b:94:96:7a:77:a3:89:55:1c:
                    3b:17:4f:b9:a4:ec:79:e3:ca:f9:e6:ac:2a:9b:f1:
                    ce:00:44:7d:d6:8f:03:95:e5:f2:08:09:b2:ac:24:
                    25:48:47:9a:0b:72:5c:d3:6f:4c:eb:91:29:49:c7:
                    89:e4:a7:0c:2d:ae:2d:53:41:4f:40:51:f4:b5:3f:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6E:91:39:DD:31:42:33:D3:85:B2:81:00:4E:AF:5A:D5:FB:42:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/57b9ab97-c30b-3031-98fa-0633fb3b8e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:06:88:9b:0c:92:ba:3a:16:b1:53:b0:60:bb:55:31:79:
         d5:d5:89:2f:cc:ed:24:a1:93:74:16:b9:d7:55:f0:d4:a5:58:
         6f:55:7f:cf:5d:71:d2:34:fe:7b:89:ab:51:a1:2e:4d:fa:6e:
         d4:6f:53:01:c7:ad:26:ea:a5:da:69:d8:22:c0:ca:03:d6:37:
         6b:7e:d3:b9:66:4b:d4:15:5c:a8:ed:22:7c:fc:9a:22:35:f9:
         df:a0:c4:a5:4c:e6:cc:82:73:e0:67:10:69:0c:9a:c1:dd:c6:
         b8:36:66:90:e4:06:47:2a:59:56:f2:71:08:5f:c6:f1:6c:b9:
         b1:32:32:92:da:85:51:0e:d2:44:3d:92:b2:60:03:fd:69:8e:
         96:e8:b0:d1:74:d5:6b:6d:c1:11:21:f9:c9:1d:69:e7:b9:55:
         fe:18:9c:82:1d:13:46:14:1b:0b:67:1f:f0:58:3c:b5:a5:33:
         7e:58:2f:3e:6b:3f:ad:f2:06:7b:6d:dd:9f:f9:18:73:35:c1:
         b2:c2:b5:40:e0:4e:25:32:c7:9e:ac:72:63:ce:3b:ad:43:0d:
         60:45:6d:af:da:06:2e:bc:a8:ea:00:d5:00:cf:72:dd:dc:bb:
         10:d6:99:45:99:69:db:28:ac:c7:63:db:a1:5c:50:7c:07:b0:
         b4:7b:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----