Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/f3359265-1031-388c-9026-6e3b10371798.roa
File:                     f3359265-1031-388c-9026-6e3b10371798.roa (raw, json)
Hash identifier:          fek8XvcI5vMP4iECFgBPD8heW9/GAqHcGYh/g8Nm9es=
Subject key identifier:   B9:9D:98:95:E2:13:E1:EF:42:D2:D5:A7:DB:82:94:80:BC:2B:86:63
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583F3E2F0F420ED877AEF1616D80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/f3359265-1031-388c-9026-6e3b10371798.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     5769
IP address blocks:        69.12.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Sep 2022 15:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:2f:0f:42:0e:d8:77:ae:f1:61:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=38cb30a8-ded7-4f7d-8e32-0fbd50783673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:91:1d:60:77:0b:15:06:9e:3a:93:5b:5f:
                    cc:d1:01:9a:bf:79:d9:8a:4f:dd:f9:82:17:2e:d3:
                    2c:87:38:73:4d:87:4d:3e:bd:c4:52:ba:69:b5:5c:
                    86:d3:02:80:a1:b6:ff:ad:42:1a:f4:65:ed:68:6d:
                    1f:32:59:24:77:4e:e7:78:06:53:11:80:89:fd:c3:
                    91:26:8b:0e:ed:19:d6:ff:61:0a:dc:c7:62:9e:51:
                    dd:e4:e4:b3:3f:c8:d5:a0:dd:3e:72:38:3c:ef:c8:
                    bc:5d:5a:fc:07:0c:b1:d1:cd:e2:71:c0:d7:f9:2f:
                    a3:56:2e:41:11:61:b9:2b:da:72:e5:16:0f:c5:c7:
                    7d:c2:56:5a:bd:95:ba:8c:82:36:6b:c6:83:1e:3c:
                    3f:6b:72:59:86:20:0f:13:79:e1:a5:35:2a:41:18:
                    02:17:3a:54:37:3b:a5:82:97:21:f8:23:21:7d:9f:
                    3d:78:43:b7:2d:90:29:37:dc:af:06:23:31:6f:60:
                    45:e1:a3:70:27:b6:44:a3:c5:e0:e1:8f:81:c2:7a:
                    bf:41:a2:ef:34:18:b6:96:04:cf:65:f3:3f:17:29:
                    b9:ee:09:49:e3:fb:f1:b5:e1:06:70:c3:21:a1:ae:
                    ad:89:7c:4f:e1:14:c4:36:46:af:81:32:e1:0e:1e:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:98:95:E2:13:E1:EF:42:D2:D5:A7:DB:82:94:80:BC:2B:86:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/f3359265-1031-388c-9026-6e3b10371798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:02:70:cd:c3:c2:89:70:e2:23:4b:44:16:33:ff:49:b0:21:
         39:28:ec:af:b3:f1:71:08:9a:4c:1b:29:f5:3b:e9:66:4f:b5:
         d8:5b:ae:3a:fc:dd:e2:27:5e:81:03:d8:0c:6a:71:2e:5a:bc:
         32:ec:33:9c:d4:1f:ec:4f:cd:00:a6:76:26:b1:bf:60:b6:0c:
         91:54:0b:4e:e8:7c:70:e0:7a:e5:2e:d4:11:00:fb:27:c3:d3:
         c9:0f:d4:ec:40:7b:4a:03:b1:bd:52:34:8d:35:8e:1c:d6:9c:
         3d:13:29:d0:3d:bf:10:9a:56:f7:b9:71:1a:d2:71:0f:49:c2:
         3a:46:46:0d:2e:a3:87:6d:58:77:b5:6a:18:7f:cd:ae:7d:aa:
         e7:2d:f8:0f:84:bb:53:4f:8c:8d:64:7a:29:2f:25:93:6b:db:
         93:79:e9:fe:c7:cf:29:56:db:32:f8:2f:f2:f2:ec:ca:3c:64:
         ef:39:60:84:37:52:10:38:2a:9d:78:6b:d4:4b:73:a3:40:28:
         44:72:e3:92:94:fc:d5:3d:f8:35:e0:45:04:43:89:a3:f1:15:
         97:80:db:af:61:42:2a:ee:c8:4f:af:8e:e3:58:c5:22:15:c5:
         8c:07:38:47:3e:33:9c:b0:f0:e8:4b:97:31:5d:79:02:62:c0:
         bb:4e:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----