Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/96c43cbf-6d30-3fa0-b4d9-1f7d5f7c01ae.roa
File:                     96c43cbf-6d30-3fa0-b4d9-1f7d5f7c01ae.roa (raw, json)
Hash identifier:          Iskb4otkyu84uxNrSemctuteIwCBekPdfMm/DrI0D+Q=
Subject key identifier:   3F:CC:52:3B:BC:5C:A0:C4:C2:23:FD:D3:CD:A7:3F:A1:43:8F:49:0D
Certificate issuer:       /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Certificate serial:       010D0C9F43285840A5DD9DC1C4EE0AE70F833080
Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/96c43cbf-6d30-3fa0-b4d9-1f7d5f7c01ae.roa
Signing time:             Wed 18 Jan 2023 16:52:41 +0000
ROA not before:           Wed 18 Jan 2023 16:52:41 +0000
ROA not after:            Tue 22 Apr 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        134.172.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 Feb 2023 16:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a5:dd:9d:c1:c4:ee:0a:e7:0f:83:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
        Validity
            Not Before: Jan 18 16:52:41 2023 GMT
            Not After : Apr 22 04:00:00 2025 GMT
        Subject: CN=7714a4d6-8a85-46a1-bb05-d68136776c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:68:6d:a5:89:6f:f8:ed:eb:66:d0:5b:cd:
                    fd:3c:61:9f:74:e9:e4:19:67:73:b8:0e:4e:2a:bf:
                    50:be:f8:8a:fe:3c:fe:04:bf:ca:66:b5:ed:45:9c:
                    5c:a1:76:ee:1c:c2:39:66:e7:be:0e:63:e8:4d:3a:
                    b2:40:b0:d2:17:ea:6d:c3:29:59:0d:f2:93:c1:1c:
                    fc:be:19:4d:bf:98:b1:29:e6:10:4d:f9:f0:ec:42:
                    1d:dd:c1:e1:46:34:65:6a:09:76:fb:8d:83:46:17:
                    ca:99:25:d6:ae:92:7e:14:ae:7f:6f:27:29:08:fc:
                    16:c3:95:83:25:d2:c1:49:c0:44:0d:09:08:8a:c7:
                    41:05:ee:ab:62:2a:77:cb:69:2c:37:c4:93:8a:f9:
                    7e:97:ce:21:38:59:4a:01:81:8d:a2:ca:e7:91:43:
                    1e:c0:0f:86:84:d2:c4:ef:b4:59:81:ff:08:2b:49:
                    ad:8a:ad:1f:50:ae:2e:9a:80:f6:ef:bb:3b:3f:e9:
                    21:08:98:6d:c1:96:6d:0c:d2:fb:19:14:4b:8c:f9:
                    95:f4:3c:11:33:8f:f0:32:b9:26:ab:31:5a:b4:9c:
                    b0:a1:f3:3e:69:89:0a:fd:ef:ac:05:53:3c:ea:c9:
                    ea:ab:3d:0d:aa:2b:6a:28:e6:fb:c5:9d:77:ff:dd:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CC:52:3B:BC:5C:A0:C4:C2:23:FD:D3:CD:A7:3F:A1:43:8F:49:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/96c43cbf-6d30-3fa0-b4d9-1f7d5f7c01ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.172.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:bb:8f:87:f8:d9:1b:35:1f:ee:10:ce:eb:af:d6:62:fb:
         73:ac:25:3e:84:0b:b2:1c:ba:ed:19:fc:70:5e:9b:65:b5:a5:
         63:51:85:88:28:55:4c:5b:bd:97:85:ab:44:0b:f5:33:44:bd:
         d4:9a:1c:02:2e:2e:a9:4a:62:58:80:f4:bc:4e:3c:c6:74:bf:
         a6:f8:2b:2f:64:dd:70:d1:ab:df:d6:06:c9:fb:9f:62:31:17:
         a6:86:d9:70:94:d0:69:5a:d7:1a:26:22:e1:a4:2c:cf:a2:81:
         8b:21:a7:ea:9d:ce:4d:5e:82:b6:69:09:26:ad:b6:c2:dd:a6:
         12:1d:8a:3f:b4:d1:de:47:84:63:54:aa:5f:d8:e2:18:5e:36:
         78:36:ea:5e:ea:bb:00:b3:af:f0:4a:10:58:77:49:6b:f0:ef:
         03:a9:14:89:dc:eb:42:56:6d:7f:e5:d0:cc:12:8d:06:dd:ab:
         7d:af:ef:9d:9b:7c:57:64:08:87:7b:4e:c3:5c:db:49:e3:9e:
         eb:ef:81:19:dc:cf:ba:49:be:9c:be:ba:17:02:bd:16:36:cd:
         b3:53:33:9d:c3:f0:1f:19:4a:6b:12:a5:0a:95:a4:d1:76:b2:
         fe:1b:09:8d:3f:91:cc:b2:55:99:71:c7:d2:37:30:74:60:d1:
         ac:7e:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----