Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9c55834e-2cf1-3a27-807a-fe699b591d32.roa
File:                     9c55834e-2cf1-3a27-807a-fe699b591d32.roa (raw, json)
Hash identifier:          IXcgF1ZSACzLKXmRnEVSRSSpwzpWmMZ4vE2QtcP8s/E=
Subject key identifier:   BE:91:0B:27:E3:99:34:D9:12:49:2C:70:44:48:2A:1B:39:E8:56:CE
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F4328583DA0564F241DC6CB0BE6B03700
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9c55834e-2cf1-3a27-807a-fe699b591d32.roa
Signing time:             Mon 29 Nov 2021 05:00:00 +0000
ROA not before:           Mon 29 Nov 2021 05:00:00 +0000
ROA not after:            Mon 22 Jul 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        204.197.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 28 Dec 2022 18:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a0:56:4f:24:1d:c6:cb:0b:e6:b0:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: Nov 29 05:00:00 2021 GMT
            Not After : Jul 22 04:00:00 2024 GMT
        Subject: CN=13ee9ee7-0f5a-4e49-b111-b907f20b9ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:01:37:d1:2e:42:d1:de:45:21:9f:66:29:
                    8d:cc:4b:68:a7:9b:ec:f5:23:c5:41:4e:45:13:e8:
                    c0:63:ed:85:18:76:d7:c0:a2:86:e8:ac:24:cb:4e:
                    0e:c5:c4:1e:b1:78:be:67:98:13:bf:68:6a:2f:5a:
                    fa:50:22:bd:12:53:5e:5a:cb:74:92:8b:d6:e1:07:
                    4c:a6:57:c5:d4:3b:85:ab:90:58:b0:ee:66:47:1c:
                    41:8f:4c:10:a9:7f:5b:51:f5:fa:94:d1:b1:43:64:
                    80:a8:39:77:de:66:cd:9f:dc:99:d1:c4:fc:49:fc:
                    98:73:8f:ed:d7:2e:14:5e:b9:f2:76:fa:11:f4:c6:
                    8e:87:82:63:0f:05:a4:dd:3c:7b:49:fd:90:2c:f6:
                    1e:90:fa:c9:1f:1d:a8:72:a1:2e:e2:4c:8f:4d:b7:
                    0d:a0:2d:42:11:ce:01:22:eb:84:d7:00:e0:10:1a:
                    30:2c:ca:da:68:0d:f8:ea:9a:01:4b:43:fb:55:43:
                    50:3f:7d:f8:ff:23:33:a1:57:d8:df:44:40:fd:0f:
                    a6:8f:77:4c:cb:b5:32:29:ff:fd:db:b2:24:38:b2:
                    4e:59:36:bf:76:3b:b5:ee:9c:a9:c3:d0:f7:b3:dc:
                    b1:d1:60:55:ed:82:e7:49:1f:67:ae:ee:e2:0e:56:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:0B:27:E3:99:34:D9:12:49:2C:70:44:48:2A:1B:39:E8:56:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9c55834e-2cf1-3a27-807a-fe699b591d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.197.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:2d:7c:6d:b3:bd:2c:a2:65:2c:fc:20:f4:19:ff:21:26:
         58:3f:06:23:43:43:59:0d:8b:08:29:d5:38:cf:ef:05:38:9e:
         9f:c8:fd:db:a7:b9:42:60:dd:ac:db:b3:f6:73:45:f2:5d:a5:
         61:44:ca:e6:6e:24:e9:0e:f3:54:14:42:03:81:28:ba:cc:4c:
         26:17:d5:7c:aa:55:d5:f4:3e:c0:e2:45:25:95:4c:82:42:1a:
         7c:65:e9:b5:82:26:c0:55:75:9e:a6:6e:e6:12:b6:1b:97:54:
         7c:a7:e5:e9:a6:81:b6:36:5b:ff:4d:e7:d9:6f:cf:77:fd:ef:
         93:94:c1:99:64:99:f2:1d:77:0b:35:ed:4e:7d:4b:98:7b:a8:
         55:f2:b0:5f:5f:b9:86:60:48:e8:86:a4:e2:21:d9:2a:62:32:
         12:53:3e:40:82:88:b7:82:26:89:0d:d5:66:05:d9:5c:4b:ba:
         42:19:94:ad:50:b3:3d:b9:f1:5c:f6:ad:6e:cd:62:c9:1e:a2:
         63:0a:13:e0:6f:fe:f9:20:36:dd:9c:7d:1c:5a:44:9c:ad:68:
         f7:7e:e4:d4:0e:cc:07:7d:95:ed:4d:72:92:06:ff:2a:7f:d2:
         e4:8d:f7:94:99:c8:16:99:35:61:73:02:0c:5a:c6:eb:93:13:
         c0:ef:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----