Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/ebc63384-785a-341b-ac62-227523e4278e.roa
File:                     ebc63384-785a-341b-ac62-227523e4278e.roa (raw, json)
Hash identifier:          QT5M23ZUYRqdK9148E8u/0D7J6mKCLl47Ucia+mU9mc=
Subject key identifier:   88:0B:38:4E:54:B5:09:4A:32:1E:52:C4:99:8A:1D:C8:37:7C:DB:E6
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584187BEFFD8FD36ED153B8FA740
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/ebc63384-785a-341b-ac62-227523e4278e.roa
Signing time:             Tue 11 Apr 2023 12:00:00 +0000
ROA not before:           Tue 11 Apr 2023 12:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     834
IP address blocks:        64.113.12.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 May 2023 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:87:be:ff:d8:fd:36:ed:15:3b:8f:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Apr 11 12:00:00 2023 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=e68365b7-008f-4cc7-9197-7003f21836fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:55:3e:5c:4f:56:29:00:4b:6e:3c:58:bf:
                    33:cd:90:53:ba:ac:32:6f:d1:82:e6:c9:52:3b:5c:
                    48:a8:f9:71:f9:e5:23:b4:93:f7:4d:5c:86:ad:b8:
                    b6:da:b2:2c:49:3c:14:bd:2d:e2:06:5a:2a:59:ec:
                    d5:b8:f2:69:1f:33:2d:8c:3a:7a:e9:5e:c6:cb:b1:
                    e8:d1:12:1e:3b:1b:bc:a0:22:dd:68:8d:c0:d7:a6:
                    b3:6e:e8:b8:8c:84:b6:29:39:c4:ba:71:9e:6c:16:
                    97:5e:80:93:fc:cc:04:7c:c3:1a:11:c9:36:04:73:
                    dc:b6:63:3d:02:fe:47:d6:9b:d1:36:c8:e5:c5:4d:
                    01:c6:77:64:e7:a1:35:3c:88:42:af:93:bc:de:2d:
                    55:c6:40:4a:04:ae:f3:2a:fc:ee:1a:29:96:77:1e:
                    45:b8:b4:99:28:74:8c:e6:cb:99:32:b3:79:56:50:
                    65:f0:ea:fb:a8:45:77:28:c7:d5:ea:5c:a4:15:9e:
                    64:dd:95:ac:d4:54:3c:8b:92:1f:76:da:c9:a4:49:
                    c2:a5:00:81:64:a7:42:f9:d0:aa:c3:62:10:65:c6:
                    8a:e2:01:77:72:5a:0a:b7:b9:18:8e:17:99:65:5b:
                    90:7f:dc:e6:b6:5b:7f:d8:b4:04:09:4f:ef:e4:dc:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0B:38:4E:54:B5:09:4A:32:1E:52:C4:99:8A:1D:C8:37:7C:DB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/ebc63384-785a-341b-ac62-227523e4278e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:6a:58:e8:23:7c:f4:b2:6d:d2:4a:78:42:cd:10:04:b3:
         7c:0b:ba:77:50:91:81:27:aa:2e:16:95:10:d0:de:9c:91:df:
         d0:96:32:b6:83:b5:cb:6a:67:7d:38:8c:ad:5f:5c:85:75:53:
         ec:a7:ee:f5:93:56:04:99:b5:0d:97:8a:74:59:f3:2e:ff:4b:
         4f:c7:42:63:c4:cc:6d:bb:63:3f:df:da:b9:8a:c2:0f:22:85:
         75:ac:ec:e8:fc:34:f2:24:52:31:e7:17:24:c7:6a:e5:ac:ca:
         ff:aa:e9:b3:5a:02:36:b6:23:be:0b:29:75:98:72:02:71:77:
         3e:59:4a:f8:f9:4b:6a:bb:3a:15:a7:64:e2:33:77:8d:20:d0:
         24:a7:16:06:9e:c2:7f:63:7b:3d:44:1e:e5:24:2b:04:33:e1:
         8d:72:29:4f:1f:f1:61:2a:e0:80:80:b3:0e:f7:74:4e:1a:93:
         9c:72:c5:57:71:cb:2c:7e:c7:fd:3e:39:0b:7b:0b:5f:7d:77:
         83:b1:7c:ad:7f:b7:bf:71:4a:08:89:74:f5:76:db:80:8c:d8:
         60:f7:05:fd:62:7e:f6:d3:46:42:e6:d0:34:55:db:02:f7:ae:
         ad:fd:1e:b3:64:0e:55:70:dd:6f:70:52:7a:5f:46:18:45:e2:
         23:b8:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----