Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a73730e6-70e0-3860-a1a9-6f9ccd57c1f0.roa
File:                     a73730e6-70e0-3860-a1a9-6f9ccd57c1f0.roa (raw, json)
Hash identifier:          rMnNL/1NmFmR860b4P1A2xEmkjAkpR93np8jMkaD8ZY=
Subject key identifier:   52:A0:A0:AF:FD:D8:1F:FC:08:93:C4:1F:C6:BC:D6:12:4F:ED:75:61
Certificate issuer:       /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
Certificate serial:       010D0C9F432858419105C63C7F81B4805BBC7400
Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a73730e6-70e0-3860-a1a9-6f9ccd57c1f0.roa
Signing time:             Fri 14 Apr 2023 12:00:00 +0000
ROA not before:           Fri 14 Apr 2023 12:00:00 +0000
ROA not after:            Fri 18 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        185.216.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Apr 2023 15:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:91:05:c6:3c:7f:81:b4:80:5b:bc:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
        Validity
            Not Before: Apr 14 12:00:00 2023 GMT
            Not After : Jul 18 04:00:00 2025 GMT
        Subject: CN=f25f8556-d65c-4a98-8c98-b82238eaedcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:e2:fd:e0:47:a4:2a:ae:b8:72:c3:1b:1d:
                    43:4e:b5:ac:2f:11:c6:43:6c:53:41:a7:af:8d:dd:
                    8d:15:51:b2:70:ff:46:c1:64:8c:2b:40:18:1a:34:
                    2e:a1:64:18:0b:08:b3:b7:51:6d:77:e2:6c:1c:70:
                    67:eb:d4:09:68:19:1d:da:1b:71:01:b8:2f:44:ac:
                    cb:d7:e2:6b:68:d7:d0:d7:ff:6c:9e:07:ff:f1:8c:
                    34:8e:ef:bd:18:c8:b5:52:f5:cc:8e:0a:83:a2:c8:
                    3d:70:25:e2:d7:60:30:3d:e0:4e:d7:1e:85:6f:e9:
                    49:42:67:95:93:45:87:10:62:b0:91:82:23:8b:90:
                    22:60:a7:36:41:06:bc:09:42:ba:06:21:e7:b2:2b:
                    39:3b:27:fd:30:e2:e4:69:7f:a8:75:17:bb:49:cf:
                    37:0f:23:fc:da:41:ee:a5:e4:41:f3:8e:c6:16:2d:
                    ec:a8:9d:e0:54:a6:13:78:ec:b4:0c:30:ad:bc:71:
                    7a:52:de:3c:fc:0c:94:11:f6:9b:26:bf:84:ca:80:
                    d1:14:c9:7c:db:56:6b:04:93:ff:2a:b7:71:0f:43:
                    2f:7e:65:84:dc:0c:33:2a:72:c7:a6:4b:18:cb:47:
                    fa:85:b5:ee:68:b0:ee:2f:57:28:c5:9b:40:8d:f2:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:A0:AF:FD:D8:1F:FC:08:93:C4:1F:C6:BC:D6:12:4F:ED:75:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a73730e6-70e0-3860-a1a9-6f9ccd57c1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl

            X509v3 Authority Key Identifier:
                keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:cf:86:35:5b:bc:5a:8b:92:9c:34:66:46:cf:94:f2:45:
         bc:ef:28:da:d8:f1:14:df:44:44:7b:f1:a1:cc:6b:34:54:09:
         a7:c7:cc:0b:c6:a0:8c:df:4a:93:a2:5b:f6:94:63:9b:d0:df:
         86:7c:f4:7f:ef:cd:28:af:f8:0a:c4:67:da:0c:79:52:49:0f:
         eb:de:9a:43:6e:33:51:be:89:a3:14:e2:29:5c:54:f1:46:c1:
         ff:f6:72:c3:95:31:96:19:37:7e:1a:b3:e6:9c:e3:5e:41:13:
         db:e8:08:0d:d9:b9:03:b6:c4:91:23:b2:f8:ce:e1:1b:bb:e9:
         68:06:1d:70:ab:d6:2e:ec:7b:d8:a7:07:d7:31:1e:05:e8:35:
         ea:43:a6:6d:e3:a2:e8:e0:ca:43:e7:4c:be:a4:1a:57:fd:b7:
         b7:13:5e:2a:6f:81:f1:7d:18:c3:d5:e2:9e:82:ce:94:a8:6b:
         83:10:ee:bb:df:63:1e:9a:ad:cd:ae:9b:51:86:39:32:e5:3e:
         3b:a5:0c:bf:d5:49:9d:d5:99:4f:3a:c0:6e:25:25:66:06:aa:
         60:b2:11:d7:bb:20:d2:7f:59:86:b1:66:ad:7d:0d:9b:15:6b:
         c2:8b:db:a0:e8:12:51:9d:a2:6a:3c:89:fe:1b:d8:58:39:a9:
         18:41:0d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----