Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/1818c9a8-97d2-3906-afd9-45d376c7e716.roa
File:                     1818c9a8-97d2-3906-afd9-45d376c7e716.roa (raw, json)
Hash identifier:          4dJuHdEkdB266OpkcKsrvQJSpx+Nif4qlzVPnzRZWZw=
Subject key identifier:   D0:7C:87:7D:04:3E:B5:6F:62:BB:51:6E:13:F5:40:4C:5F:31:5F:56
Certificate issuer:       /CN=99cd086f-b993-42d9-8f47-c65df74d693b
Certificate serial:       010D0C9F43285840C0E1AB67224468FB349B5C80
Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/1818c9a8-97d2-3906-afd9-45d376c7e716.roa
Signing time:             Mon 28 Mar 2022 13:36:17 +0000
ROA not before:           Mon 28 Mar 2022 13:36:17 +0000
ROA not after:            Mon 05 May 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        162.255.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 Feb 2023 09:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c0:e1:ab:67:22:44:68:fb:34:9b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b
        Validity
            Not Before: Mar 28 13:36:17 2022 GMT
            Not After : May  5 04:00:00 2025 GMT
        Subject: CN=f861701e-0361-4b53-b809-85eb6c6bbb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:1b:f2:b8:9f:a0:61:fe:7f:fc:92:da:d9:
                    4a:28:69:a9:da:58:27:5e:26:67:82:3a:94:f3:5e:
                    2f:f9:15:84:9f:66:d2:d0:56:2d:2e:cb:7d:ab:0b:
                    85:e5:ab:44:91:4d:9a:35:82:c2:62:06:e8:56:1d:
                    81:4e:d1:d4:aa:1a:df:a8:7f:53:90:b7:d0:b3:1a:
                    05:97:cc:f4:93:85:55:8c:7f:87:93:e8:cf:56:8d:
                    a9:57:a2:f9:5d:97:5d:fd:78:ae:dc:cd:2e:73:7b:
                    11:80:79:ff:96:00:69:c4:2d:30:fa:36:b0:18:93:
                    03:1a:72:ec:3f:6c:e5:3d:c1:1d:2c:09:a4:83:87:
                    59:76:97:85:4c:af:00:89:5e:cb:c7:bd:b0:ea:29:
                    2b:78:3c:87:bf:a4:c6:5c:6a:e5:83:ec:be:2c:45:
                    78:51:23:72:9f:66:5e:ff:05:ad:04:9b:39:9e:5f:
                    5d:a6:10:d8:2a:67:db:c5:94:32:21:0e:4a:9f:f0:
                    d6:7f:5e:52:a1:09:2a:53:80:9f:fa:3a:c6:00:ef:
                    f2:4b:11:43:07:97:16:83:ed:1b:4e:cd:05:46:97:
                    b4:41:a0:8a:76:63:32:97:21:1a:99:4e:23:7a:57:
                    28:d7:45:6f:05:fe:6c:dd:10:f3:78:6b:67:61:72:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7C:87:7D:04:3E:B5:6F:62:BB:51:6E:13:F5:40:4C:5F:31:5F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/1818c9a8-97d2-3906-afd9-45d376c7e716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c3:a6:37:f5:de:38:3e:ca:c3:4e:df:ce:a1:bc:30:d7:65:
         45:de:e1:2c:6a:d6:66:b3:c7:5a:63:3f:66:91:8b:dc:ac:12:
         da:1a:80:31:10:69:f2:ff:a9:40:2d:96:47:58:a2:dd:c7:d8:
         6c:55:e2:85:26:ad:51:2a:c2:1f:07:33:f3:99:cc:40:fb:2c:
         09:de:4a:f3:c0:19:e4:83:09:68:f3:c7:f4:a9:cb:d6:b7:fe:
         0a:e6:b2:f4:f0:8c:51:dc:d9:d5:43:57:bf:fa:bb:41:05:88:
         cd:26:98:e3:f7:87:26:c1:db:31:e4:40:a0:99:0f:e8:ad:f8:
         87:d4:55:da:ed:85:71:d9:f6:b0:6b:d3:ab:81:d9:5c:a4:30:
         0f:b2:49:c3:90:d2:4b:c0:7f:08:f8:98:dc:b6:8c:d7:c5:98:
         5a:c4:a7:93:6c:7d:ff:df:f2:8c:3b:5b:b9:40:3a:64:2f:25:
         48:fe:75:d0:3b:bb:17:85:34:a0:2b:2d:37:a1:a1:88:34:f1:
         ef:fb:8a:80:33:2b:2d:ce:0d:91:26:2a:b9:20:d1:ac:29:0f:
         76:bb:ef:3d:65:69:ae:03:cc:56:ff:da:11:49:ce:bb:69:3b:
         a2:c8:3e:00:58:68:80:11:01:10:60:e0:6e:fd:64:12:1f:b2:
         21:16:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----