Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/94ce553d-78d4-3121-a888-94c40b1522a5.roa
File:                     94ce553d-78d4-3121-a888-94c40b1522a5.roa (raw, json)
Hash identifier:          gh9LBSNbjDvkBCyLrHlqWdExcGHD/ZgXt/4JiHQiSbg=
Subject key identifier:   41:E4:77:AA:9C:7F:A7:50:83:2C:5C:0B:72:A6:6A:85:6F:01:9C:60
Certificate issuer:       /CN=99cd086f-b993-42d9-8f47-c65df74d693b
Certificate serial:       010D0C9F43285840BE5F238FAA8277D75458A780
Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/94ce553d-78d4-3121-a888-94c40b1522a5.roa
Signing time:             Mon 28 Mar 2022 13:36:17 +0000
ROA not before:           Mon 28 Mar 2022 13:36:17 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        162.255.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 31 Jan 2023 07:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:be:5f:23:8f:aa:82:77:d7:54:58:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b
        Validity
            Not Before: Mar 28 13:36:17 2022 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=ebc639e0-a30c-4c43-b433-d7402da7cf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:fe:f9:7c:01:8d:00:98:97:d3:c1:0f:95:
                    7e:e4:4d:92:c2:33:90:c0:82:14:0f:a0:fc:f6:2b:
                    14:92:fd:ec:68:dd:17:4f:bb:69:4b:89:44:5a:76:
                    98:1c:37:c6:16:48:1b:47:d9:93:6b:00:85:57:cd:
                    3d:bc:52:b5:8c:7f:91:16:20:5b:a4:72:49:d3:a7:
                    47:4d:05:e6:a2:8e:e7:4c:ae:ea:f1:ea:db:a9:a5:
                    a1:e1:2c:b0:b2:0d:96:ea:b4:3b:b5:64:ef:9a:d1:
                    ff:b3:36:df:4c:37:2f:8d:7e:87:a9:8a:5a:b3:34:
                    39:b0:14:9a:95:d7:2a:43:0f:1b:94:1e:43:c3:8e:
                    75:2e:b8:90:c5:7e:c5:fa:6a:6c:4c:9a:4c:46:ac:
                    7f:cf:f8:a4:ce:17:5d:2f:2c:80:11:82:db:34:fe:
                    6b:03:62:75:0d:08:7f:f1:da:a5:c3:0d:c8:50:92:
                    69:40:05:05:78:96:b7:20:bb:71:27:e2:7d:bf:f2:
                    26:7a:68:d8:87:90:e4:52:52:a2:58:b5:21:60:49:
                    d4:81:5b:87:61:09:05:69:18:bd:b7:36:83:9d:20:
                    9b:96:78:9b:6b:ba:67:f1:ff:3e:ab:f4:c9:67:e8:
                    7e:c1:77:9d:42:1f:b1:80:05:ca:0d:45:8b:dd:b2:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E4:77:AA:9C:7F:A7:50:83:2C:5C:0B:72:A6:6A:85:6F:01:9C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/94ce553d-78d4-3121-a888-94c40b1522a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:14:3e:09:9a:c4:ba:63:41:65:a0:f5:e9:d7:87:c7:4f:4e:
         58:a5:20:65:d9:57:f2:27:2d:3d:04:9d:5d:99:b7:d9:5c:d6:
         ab:d4:52:8b:1d:7f:7e:de:da:79:f4:57:e8:cb:9e:62:a1:0f:
         3b:08:5b:70:20:87:df:ae:d9:f1:21:1c:02:54:40:53:e9:97:
         f5:3f:c2:02:d1:08:91:09:47:27:be:61:51:5d:4c:41:90:23:
         35:e0:92:ef:ca:c3:03:6d:60:14:3a:57:84:cd:e9:6d:5c:91:
         6f:11:fb:fd:8b:dd:45:66:2f:a5:00:fa:02:d1:34:c1:22:36:
         b0:64:38:a4:fc:c1:1a:3a:ea:77:64:e1:b0:49:a7:e7:eb:cb:
         bd:4e:12:b7:3a:6b:5b:22:c8:16:9e:b3:e0:91:64:6d:b2:4a:
         3c:3d:8e:fe:8e:42:1b:3d:74:53:e8:0b:56:67:82:b7:26:86:
         6a:fe:6c:a7:f0:8b:1f:d6:b2:d3:92:11:e8:11:73:a7:9a:55:
         41:8e:04:29:8b:6b:20:1b:37:9f:a9:2a:0d:14:08:28:31:ef:
         f2:2f:ca:39:38:47:c2:4d:ba:bc:d5:cb:f3:00:db:54:c6:ee:
         d9:83:09:c2:9b:42:cd:44:e5:fd:86:0e:fb:98:54:4f:2a:97:
         66:ba:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----