Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7b740abe-7b5c-3159-a263-08dd1dd04384.roa
File:                     7b740abe-7b5c-3159-a263-08dd1dd04384.roa (raw, json)
Hash identifier:          rMuxyaeEjSqMf7qxYHlVdEeDAlu+krIHQrDH7libQ6k=
Subject key identifier:   99:94:D4:B1:48:3C:4E:D8:0D:AF:9D:81:88:AD:41:4E:62:9C:73:A3
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858419F98EA3C0B80FFC4555529E0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7b740abe-7b5c-3159-a263-08dd1dd04384.roa
Signing time:             Thu 24 Mar 2022 13:53:16 +0000
ROA not before:           Thu 24 Mar 2022 13:53:16 +0000
ROA not after:            Thu 24 Jul 2025 04:00:00 +0000
asID:                     142032
IP address blocks:        69.165.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 25 Apr 2023 09:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:9f:98:ea:3c:0b:80:ff:c4:55:55:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 24 13:53:16 2022 GMT
            Not After : Jul 24 04:00:00 2025 GMT
        Subject: CN=8457c8a2-3c69-4b1d-bb9f-bf960750b190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:5b:03:cf:ce:3b:c3:ad:14:c1:58:03:67:
                    15:91:8d:c4:6d:31:4c:6f:59:df:7b:63:47:91:fd:
                    90:b7:48:4a:83:77:1f:12:7e:39:4d:e2:53:1b:f7:
                    c5:77:1c:f5:a3:b1:2b:49:40:82:45:fd:9f:2b:1c:
                    01:5d:39:61:dc:a2:02:b1:fe:8f:87:07:42:a9:1a:
                    94:de:f4:63:c6:02:e4:96:18:30:f0:2f:b9:03:16:
                    6e:57:d8:01:6b:0c:60:f6:2d:c6:08:31:d5:71:b5:
                    6b:38:cc:a2:6d:a9:6a:29:06:f4:a3:2e:da:70:4f:
                    5d:71:c8:3a:57:b0:75:73:fc:66:98:63:80:a1:4f:
                    0c:89:e3:1f:87:80:9c:ef:2d:6d:db:a2:b6:32:2d:
                    28:de:d0:db:46:b7:01:9f:37:da:f7:09:01:14:00:
                    b6:9f:86:82:85:4f:c4:e7:3f:49:23:4f:ba:55:94:
                    40:30:df:3c:83:e1:1c:da:f9:84:19:df:7b:81:39:
                    e6:e0:5e:54:b4:7b:19:06:7f:cc:a6:95:25:67:0e:
                    96:91:ce:9b:42:fa:3e:74:bf:0e:e5:32:f9:f6:c2:
                    12:dd:7d:78:d6:d1:55:21:81:8c:41:68:81:e5:33:
                    80:ad:33:d8:9a:93:22:74:41:25:ce:ec:aa:71:e9:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:94:D4:B1:48:3C:4E:D8:0D:AF:9D:81:88:AD:41:4E:62:9C:73:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7b740abe-7b5c-3159-a263-08dd1dd04384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:1e:02:c2:e0:97:ab:b2:f8:3b:3b:85:2e:a7:84:5f:c3:
         ba:05:35:0a:ac:19:6a:cd:3b:77:49:fe:07:52:6a:2d:90:46:
         ba:d7:0b:b5:b4:6b:61:c3:90:46:8d:2f:31:15:23:1a:f4:c9:
         ee:dc:15:29:05:c8:54:80:74:a7:ad:97:ba:f3:21:d2:dd:ea:
         5a:9b:7f:3e:e9:10:86:b8:79:ee:5c:c9:b1:8d:f4:93:42:ed:
         b1:f5:b3:7f:f7:ad:ab:38:ec:06:cf:20:33:65:a9:7a:6d:90:
         65:ac:f6:9e:b1:de:87:48:cb:35:2e:7f:07:0d:cb:78:f5:8b:
         75:0b:bd:5e:73:5f:7b:f0:e8:5a:74:56:81:c1:d4:77:62:93:
         b0:85:da:99:48:38:0a:0e:a0:9f:02:2b:62:53:ff:9b:67:59:
         91:7c:69:98:a6:6c:03:72:41:63:f1:dd:53:e2:b8:52:c0:ed:
         9f:6a:1f:73:e4:4d:7f:74:b4:6d:b3:c5:26:96:d2:1c:c3:da:
         f6:61:be:8d:b6:ef:bc:3f:8f:1f:4e:e0:08:90:a7:18:82:d1:
         1e:f0:db:db:09:6b:d1:66:de:52:2d:a1:1f:42:d7:2e:f9:85:
         2f:99:fa:4f:67:ae:c2:39:5b:42:c2:4b:14:3e:70:12:64:e9:
         14:42:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----