Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7d398982-f654-3dd0-9c46-65d957c19f4f.roa
File:                     7d398982-f654-3dd0-9c46-65d957c19f4f.roa (raw, json)
Hash identifier:          NWFXPVEkIiX7o3su66HMdg3ogcvtsJLyUJS5bdgcExI=
Subject key identifier:   E0:A2:C4:95:43:52:CE:05:AE:6D:C8:2E:B9:56:6F:CC:25:8F:AD:62
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858419F99C299408C06E3F47AB300
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7d398982-f654-3dd0-9c46-65d957c19f4f.roa
Signing time:             Thu 24 Mar 2022 13:53:16 +0000
ROA not before:           Thu 24 Mar 2022 13:53:16 +0000
ROA not after:            Thu 24 Jul 2025 04:00:00 +0000
asID:                     137443
IP address blocks:        69.165.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 25 Apr 2023 09:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:9f:99:c2:99:40:8c:06:e3:f4:7a:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 24 13:53:16 2022 GMT
            Not After : Jul 24 04:00:00 2025 GMT
        Subject: CN=d151967f-83f9-438c-86b1-48b2b4617b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:96:74:c4:60:f9:e5:7a:55:d5:a4:15:dd:
                    f6:eb:41:82:c1:41:87:cd:08:29:61:e4:d1:27:d8:
                    00:ec:b6:93:f3:40:64:e5:0c:9a:c0:13:be:f7:79:
                    a8:25:19:7b:4b:25:6f:ae:91:4c:65:a9:21:70:b8:
                    02:92:8c:2c:76:0d:c7:2b:7c:20:87:81:8e:e7:a8:
                    a0:5d:ee:9d:6c:55:a2:fc:fc:22:3e:53:c5:1e:fa:
                    a1:ab:49:c0:cf:39:de:0f:cc:0f:54:84:2e:64:93:
                    f7:2c:5c:88:9f:fd:29:c3:63:bb:3d:58:e8:49:49:
                    bf:4f:c6:de:7c:5c:74:02:52:40:8a:9c:62:bf:31:
                    9e:18:18:ca:83:b8:32:87:a7:14:60:2f:9f:18:7c:
                    ad:7b:69:e7:be:a1:da:cb:8a:a2:cb:bb:d0:93:e0:
                    9a:a8:e0:7a:3a:63:5c:6a:be:2e:4a:c1:9e:96:e9:
                    f5:23:5b:c1:7d:a1:b5:b4:13:e2:41:82:71:71:dd:
                    6f:b1:2f:24:73:8d:a7:26:9a:e3:08:44:de:fb:8d:
                    e8:af:54:99:e1:53:d1:02:5c:4d:8c:fb:22:9d:7e:
                    f1:8d:69:22:32:7f:9b:fd:bb:3e:eb:6d:f3:4f:d1:
                    de:23:32:5a:b9:46:ed:0c:d9:cd:b5:b0:04:9f:30:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:C4:95:43:52:CE:05:AE:6D:C8:2E:B9:56:6F:CC:25:8F:AD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7d398982-f654-3dd0-9c46-65d957c19f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:37:59:8b:c3:c2:32:4a:b1:13:90:00:a8:18:32:05:ff:74:
         e1:71:a4:3a:cf:44:73:da:6d:79:44:68:5a:e9:9a:3e:03:19:
         2c:f8:97:d1:f3:cb:b1:ad:49:29:94:11:92:a9:29:d7:bb:31:
         ce:d5:9d:ae:54:43:1d:19:c8:e0:6f:f6:83:53:bd:91:e7:2e:
         7a:99:dc:09:97:66:b7:26:e7:c9:6f:36:88:2f:5c:f2:12:1a:
         aa:f8:67:13:ed:12:5b:74:58:aa:d1:78:b3:7b:b2:45:be:6f:
         ad:39:a8:ac:a3:8f:c2:95:ba:88:9f:0b:77:d3:f0:ad:9e:e3:
         8a:89:42:00:09:47:f9:6d:da:df:9f:d0:a9:e6:a4:25:ad:0b:
         ad:b1:3c:82:4d:8b:99:96:9d:c4:88:16:ae:fe:6c:00:e2:80:
         4a:58:a9:c2:1e:e3:f4:3b:bd:34:ab:13:a6:ee:94:ad:eb:e8:
         b5:04:b5:46:b0:11:c2:e1:f0:ed:83:56:b5:38:24:0a:55:2c:
         a5:71:8b:47:60:78:6c:c0:2d:d4:d8:31:43:68:0e:1c:87:27:
         59:d3:cc:0f:0a:a7:91:02:be:06:40:7d:fb:0a:fe:cf:c8:a7:
         43:a1:73:ac:83:eb:c5:19:2e:76:c5:ca:f8:9d:bc:ac:fd:89:
         a9:14:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----