Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09bf5f44-3500-3e1a-a6ab-3ec49dc30802.roa
File:                     09bf5f44-3500-3e1a-a6ab-3ec49dc30802.roa (raw, json)
Hash identifier:          eeACldmCtmqYMX2HRo+oVgWRtwBHQba+owY4eWUlKDw=
Subject key identifier:   D3:47:BD:5A:72:3E:FE:92:30:AC:5A:D1:B9:DA:05:65:F4:96:9C:B6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840C2CD67B9622B5BB7E4F56940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09bf5f44-3500-3e1a-a6ab-3ec49dc30802.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sun 25 May 2025 04:00:00 +0000
asID:                     7922
IP address blocks:        104.165.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 04 Mar 2023 20:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c2:cd:67:b9:62:2b:5b:b7:e4:f5:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : May 25 04:00:00 2025 GMT
        Subject: CN=68236324-464a-4b1b-9aed-a0e57b800eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:79:ee:62:8e:e5:89:4f:2d:37:68:74:1c:
                    07:39:1b:db:8b:11:6f:6d:b7:ec:90:84:0b:82:8a:
                    4e:6c:a8:0b:92:a4:27:d7:d2:bd:ee:76:8e:92:da:
                    dc:a6:c7:76:4f:57:a9:9c:3f:48:b5:53:e4:01:c6:
                    3c:b5:b7:0f:f8:2d:18:af:07:0c:b5:56:20:0c:36:
                    2e:d0:7e:fc:75:7f:49:84:ed:c5:42:fe:d9:80:b2:
                    5b:2c:d2:90:e1:62:fd:83:2c:0e:1b:10:3b:47:5e:
                    7a:35:3c:99:9a:0b:f9:f1:2e:18:f1:30:16:dd:05:
                    c4:56:a0:64:13:8c:f0:19:58:fe:62:e3:61:ee:7b:
                    c0:04:6d:b1:0f:0d:09:3f:4e:05:fe:3a:c1:7b:21:
                    d3:08:bc:bb:f5:cf:7d:38:0e:85:0a:65:58:69:94:
                    cf:06:9f:9e:e8:51:17:e3:fe:3f:a4:e9:b7:1d:7c:
                    64:49:ae:ea:b9:88:5e:e1:c5:07:cd:9d:14:67:53:
                    c9:f2:5a:80:6c:cf:19:dc:84:58:e2:59:6b:91:d6:
                    7c:17:01:69:19:df:54:52:de:0a:4a:3e:1e:dc:0b:
                    3b:20:5c:40:b5:be:f5:dc:93:66:ac:01:c3:69:a8:
                    0c:1e:22:4b:3b:2a:a3:a6:bf:14:7c:23:fb:b7:f5:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:47:BD:5A:72:3E:FE:92:30:AC:5A:D1:B9:DA:05:65:F4:96:9C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09bf5f44-3500-3e1a-a6ab-3ec49dc30802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:be:50:40:ea:64:58:08:09:b7:01:f1:8d:4e:bc:ce:2f:
         c8:c9:f1:cf:fe:41:c2:02:f3:dc:86:3e:ed:39:43:28:12:78:
         fa:41:ff:03:e2:8b:4d:96:d6:7e:ca:54:1d:45:b5:f3:c6:0b:
         7b:a1:a0:5d:34:43:52:72:e4:06:c7:a6:f9:51:c1:28:88:1c:
         cf:05:09:8a:53:3f:44:22:1b:3e:4d:c6:7f:c0:b2:6e:98:2b:
         8c:96:af:2e:07:62:3a:67:44:01:08:91:ad:ad:19:d2:29:85:
         86:46:0f:7e:00:fb:c6:94:64:60:66:80:0d:39:ec:55:c7:f0:
         a7:6f:a2:ed:c6:a3:80:1c:53:93:40:5e:95:a3:f8:2e:54:32:
         cf:24:f8:40:b1:3f:55:8d:d2:08:d9:7b:65:c4:bc:e3:a9:98:
         aa:47:06:63:67:28:8b:ba:ef:a4:9c:a1:31:74:f4:1f:24:73:
         f2:13:e2:c1:52:61:20:f0:03:c7:08:d1:7e:c3:2e:41:cf:b9:
         e3:3e:a6:d7:c3:54:1a:ba:13:5e:ec:42:da:c7:19:d5:4f:4c:
         cc:de:f9:85:0f:27:c3:06:06:0b:3e:89:61:1a:c6:09:3e:b6:
         7c:32:c7:3e:3a:46:29:37:91:9b:26:c1:0b:d8:0b:fa:f8:8d:
         d6:4d:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----