Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6efbc599-d1f2-3b3a-8815-e0a5ae83f3c9.roa
File:                     6efbc599-d1f2-3b3a-8815-e0a5ae83f3c9.roa (raw, json)
Hash identifier:          TKdd8hmrXkT4RAhnMwfmtXFW5JySuEfHMXwk7mjpGcY=
Subject key identifier:   B9:DB:85:2A:BD:09:FA:60:94:18:34:7D:F1:00:07:2C:69:66:D0:67
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285841392FCC2E2F40C8BF24EE5B80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6efbc599-d1f2-3b3a-8815-e0a5ae83f3c9.roa
Signing time:             Mon 16 Nov 2020 14:57:09 +0000
ROA not before:           Mon 16 Nov 2020 14:57:09 +0000
ROA not after:            Tue 17 Jun 2025 04:00:00 +0000
asID:                     212953
IP address blocks:        216.185.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Apr 2023 11:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:39:2f:cc:2e:2f:40:c8:bf:24:ee:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 14:57:09 2020 GMT
            Not After : Jun 17 04:00:00 2025 GMT
        Subject: CN=1f871b53-c200-42bb-b825-630b5b347ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:ad:e4:af:50:d8:06:da:6b:26:f0:30:8a:
                    b4:20:a4:c2:03:02:5c:4b:ce:d0:a8:b4:9f:f1:e7:
                    6f:9f:bd:53:5f:c2:bf:cb:5b:d3:b0:39:fe:a7:73:
                    36:a1:de:7e:9b:27:f4:e4:9d:7d:4c:58:57:f8:db:
                    87:18:01:26:04:a2:32:7e:07:75:68:a2:d3:ed:83:
                    63:72:ed:ce:5f:47:d1:0b:c7:a9:19:37:66:24:c1:
                    88:92:1d:e8:a4:45:1a:21:d5:4d:a8:69:3f:74:4e:
                    b1:3f:f5:bf:5b:2c:27:4a:dd:26:3b:ca:53:1d:cd:
                    ce:00:52:d6:9b:83:19:df:8c:5b:89:c1:67:5d:26:
                    8a:c5:b3:89:8c:6f:41:73:33:28:c4:57:8e:63:86:
                    c5:a1:d2:bb:59:a9:9e:7a:4e:6c:c0:36:75:8c:da:
                    9c:59:7c:2f:67:d2:0c:22:22:ab:24:b1:9f:90:7d:
                    c2:a7:3f:e3:3b:f5:c7:9d:37:29:9d:f6:c4:05:42:
                    99:63:2f:28:61:4c:39:98:88:1e:19:eb:0e:e5:46:
                    b7:2e:90:13:d0:c6:5b:ee:26:2d:75:29:42:30:2c:
                    e9:e4:83:d5:aa:c3:45:09:aa:f8:62:c5:fa:66:f2:
                    8d:3b:fa:6a:4c:92:87:ca:1a:cf:a3:11:ae:d9:8f:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:85:2A:BD:09:FA:60:94:18:34:7D:F1:00:07:2C:69:66:D0:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6efbc599-d1f2-3b3a-8815-e0a5ae83f3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:71:37:2a:1e:ec:47:03:db:bd:93:ad:ac:0a:78:37:52:14:
         05:c8:13:6a:c7:c9:15:c7:85:3a:e5:9e:d4:f6:74:07:1d:ed:
         ab:6b:2c:85:44:42:e7:b8:19:9b:ec:f7:b9:b6:95:06:09:c5:
         29:3d:ce:fa:ad:37:cb:0f:b9:9e:be:5c:f7:15:b8:cc:47:28:
         94:7a:1e:db:03:3b:56:d5:51:db:aa:66:7c:7f:84:fb:18:b3:
         49:2d:c5:dd:79:ac:62:72:1e:b9:00:a3:02:41:5f:19:0a:fc:
         64:1b:e0:47:c5:f7:34:12:9d:34:2b:9d:7b:80:6d:6b:ed:82:
         43:ba:0e:8b:ae:33:50:a7:65:d3:c3:08:5d:6b:c4:33:78:b9:
         c0:fd:44:e4:47:ad:ee:10:08:0e:e5:18:19:e3:51:31:e6:a1:
         a3:34:a0:41:15:44:b6:72:dd:ce:25:0b:66:0d:22:27:c5:46:
         4a:f7:cf:33:83:e0:4d:93:5c:4b:e0:59:ff:5f:72:49:e7:a9:
         c2:34:6f:c7:1e:37:7c:91:27:b8:b0:20:d3:d5:9b:7f:42:a6:
         d0:56:89:ce:6a:ec:b5:6d:d9:fd:9e:83:dc:ba:b0:99:2a:e0:
         02:b9:3a:bb:14:0d:9a:74:f3:6b:b7:c4:4c:bc:bc:b7:17:58:
         d9:32:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----