Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/852e24bf-244d-31b9-837b-146ac334f598.roa
File:                     852e24bf-244d-31b9-837b-146ac334f598.roa (raw, json)
Hash identifier:          j64Xq+3INjdu9X0+CPX7AZQn/i/zaXiLk9bhYI+dA68=
Subject key identifier:   17:95:8A:C0:B8:9D:A0:51:F5:2C:84:6A:7D:A2:9A:A0:20:67:B3:CB
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583DF2297B384EAB78A2E95A6100
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/852e24bf-244d-31b9-837b-146ac334f598.roa
Signing time:             Sun 15 May 2022 12:00:00 +0000
ROA not before:           Sun 15 May 2022 12:00:00 +0000
ROA not after:            Thu 16 May 2030 04:00:00 +0000
asID:                     35916
IP address blocks:        63.135.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 18 Nov 2022 18:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:29:7b:38:4e:ab:78:a2:e9:5a:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 15 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2030 GMT
        Subject: CN=dff414bb-8d62-4de7-b978-621c896bde7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:ca:af:bf:95:93:f0:6f:f9:45:63:5a:68:
                    ec:fe:87:19:55:f8:02:92:ab:e4:d3:e7:a6:48:55:
                    bf:4a:85:a4:e3:fa:a0:c8:83:72:30:c4:d8:70:d6:
                    80:43:3f:91:97:d8:52:c0:c6:f0:0f:a5:1e:c7:4c:
                    90:fa:c2:61:8b:43:47:5c:06:e4:74:92:c5:f5:09:
                    9c:b1:c6:83:4c:03:30:f9:29:f6:ea:fb:69:47:25:
                    ab:3a:52:d9:e5:5a:3a:8a:b7:8f:9d:ed:cf:44:ef:
                    ff:f8:0a:f8:d7:78:1a:c1:0f:59:be:9d:0e:b3:d3:
                    ac:b8:2b:a2:68:c3:07:fa:08:89:1e:d2:a1:0e:09:
                    52:95:e5:b2:d0:ae:ca:3f:bb:35:c2:b4:68:a3:93:
                    ca:e9:9e:2b:59:12:6b:79:ec:f5:e9:c3:66:7e:cc:
                    47:1e:bb:7e:db:b3:f5:51:08:f3:46:3d:ca:b7:b6:
                    27:8c:5e:ca:4a:94:1d:c9:03:fd:d6:35:16:86:90:
                    c8:9a:f0:8d:b0:01:95:40:e2:1e:4f:08:72:fa:16:
                    41:86:4a:1a:d4:a5:4c:15:14:ea:f5:64:23:1d:e9:
                    f3:46:a3:cb:18:98:5a:3b:e6:cf:b8:c1:96:a3:4a:
                    aa:e3:d2:18:54:ce:9b:30:a1:39:23:67:10:6f:d7:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:95:8A:C0:B8:9D:A0:51:F5:2C:84:6A:7D:A2:9A:A0:20:67:B3:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/852e24bf-244d-31b9-837b-146ac334f598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:26:04:94:3e:17:9f:a9:1f:b0:7a:65:46:10:d0:b4:84:bb:
         1c:9f:20:94:76:ec:97:66:ec:96:14:22:df:c8:30:d1:7b:6d:
         b0:24:79:4e:bb:ce:3b:53:5a:61:90:06:e3:76:a9:b4:03:52:
         61:f4:98:31:ef:73:7c:d1:3d:bb:00:25:e7:df:8c:46:64:e0:
         0a:9e:41:93:49:de:e5:70:2f:f4:db:1d:23:64:84:2f:c8:28:
         1b:1a:f6:0f:bd:34:ee:a3:75:ea:1b:55:6f:73:5d:e2:bb:af:
         e3:e4:0d:ba:ff:0e:b7:28:9a:13:10:b2:0f:e2:d9:c7:25:b6:
         45:f6:db:8d:37:44:11:f7:b9:4d:cf:a0:eb:74:f2:91:f2:e6:
         a3:56:fb:0a:98:c0:68:c9:30:47:09:34:0e:50:49:68:fd:b4:
         67:48:44:61:79:b2:3a:4c:f5:16:f6:67:d3:3d:c8:c8:20:03:
         ca:3f:aa:29:e3:cb:da:1a:7f:43:3a:44:b7:ee:fc:a4:f0:e4:
         20:c4:62:88:2a:c4:c2:f7:e0:29:25:54:3d:5b:50:1f:90:f4:
         7e:e1:69:e7:30:69:3a:94:03:ce:e3:a4:01:6b:aa:db:1c:85:
         6f:0b:0a:e8:09:f1:e2:d6:73:ac:24:7b:02:f5:e8:e6:67:ac:
         a7:e1:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----