Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8bb19e8a-04b1-3226-8df7-a9e3290d4d54.roa
File:                     8bb19e8a-04b1-3226-8df7-a9e3290d4d54.roa (raw, json)
Hash identifier:          PFrA1h5iizObE1XF9Vupj5H5JTu7YSsecYH3p7JOrmU=
Subject key identifier:   B1:98:C5:94:2B:08:12:A2:83:C0:50:20:92:97:63:D1:E1:3B:59:9A
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583E97C2D5AF543BD6E21DDC7890
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8bb19e8a-04b1-3226-8df7-a9e3290d4d54.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Sun 14 Jul 2030 04:00:00 +0000
asID:                     8100
IP address blocks:        209.145.43.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 12 Dec 2022 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:c2:d5:af:54:3b:d6:e2:1d:dc:78:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Jul 14 04:00:00 2030 GMT
        Subject: CN=20b1d563-ccaf-494f-aeb7-350492156a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:c2:57:65:32:b3:18:8e:fa:cb:d1:e6:d1:
                    81:22:e4:29:b8:3b:d7:06:51:3b:c4:e3:40:0b:ec:
                    19:dd:eb:aa:5a:0f:d8:20:46:9d:8c:42:8c:41:ad:
                    b9:b2:0d:17:3d:03:ec:83:41:87:a3:75:c3:64:fe:
                    e3:84:f9:b0:5a:ed:e7:38:0f:a0:09:c5:78:79:b1:
                    29:e6:32:66:33:6c:28:83:7b:55:d4:fe:e4:8d:ef:
                    57:bc:fe:4a:bb:b0:65:52:44:fc:96:72:6a:ae:32:
                    06:f1:c3:8e:e7:14:f9:13:b5:ab:fb:11:02:a6:74:
                    d7:38:3e:17:05:d4:3b:83:93:13:2e:e6:ba:9c:e6:
                    cb:67:0e:32:d2:75:28:a3:c6:a7:93:c1:fa:6b:11:
                    87:97:64:76:87:a8:44:d0:75:47:e2:10:77:a5:71:
                    39:2e:8a:28:78:9d:76:6a:d8:78:dc:c6:e6:e9:06:
                    0d:5b:25:d4:aa:57:4e:09:44:83:27:d8:96:fa:8c:
                    91:a3:4b:52:ca:75:2e:4d:bb:9d:b8:76:43:68:62:
                    6a:1c:5c:d2:04:cb:78:98:a0:70:bd:00:55:67:eb:
                    50:06:ef:59:1c:e0:1f:0b:84:2b:63:b3:a5:44:4b:
                    02:26:e1:39:d6:32:27:13:9b:32:80:80:6c:7f:48:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:C5:94:2B:08:12:A2:83:C0:50:20:92:97:63:D1:E1:3B:59:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8bb19e8a-04b1-3226-8df7-a9e3290d4d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:41:93:00:b3:8c:eb:30:04:eb:a1:6d:e1:aa:cb:d3:0e:1c:
         f8:c3:03:4a:27:77:09:7d:19:63:b7:7e:49:4e:d3:8c:66:d4:
         4f:2b:97:7b:12:5e:1b:94:3d:ce:a0:30:5f:7a:94:a6:bf:14:
         b1:28:c1:20:68:78:af:09:9e:ba:07:3d:cd:93:12:42:5c:63:
         97:e6:0c:d0:03:ea:4c:80:b9:64:fb:56:2a:a2:6e:35:40:9e:
         c5:e4:1e:98:83:dc:11:84:c2:7a:8d:36:68:8c:a9:48:3b:5b:
         d5:ee:5c:43:f5:e9:75:23:21:d9:b8:1a:f7:c6:d8:dc:19:85:
         e6:0a:d7:83:4d:ab:36:8b:72:35:a2:1a:8a:c4:b7:42:60:68:
         c4:4b:00:f7:b8:dc:27:2b:73:30:78:b4:36:c4:32:18:65:1d:
         54:ae:31:f3:ef:dd:01:6c:64:1b:4a:a1:d7:ee:ee:34:af:8c:
         03:8a:be:19:8c:3c:61:b7:d1:b5:9a:30:33:bb:e8:a2:ab:9e:
         cd:0d:a8:73:5d:d3:22:0e:2f:a1:7f:e1:4d:fd:67:c1:08:41:
         88:a1:40:fa:48:06:c7:61:41:48:82:f7:15:7a:95:0e:e0:48:
         fb:77:ae:4f:b3:d8:7c:38:a4:a4:18:5d:fb:9c:c4:e3:a2:93:
         1a:32:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----