Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/f54a0eba-04d1-3cae-8ae6-e3c0c082cd49.roa
File:                     f54a0eba-04d1-3cae-8ae6-e3c0c082cd49.roa (raw, json)
Hash identifier:          Hrxm0YP66LgsxKQt4pq/p0Cm3iTusTNhDf3neGjOBYE=
Subject key identifier:   F4:17:6E:A0:19:7C:68:76:C7:B4:0B:FD:49:6E:1B:CE:16:D2:23:E4
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328583FD81B50C4B60AA1DD2CCB4200
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/f54a0eba-04d1-3cae-8ae6-e3c0c082cd49.roa
Signing time:             Fri 07 Jan 2022 16:23:26 +0000
ROA not before:           Fri 07 Jan 2022 16:23:26 +0000
ROA not after:            Tue 11 Feb 2025 05:00:00 +0000
asID:                     61317
IP address blocks:        165.140.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Jan 2023 16:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d8:1b:50:c4:b6:0a:a1:dd:2c:cb:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jan  7 16:23:26 2022 GMT
            Not After : Feb 11 05:00:00 2025 GMT
        Subject: CN=f38f2f62-0380-4c4e-9434-c31248f7067f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:7d:e3:4e:4f:f1:b2:3d:7a:38:3c:1b:22:
                    a0:14:a0:0c:fe:0c:bf:6a:30:76:80:83:58:93:ed:
                    ea:c7:71:4a:15:a1:26:26:89:0d:3b:65:be:af:d9:
                    44:8c:d3:93:13:68:fc:32:ab:91:3e:02:e7:7d:63:
                    68:07:3b:ed:c2:7c:bc:5b:70:d2:0c:04:e3:4f:65:
                    14:76:b9:0b:5c:4b:2f:38:8f:19:58:98:a7:10:e4:
                    81:d5:87:8f:11:8e:d0:34:38:fb:2f:f5:c0:0f:46:
                    98:7b:66:8e:14:56:65:72:39:bc:0f:9a:40:c6:44:
                    88:69:9b:ba:4d:ce:15:e4:0f:27:8f:c0:18:a8:54:
                    68:f9:90:b1:95:ce:cf:e3:71:20:06:1b:f5:04:b6:
                    f4:76:69:72:64:46:67:f4:7b:01:81:95:56:8d:41:
                    c1:31:6d:d5:06:73:34:82:5e:21:b8:9f:00:68:6d:
                    80:ec:69:72:12:6d:32:a9:61:d2:0b:46:3a:26:5b:
                    2f:00:ae:f5:be:7c:8f:39:cd:e4:f1:76:06:43:d2:
                    e2:b8:c4:71:60:82:09:16:ca:58:03:ab:11:e7:58:
                    a6:ef:2b:1c:d9:5f:bd:30:f0:06:eb:87:88:6e:bd:
                    22:f2:dd:c5:3a:92:62:f2:54:45:4f:f9:24:cd:fc:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:6E:A0:19:7C:68:76:C7:B4:0B:FD:49:6E:1B:CE:16:D2:23:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/f54a0eba-04d1-3cae-8ae6-e3c0c082cd49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:f2:e1:2b:94:c0:40:1b:42:8c:11:43:9f:b1:05:d1:b6:
         5e:0b:c9:45:f7:53:f2:84:2a:c2:a2:2b:60:11:5d:df:80:e6:
         b2:5a:ac:9b:74:3a:a8:2e:65:03:cf:dc:7d:de:41:f3:1a:3c:
         68:cf:c4:4b:2c:d5:fc:12:58:d0:58:6f:51:c0:88:32:44:8b:
         41:cf:da:ed:2d:af:5f:82:2e:99:c3:bd:8f:e6:a8:a6:ef:0e:
         00:72:d8:45:9a:c0:87:0f:89:5f:43:9f:dd:e1:df:67:fe:e5:
         d3:43:92:eb:48:e4:14:4b:21:ae:9d:d9:63:f1:24:7a:4f:d9:
         45:aa:9e:75:cc:b7:83:17:22:91:f9:40:01:72:14:80:bc:91:
         1a:ce:63:1c:ec:9a:04:3d:dd:a7:d0:64:90:5d:4c:ad:31:4a:
         fa:16:17:63:fe:35:a9:55:44:6d:f5:21:09:43:76:27:37:b2:
         81:77:1d:fa:9f:61:8c:ba:bd:c1:35:f3:5a:e5:5d:d5:ad:27:
         f5:ae:6c:a5:51:3c:08:cd:6c:1d:5b:ba:59:d3:ab:e5:64:dc:
         f8:2a:25:85:53:04:f6:87:fb:1f:6a:e2:2d:89:4a:15:7c:e9:
         b2:b7:4f:bb:19:a6:19:a6:9a:9c:dd:08:37:11:4f:e8:ed:69:
         d4:60:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----