Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4078012c-7137-365f-a2b5-926a8540ccb4.roa
File:                     4078012c-7137-365f-a2b5-926a8540ccb4.roa (raw, json)
Hash identifier:          QS60yB3znyf8QlhL4XpuoZZi9VOXeTMuSFL8pIvbOLs=
Subject key identifier:   4E:62:F7:52:2A:D3:28:10:1B:1E:B8:25:78:2A:F5:CD:2E:62:62:B2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583EA758E7D0CE7E7E79550EC540
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4078012c-7137-365f-a2b5-926a8540ccb4.roa
Signing time:             Fri 01 Jul 2022 13:51:08 +0000
ROA not before:           Fri 01 Jul 2022 13:51:08 +0000
ROA not after:            Thu 24 Oct 2024 04:00:00 +0000
asID:                     398465
IP address blocks:        104.247.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 14 Jan 2023 16:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a7:58:e7:d0:ce:7e:7e:79:55:0e:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 13:51:08 2022 GMT
            Not After : Oct 24 04:00:00 2024 GMT
        Subject: CN=258a5a87-5e7e-44dc-a18f-1b82596008fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:8b:29:fb:2d:83:ac:61:8a:70:55:a0:30:
                    94:25:95:53:e7:72:e2:47:83:18:2c:75:a8:86:b1:
                    87:f0:5e:fc:4c:ba:bf:c3:0d:20:c2:bb:cc:59:a9:
                    65:5b:09:1f:0a:31:de:85:25:7d:d6:e4:55:08:ac:
                    d1:ab:fb:34:4a:f8:be:f4:d8:09:74:66:74:6d:aa:
                    a5:24:a9:a8:64:66:e5:b0:2a:4c:03:3d:dd:a1:0d:
                    8e:91:46:74:f2:db:40:af:94:5b:15:3d:b9:48:dc:
                    7a:96:8a:8c:30:05:d5:68:9f:16:f8:4d:6e:c1:c1:
                    c6:2f:1a:52:04:5b:33:87:9d:b8:85:72:7c:e0:aa:
                    66:c4:cb:57:6d:8e:00:92:c2:60:fa:96:83:3a:95:
                    76:0b:88:08:f3:7d:d8:a3:db:8e:a2:ef:52:5d:3e:
                    05:11:90:02:20:61:00:f0:01:e5:3c:13:71:a0:6b:
                    61:cc:ec:ed:9f:2e:56:8c:87:88:53:54:57:05:fd:
                    48:c1:fa:80:63:36:69:8a:67:44:f4:22:4d:3f:42:
                    46:14:fc:22:32:11:00:e8:ad:27:22:ca:83:15:79:
                    59:2c:dd:84:40:c4:f0:ef:5e:49:35:20:6f:7b:3a:
                    d8:b0:90:73:80:23:1c:b8:6c:5b:e5:6b:7e:b1:a2:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:62:F7:52:2A:D3:28:10:1B:1E:B8:25:78:2A:F5:CD:2E:62:62:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4078012c-7137-365f-a2b5-926a8540ccb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:7b:30:a6:bb:83:9a:b0:0f:2a:53:b5:3e:c5:c1:29:22:fd:
         04:bf:aa:b7:b0:51:44:9e:3f:27:f3:8d:a8:5c:ad:2a:5f:bc:
         31:dc:39:a6:ed:43:e6:3e:d3:13:95:f0:e3:78:2a:8a:a8:28:
         f1:f8:e2:16:ed:6f:c5:da:b1:bc:57:60:31:35:6c:06:01:bf:
         69:2c:73:44:6b:d6:aa:e9:36:31:69:ec:fa:45:cd:d6:9d:98:
         7c:dc:e1:1c:80:48:f6:c6:24:2f:17:c9:06:7e:24:1c:77:46:
         5f:7a:9a:ee:89:9f:81:7b:ee:28:75:a7:24:31:36:af:6f:d6:
         e7:6e:99:c0:0b:12:56:a6:27:36:ee:e0:41:97:2f:91:93:6c:
         88:b8:fd:c2:ed:0f:cd:73:1f:93:57:f8:36:54:36:3c:28:1f:
         76:12:cd:27:e1:33:c8:45:a0:0c:2a:71:26:60:e7:a4:eb:ab:
         bd:14:96:32:c7:b1:41:70:a6:60:e5:65:61:fa:21:d1:6d:e0:
         f5:8c:15:8d:06:8c:a7:7a:84:5b:d6:6d:70:df:d6:06:6f:0b:
         5e:c5:29:16:40:71:06:2b:f8:88:b2:b6:9a:63:21:bf:64:0d:
         d7:c1:55:0b:e3:31:cd:4e:bc:8a:30:0e:4d:ed:3e:7e:a5:76:
         74:e7:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----