Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4b7ec90c-0042-3ea8-b53c-5980fe5502b5.roa
File:                     4b7ec90c-0042-3ea8-b53c-5980fe5502b5.roa (raw, json)
Hash identifier:          SXqaIfXoZyOhSa9SfHf4ns7RE8aBrRFLHuLEjk270RY=
Subject key identifier:   31:4B:0D:69:5A:36:DE:20:AF:72:E0:6B:76:45:EF:BE:57:34:75:D5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840E65EA07F3CAED469DED0A076
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4b7ec90c-0042-3ea8-b53c-5980fe5502b5.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sun 18 May 2025 04:00:00 +0000
asID:                     210439
IP address blocks:        173.211.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 Mar 2023 17:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e6:5e:a0:7f:3c:ae:d4:69:de:d0:a0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : May 18 04:00:00 2025 GMT
        Subject: CN=2483e429-6a6f-4e65-9ceb-b416f029c45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:44:da:6e:b3:4d:23:cc:1c:29:73:92:66:
                    7b:44:48:39:8e:be:b8:4c:fe:83:68:77:f4:02:13:
                    c8:12:62:5f:29:8b:df:3e:9c:30:2a:b0:7d:a7:74:
                    f5:b2:44:da:4a:d4:47:55:32:cf:d7:e7:73:bb:9e:
                    3b:cf:a1:fd:cb:75:8a:57:d6:1b:6b:a8:a6:bf:6a:
                    d3:53:02:f6:31:8a:a9:1b:2d:f2:31:d6:e7:4f:c8:
                    82:0b:5b:99:c5:c7:4a:4e:8b:98:b2:09:9b:06:d8:
                    1c:19:0f:30:56:9e:9f:f4:9f:86:18:79:ce:b7:a4:
                    57:50:84:fb:e5:d0:09:e8:df:83:25:14:0d:5c:bb:
                    a3:5f:42:25:17:6a:2f:7f:a5:f3:12:95:c4:34:35:
                    b4:34:b3:a1:56:2c:7d:b2:0f:a4:01:91:de:1d:59:
                    0b:39:87:7a:81:55:62:85:d4:f0:9f:99:5b:29:42:
                    2f:96:11:26:9b:2f:9f:42:83:2e:86:40:b0:69:55:
                    e7:92:bd:1b:7b:04:ee:5c:30:97:d1:bd:a7:18:1f:
                    38:41:a0:a8:d6:c8:c5:09:e2:d9:40:b2:83:d2:81:
                    c2:3f:d6:f2:0c:5a:d4:c4:af:ae:63:a7:cd:97:60:
                    02:e0:df:55:62:57:9f:fb:b5:34:d0:a1:34:50:04:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4B:0D:69:5A:36:DE:20:AF:72:E0:6B:76:45:EF:BE:57:34:75:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4b7ec90c-0042-3ea8-b53c-5980fe5502b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:97:c8:13:06:63:9f:34:42:f4:7f:f0:2b:b4:40:c2:e1:bb:
         ee:12:af:fa:eb:08:e5:24:c5:75:47:36:67:58:e9:22:fe:5a:
         19:ff:12:3c:e8:57:5d:43:f1:c5:e4:a5:25:e1:60:51:06:a3:
         71:3c:d6:1a:c1:ee:a5:e4:5a:8d:f7:e5:70:ad:e3:4c:f4:a8:
         21:22:85:3d:80:fd:cc:5b:2b:4d:72:6c:9b:25:73:be:5e:f6:
         be:f1:4f:43:8c:d5:f3:09:dd:b2:a8:20:c3:b5:d8:99:81:a5:
         a6:f9:58:65:c9:16:dd:7f:eb:9a:25:81:c7:6c:3e:16:f5:c8:
         bd:7f:86:24:79:36:ab:9e:95:09:a0:09:81:12:bf:84:5a:f6:
         ac:9e:48:b5:67:eb:3f:75:97:1d:b1:5a:22:57:72:a3:5f:85:
         26:b6:ba:05:9c:91:f6:d0:2f:a0:82:ef:f4:11:e5:3e:99:00:
         ae:42:16:fb:8b:b6:0c:6c:ad:4a:e7:ed:e3:cb:9b:6a:f5:8b:
         2d:29:08:ba:d3:60:42:ce:0a:3f:26:4f:52:bd:70:17:4b:87:
         c3:68:84:2c:4f:fb:9e:9e:47:d6:43:3f:40:45:44:ee:3a:fe:
         d3:f6:79:e2:eb:cf:8a:af:37:de:6b:8c:14:20:f8:d6:0c:0b:
         76:ae:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----