Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9957206c-e123-34cf-842a-77f622012750.roa
File:                     9957206c-e123-34cf-842a-77f622012750.roa (raw, json)
Hash identifier:          aUk4jdJFaWbESgbO+rEQPWUq3KrLbRS4RSd/bxIn7c4=
Subject key identifier:   F5:2D:13:A5:47:27:58:6F:B6:71:77:90:24:7D:DF:E6:ED:71:C8:54
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858417712EFCE7C79E1ECFF085200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9957206c-e123-34cf-842a-77f622012750.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Wed 09 Jul 2025 04:00:00 +0000
asID:                     51559
IP address blocks:        173.211.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Apr 2023 17:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:77:12:ef:ce:7c:79:e1:ec:ff:08:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jul  9 04:00:00 2025 GMT
        Subject: CN=c1582af6-cab2-4c95-91ef-8d257ce9b1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:b9:48:f4:e7:8d:9f:d4:f7:51:8f:4f:e5:
                    52:5b:6c:0d:65:06:8d:15:3b:ee:6e:d4:4d:18:aa:
                    90:81:aa:8f:08:12:05:da:d2:29:5a:4d:10:4b:01:
                    b4:54:af:f9:15:0b:04:98:8c:25:30:d1:c9:03:ef:
                    08:18:4a:95:f7:25:b5:d8:69:68:14:65:15:1f:8b:
                    c2:35:40:61:77:43:ab:7f:60:11:9d:ff:f5:62:57:
                    38:ca:28:2b:d6:3e:5d:f9:fb:1a:93:54:be:83:1b:
                    27:7d:d3:69:7b:be:2a:a8:f6:b5:3a:55:5b:41:7a:
                    5f:15:7d:7b:eb:83:b4:b7:64:b0:d5:1e:45:a0:0c:
                    8c:9f:d9:08:b8:83:49:5c:8a:85:45:65:d0:00:92:
                    b2:23:00:b2:59:67:2d:b6:51:3d:53:1e:9d:dc:4e:
                    d2:df:9d:ae:8b:d5:6c:87:3c:c2:46:a9:39:95:3c:
                    c2:21:c2:f4:49:3e:69:f8:11:2e:2f:74:96:21:d9:
                    91:e7:b4:0e:0e:09:c2:5d:f1:7b:3b:b1:52:80:58:
                    ee:c5:10:1b:0b:e9:c3:24:70:06:fc:bd:f1:6a:a4:
                    d3:77:74:14:e6:6d:e5:44:78:f4:4d:dd:bd:13:a6:
                    8f:5c:c6:b9:42:70:77:ac:6e:9a:4a:dc:da:4b:1a:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2D:13:A5:47:27:58:6F:B6:71:77:90:24:7D:DF:E6:ED:71:C8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9957206c-e123-34cf-842a-77f622012750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:83:b3:7f:fb:58:40:3a:b7:30:45:7d:16:bd:bb:e6:cc:60:
         11:c4:71:8a:eb:c3:69:63:93:a8:b6:e2:26:dc:d8:b3:27:9b:
         63:6f:a4:85:68:43:1c:8f:ad:c7:36:0b:c6:f6:d1:bf:38:f6:
         6c:7a:b0:42:c4:a4:fa:5a:0f:9b:a7:cb:39:24:92:10:f5:de:
         13:01:6c:fc:72:da:de:46:bc:b1:42:c1:e5:11:77:b4:23:53:
         27:0a:6b:1d:a2:c5:ca:82:ce:16:4b:08:b9:d2:36:9b:a2:45:
         4f:76:08:17:de:5c:0b:5e:57:b9:98:2b:a7:8f:9d:64:e6:9e:
         23:d0:5e:04:ec:53:87:dd:74:fe:91:c4:b8:fb:fa:9e:02:34:
         66:32:c8:a5:bd:7a:c6:a5:22:3d:ad:81:a1:e8:2a:b2:40:72:
         fb:97:b6:4e:db:3a:29:b1:a1:a0:d5:84:12:3a:72:10:13:74:
         98:41:3d:54:f1:44:4a:cf:f2:9e:29:6f:1e:ed:86:58:16:96:
         06:af:91:84:8f:40:8a:fd:fa:70:68:1e:35:dd:e7:44:40:3b:
         7c:8c:5a:96:fa:45:fc:7f:c5:20:31:4a:66:8c:7e:c7:a2:60:
         f3:8c:47:9e:d1:90:47:26:6f:fb:6f:23:4c:8a:be:a8:79:99:
         78:c8:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----