Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb5a06a2-ebb2-32c9-b4bc-a1508536e7a9.roa
File:                     bb5a06a2-ebb2-32c9-b4bc-a1508536e7a9.roa (raw, json)
Hash identifier:          oAlqVd4q0Ht/wRAS0tuMzvm8BU3qgzsqt0i/audZds8=
Subject key identifier:   46:64:C3:77:D3:CB:92:BB:DC:8E:31:98:54:A0:6F:10:18:0C:68:F2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858408A2EFACE6C8FF25C23E68F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb5a06a2-ebb2-32c9-b4bc-a1508536e7a9.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 15 Apr 2025 04:00:00 +0000
asID:                     62240
IP address blocks:        216.122.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Feb 2023 17:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8a:2e:fa:ce:6c:8f:f2:5c:23:e6:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Apr 15 04:00:00 2025 GMT
        Subject: CN=c770b7d4-7d13-482a-8883-a3a064da7d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:80:87:37:ab:b3:bb:43:7d:1d:76:ce:22:
                    65:86:07:ae:fc:c2:73:30:ff:36:e0:0e:dc:7e:d3:
                    71:5d:ae:77:f4:ad:c5:2d:80:1d:71:a2:ef:ef:ce:
                    79:5f:73:1b:ee:d8:c4:99:c0:dc:96:00:12:3e:fb:
                    75:59:bd:6e:51:74:4f:2e:e2:ab:ed:9c:8f:60:93:
                    41:08:26:12:da:46:d5:a7:43:9d:eb:d9:95:d4:f3:
                    78:89:4f:70:65:a3:0e:38:0c:f3:fd:20:e5:1c:78:
                    9c:83:26:e3:99:5c:40:7b:58:35:17:f7:8e:ca:0b:
                    e9:55:04:93:e8:b0:4c:a8:3e:5c:ee:34:c4:14:6b:
                    91:10:c1:12:d4:7c:c3:33:73:ae:da:a7:b7:ff:57:
                    7d:f5:5c:11:4d:01:35:9f:ca:18:70:0b:89:a4:ea:
                    6b:fd:f3:37:1d:0c:a3:1e:b0:18:d9:1e:3e:fa:d0:
                    9a:97:e6:36:fb:e5:38:da:3a:ce:81:fd:cf:c9:c0:
                    8a:ad:ea:12:8e:cc:0e:f6:dd:ad:d7:29:ab:a3:de:
                    2e:8d:ea:9c:e5:53:fc:ee:07:ae:0b:dc:d5:88:66:
                    5a:b4:4f:26:ee:6d:35:cf:5a:8f:59:ec:79:72:32:
                    14:50:74:ea:69:34:be:43:54:52:62:c2:97:f2:39:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:64:C3:77:D3:CB:92:BB:DC:8E:31:98:54:A0:6F:10:18:0C:68:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb5a06a2-ebb2-32c9-b4bc-a1508536e7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:2b:1e:f1:61:23:2c:90:17:ba:6a:4d:7c:16:70:db:dc:
         bc:be:d9:cc:e5:56:b2:53:df:9d:be:82:ec:15:29:68:75:7a:
         2b:80:b3:d9:34:93:51:6e:f4:f4:78:b3:1a:dc:b2:68:fd:da:
         4f:b9:13:ad:69:12:25:b8:75:2a:6f:6a:bc:91:a1:f2:75:60:
         ff:42:86:4e:ac:8c:96:d8:5f:5b:14:c5:54:8d:a3:5e:76:9f:
         03:81:31:5a:9b:98:1e:0b:3d:d1:cf:ae:66:91:01:03:ce:a9:
         75:41:93:a9:60:79:f3:1e:02:1f:fa:42:5c:fe:a2:4b:61:79:
         dc:5e:6e:7f:77:4a:89:bb:8f:94:9d:27:42:21:c6:88:3c:96:
         8a:b4:2f:e4:f7:10:d1:b1:54:f2:31:9f:9c:84:58:ec:55:0c:
         1c:a2:05:2b:54:72:2c:f5:4a:3d:d6:9f:ad:97:44:31:37:44:
         05:b5:1e:14:07:e0:19:1b:78:5e:29:0e:f7:ff:57:42:74:6e:
         95:59:80:0f:e9:d0:22:e4:9f:75:d3:20:77:3d:9c:f2:43:20:
         a3:17:7f:f9:3c:0d:28:ba:49:22:46:4e:68:59:f2:0c:3c:dc:
         c9:dc:85:74:04:c6:29:61:d8:6c:84:4f:b6:39:9d:f0:dc:79:
         b0:7c:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----