Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9788070b-faab-35cb-8386-cb6a3fc2ce8b.roa
File:                     9788070b-faab-35cb-8386-cb6a3fc2ce8b.roa (raw, json)
Hash identifier:          vyuQHYnzAypRQ1fsJPz9pMxGbvKSEpciegwYUNNZhTU=
Subject key identifier:   86:2A:0C:C1:75:41:3D:C4:69:76:AB:A7:86:48:BF:83:A4:B7:63:80
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584138EB16A05C9CEEFE2F8C7B00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9788070b-faab-35cb-8386-cb6a3fc2ce8b.roa
Signing time:             Tue 14 Mar 2023 12:00:00 +0000
ROA not before:           Tue 14 Mar 2023 12:00:00 +0000
ROA not after:            Mon 16 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        162.120.158.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:38:eb:16:a0:5c:9c:ee:fe:2f:8c:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 14 12:00:00 2023 GMT
            Not After : Jun 16 04:00:00 2025 GMT
        Subject: CN=abc96bb9-a2d5-41ad-abd7-f6ac88647f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:d4:b6:96:19:07:69:19:4c:e7:a4:01:91:
                    2d:31:31:0b:34:58:48:5d:7d:3a:c3:34:fc:34:f4:
                    af:77:63:89:c5:9f:52:63:c3:f4:ff:fe:01:e9:0f:
                    85:e6:ec:d5:02:f7:36:d2:6d:a7:bf:ae:42:e7:ed:
                    0c:c1:ef:02:f6:9e:f7:2c:45:01:73:83:e4:d1:58:
                    68:50:cc:55:0e:ee:9c:bd:d4:80:d4:e9:f8:f2:31:
                    84:57:d2:13:4f:49:6c:97:36:e2:7f:a1:a5:b2:1c:
                    ef:b4:07:7e:8d:d7:b5:0c:74:e1:9f:ab:f4:97:9b:
                    78:ba:1c:93:3b:0e:7b:47:de:3b:77:c3:ff:20:7d:
                    8b:73:32:7c:a2:a8:9c:48:2f:6e:a4:d9:27:4e:5e:
                    fc:56:19:bc:0e:97:fc:cb:82:c3:8c:54:64:0a:c6:
                    e6:8d:1d:53:3d:59:1c:97:f9:70:1d:3f:9a:e3:f4:
                    a4:ea:c7:db:87:19:5f:ff:64:a9:f6:6f:7d:e7:25:
                    9c:93:49:5d:93:27:e4:37:12:7a:10:4f:b4:d1:b7:
                    cf:d6:21:c6:6a:03:96:7a:53:f2:45:01:38:08:41:
                    5e:f6:ea:ba:47:c9:4a:c3:28:d7:51:c1:1e:41:45:
                    ff:73:67:32:dd:db:bf:5f:90:3b:3f:48:46:23:60:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:0C:C1:75:41:3D:C4:69:76:AB:A7:86:48:BF:83:A4:B7:63:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9788070b-faab-35cb-8386-cb6a3fc2ce8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:ab:02:87:22:20:5d:82:86:cb:1f:0f:1b:25:98:47:94:
         b7:b7:ae:0d:d0:44:b8:11:00:7e:0c:9e:e2:b0:41:f5:e2:18:
         13:83:4e:47:27:2d:84:d3:6a:4b:d4:50:9b:36:b6:9a:1e:36:
         50:55:42:d9:99:d2:9a:d6:30:64:93:7c:83:de:3c:4d:44:de:
         99:24:17:06:f2:a9:b4:1e:bd:83:c5:26:a4:8c:63:d0:00:9d:
         72:ba:1e:6e:8c:6e:85:a8:77:d0:d2:f5:5a:6e:de:f8:56:63:
         20:9a:41:b1:0c:f5:08:ad:92:a8:d6:23:e1:28:ac:4c:6e:be:
         b2:0c:ae:e8:20:b0:27:f6:fa:70:ab:ce:3e:8a:bf:46:3f:07:
         21:2e:d8:d4:99:46:47:59:36:3f:95:4c:ce:28:75:68:7b:e2:
         56:72:b1:04:30:35:fa:13:63:3d:fc:aa:d1:39:f2:ce:b5:f4:
         9a:0d:10:2c:bf:96:ea:40:8b:aa:e2:48:26:2b:7a:c1:90:49:
         d9:0b:57:be:fb:65:47:d3:3e:95:ec:ad:9a:d2:46:47:40:1e:
         c6:b5:f8:fb:ef:84:4d:97:2b:94:d7:4c:89:9d:21:b9:30:28:
         72:41:b2:c4:44:a1:4a:d4:1c:56:f5:6a:bd:f4:5f:69:dc:cf:
         1a:51:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----