Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e9d3a432-e0d6-3c1e-8fd6-ed76e93590a5.roa
File:                     e9d3a432-e0d6-3c1e-8fd6-ed76e93590a5.roa (raw, json)
Hash identifier:          UgfwtV4YyI4Q2pJ65Lqg3to6MAShBnG35dK1iHM7FzM=
Subject key identifier:   25:9B:B0:39:37:8F:E2:AE:DF:7E:EF:85:09:42:F1:1C:D4:B6:DC:18
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584138EB27FF36DF223589D00040
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e9d3a432-e0d6-3c1e-8fd6-ed76e93590a5.roa
Signing time:             Tue 14 Mar 2023 12:00:00 +0000
ROA not before:           Tue 14 Mar 2023 12:00:00 +0000
ROA not after:            Mon 16 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        162.120.178.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:38:eb:27:ff:36:df:22:35:89:d0:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 14 12:00:00 2023 GMT
            Not After : Jun 16 04:00:00 2025 GMT
        Subject: CN=b563feb4-80c9-4ee7-9c28-4e800c86d2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:70:56:21:99:c6:65:60:fc:bd:d5:90:30:
                    d7:41:9f:a6:22:6c:dd:c8:dd:d9:bd:12:06:0f:e5:
                    b0:6a:70:56:93:c6:c3:96:6c:ee:f2:93:9b:37:c2:
                    c1:19:f7:5c:89:a6:f7:ad:33:22:a6:48:7b:cf:0c:
                    00:de:20:0f:d2:84:78:9a:87:e2:de:87:11:e1:34:
                    d9:8f:12:34:ae:16:b2:4e:08:9b:6e:e4:ef:92:00:
                    29:73:7c:c1:13:97:b3:ed:60:2f:cb:85:ab:01:a0:
                    2f:ef:6d:c4:85:f6:ec:84:32:6f:64:36:48:54:2f:
                    20:11:f7:37:a9:c0:b9:bc:b2:c4:18:3f:0e:7c:43:
                    fb:77:8b:78:71:66:20:79:de:61:f6:16:1f:f9:e9:
                    83:69:9d:13:08:a0:23:bb:28:fb:27:d9:bb:e6:78:
                    7a:d1:fb:5e:8a:46:e0:ba:26:60:e0:f7:b0:3c:b2:
                    05:b2:d7:2c:f5:10:dd:12:16:c7:0f:9d:6e:5b:7f:
                    44:a1:bf:1d:24:a5:87:e2:dd:4c:bb:cf:b6:c2:60:
                    b7:f2:54:dc:5d:b3:2e:47:5c:27:7a:8d:2d:0a:7c:
                    a7:c0:aa:b2:2e:5c:d6:f3:fe:fa:7b:93:08:9f:75:
                    00:33:a7:6c:31:34:55:0c:5e:b8:d4:d4:2a:14:a2:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:B0:39:37:8F:E2:AE:DF:7E:EF:85:09:42:F1:1C:D4:B6:DC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e9d3a432-e0d6-3c1e-8fd6-ed76e93590a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:dc:d2:b6:ba:3c:df:cf:79:58:30:6d:a2:0a:18:16:84:da:
         8a:c7:6a:77:76:54:df:2c:1f:0e:16:1f:32:fe:ec:db:ab:7d:
         79:c0:e3:c4:f3:67:71:b4:49:ae:98:26:0b:61:53:32:d1:43:
         27:ed:da:61:19:cc:8c:4c:e7:76:ba:e7:32:21:08:38:8b:62:
         96:dd:42:95:a1:7c:cf:c0:15:a8:f6:7e:3a:22:fd:17:f6:eb:
         d4:49:99:fa:08:6f:d1:5a:8b:b3:45:e6:ad:e2:ab:38:92:d6:
         66:15:da:ad:bd:db:76:ed:6e:90:1d:a9:75:0e:d3:6f:d0:38:
         c8:4f:e7:f6:c5:17:eb:ec:3d:c4:59:58:6d:9e:62:a1:fe:c0:
         9b:16:14:ea:fb:ae:2d:fe:e2:bc:01:d8:63:40:5b:21:66:56:
         f8:ff:15:59:fa:e5:50:38:0a:97:65:69:78:51:39:db:1c:4b:
         7c:0c:15:32:1f:d4:9c:2b:90:83:0b:f2:ae:12:39:ba:1f:23:
         ad:8c:be:f7:32:d1:0e:b7:3b:78:56:7c:c4:47:b5:6d:0c:78:
         b0:07:d4:37:97:b2:b1:37:de:9f:0d:b7:87:3c:ed:1f:b6:42:
         79:8e:32:b2:6d:3a:c8:2e:9a:a5:8c:ff:3f:9f:53:91:10:fd:
         a4:01:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----