Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/bb3b7715-f953-3c4b-bd3a-c097c75b1c87.roa
File:                     bb3b7715-f953-3c4b-bd3a-c097c75b1c87.roa (raw, json)
Hash identifier:          /0jqtpp0y70KB7CSWC5aUb8wYgJP2RaVOoj75A6cW6Q=
Subject key identifier:   00:B2:8B:50:CD:49:17:E4:14:78:30:DB:48:40:89:6D:2F:39:53:47
Certificate issuer:       /CN=7116114d-1634-456d-8393-b81a373b3490
Certificate serial:       010D0C9F4328583D488E5DE2268558859BED3B00
Authority key identifier: 69:65:50:08:ED:E5:B1:1F:46:7D:3E:D2:21:26:5F:E9:19:53:63:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/bb3b7715-f953-3c4b-bd3a-c097c75b1c87.roa
Signing time:             Mon 02 Aug 2021 04:00:00 +0000
ROA not before:           Mon 02 Aug 2021 04:00:00 +0000
ROA not after:            Thu 20 Jun 2030 04:00:00 +0000
asID:                     61138
IP address blocks:        104.224.54.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 18 Sep 2022 15:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:48:8e:5d:e2:26:85:58:85:9b:ed:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116114d-1634-456d-8393-b81a373b3490
        Validity
            Not Before: Aug  2 04:00:00 2021 GMT
            Not After : Jun 20 04:00:00 2030 GMT
        Subject: CN=23ec2f7c-3a83-4d87-a373-55ec87743324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:e2:92:22:a4:e1:99:24:b8:b8:61:7d:65:
                    ca:6f:64:4a:24:a0:3d:91:f1:b6:89:30:1d:e3:2e:
                    5c:b8:03:2e:0c:ec:69:58:e7:b8:94:ba:d2:c7:04:
                    fd:1c:d9:0e:50:01:6a:2c:65:e9:a8:06:35:41:33:
                    2f:40:3a:b4:37:bd:0b:d7:6d:b2:2f:93:bc:e3:4f:
                    d1:09:e6:8e:bc:cf:3f:0c:71:ed:4c:4a:55:2c:eb:
                    db:8a:e5:cc:0e:ea:d7:36:cb:ff:ce:51:61:a3:79:
                    9a:05:ce:1f:bd:f8:bc:b8:58:50:fa:87:e8:96:1a:
                    8e:6e:56:b0:f6:5d:6b:21:6a:99:3a:5c:5b:86:59:
                    36:79:da:eb:44:92:1f:b6:f3:39:54:7d:90:9b:52:
                    6a:f6:16:d3:e4:95:c2:71:49:c1:bc:94:72:f0:23:
                    cc:f9:2b:4e:5a:5e:78:04:eb:ed:ff:b7:1c:c9:2e:
                    9e:a4:6a:43:b8:ca:82:2d:08:ad:04:1c:62:6f:27:
                    00:46:7a:9a:ce:63:5f:b0:59:b8:98:22:46:95:53:
                    da:20:e1:ce:ba:c0:bb:4b:2e:c1:bd:65:f3:fc:00:
                    aa:e0:db:72:15:35:3a:38:df:35:5e:60:9d:f2:46:
                    55:4e:e9:46:c2:07:86:93:fe:dd:ee:23:0f:c0:5e:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B2:8B:50:CD:49:17:E4:14:78:30:DB:48:40:89:6D:2F:39:53:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/bb3b7715-f953-3c4b-bd3a-c097c75b1c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/7116114d-1634-456d-8393-b81a373b3490.crl

            X509v3 Authority Key Identifier:
                keyid:69:65:50:08:ED:E5:B1:1F:46:7D:3E:D2:21:26:5F:E9:19:53:63:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:67:ac:e6:83:42:5c:f7:96:e9:2b:57:f5:01:6d:e6:42:71:
         b3:58:f2:97:86:0b:05:46:b7:d7:a8:c8:73:1d:f7:09:52:6c:
         bc:06:93:4b:96:2f:2a:03:1f:70:a3:eb:18:af:9d:9f:e9:3f:
         1d:94:64:1b:b5:4d:36:5b:00:2e:08:8e:de:ca:b7:f3:78:d0:
         90:73:23:0c:35:24:c2:5f:d9:e0:6d:65:8c:06:ce:01:60:70:
         e9:b6:4c:76:48:83:8b:54:d3:0d:97:56:23:60:2c:17:4e:bf:
         d7:f2:09:0a:4b:82:65:89:dc:58:2d:37:72:da:2b:18:0f:43:
         31:b5:21:ea:9b:5e:99:70:94:b8:ff:b8:77:fa:66:0d:f1:35:
         1c:5a:8a:44:4f:42:78:25:aa:cf:00:eb:a1:65:c1:da:4a:c4:
         dd:91:59:7d:df:9c:94:4b:f4:9b:ab:de:02:65:5c:6e:43:f0:
         35:6d:41:aa:3c:49:95:1d:dc:2e:d9:01:8e:d4:a2:89:f5:7f:
         1c:e3:de:2a:83:70:b5:fd:39:4f:a2:2b:a7:88:cd:c6:8c:d0:
         2d:5c:55:91:1a:00:f4:4c:9e:49:9c:de:bb:14:e9:84:e3:a9:
         89:eb:b1:af:65:bb:1c:49:3d:a0:7e:5b:2a:64:ba:5a:f5:e8:
         b5:c2:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----