Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/ed2e0f3c-7e03-350a-84c9-f8eacd776e6c.roa
File:                     ed2e0f3c-7e03-350a-84c9-f8eacd776e6c.roa (raw, json)
Hash identifier:          tf4SH9535srohGFS39CohKO13MCR6ydyP7j1uZQNGbs=
Subject key identifier:   84:E8:42:86:69:CE:D0:98:CB:D6:84:39:5F:DE:39:EF:16:2E:BD:1C
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F432858418AE3D159D6489D0CC477C100
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/ed2e0f3c-7e03-350a-84c9-f8eacd776e6c.roa
Signing time:             Wed 08 Mar 2023 19:34:09 +0000
ROA not before:           Wed 08 Mar 2023 19:34:09 +0000
ROA not after:            Tue 10 Jun 2025 04:00:00 +0000
asID:                     0
IP address blocks:        128.254.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 May 2023 00:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:8a:e3:d1:59:d6:48:9d:0c:c4:77:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Mar  8 19:34:09 2023 GMT
            Not After : Jun 10 04:00:00 2025 GMT
        Subject: CN=f54f6e13-1a62-43ed-8038-0d3ebd086e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:81:48:21:67:35:ad:05:f1:7d:ba:60:58:
                    36:e0:82:b6:25:09:d6:84:e1:00:05:bc:c5:58:75:
                    b2:be:8a:a7:3f:ad:56:46:b4:9a:62:c6:71:8e:a4:
                    47:d3:6b:04:cb:4b:22:7d:60:c4:f8:f8:74:61:a4:
                    f7:0c:f6:5f:0b:92:f8:dd:d6:5d:4c:d2:97:12:2b:
                    eb:65:58:ed:9d:8d:b9:4e:81:29:9c:97:3c:28:a6:
                    66:ef:ce:b1:77:55:90:19:f3:60:75:96:5f:97:dd:
                    cf:c7:46:fa:fd:d8:a5:6c:85:27:39:fd:6b:ee:61:
                    b5:2e:26:aa:05:de:55:8c:95:53:87:4f:4d:18:5f:
                    b9:7b:79:06:21:73:a8:70:f7:3a:04:a1:2a:f0:c7:
                    c9:a6:f6:29:3c:bd:e3:1d:dc:03:04:a5:55:0e:2c:
                    77:c2:18:73:87:06:84:2e:1e:7e:ed:ef:11:f6:36:
                    88:cc:49:e1:80:89:35:34:dd:a0:bb:ca:72:06:a5:
                    cb:25:1c:ad:7d:9a:c0:5a:c9:23:28:35:cc:0a:69:
                    ef:d4:11:91:a7:4c:df:bb:58:fa:6c:0b:77:29:49:
                    77:0b:38:b9:49:3a:b4:11:8c:cb:a0:70:f1:e1:31:
                    70:fb:be:0e:52:c8:e0:52:3c:7c:4c:f0:70:2a:05:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E8:42:86:69:CE:D0:98:CB:D6:84:39:5F:DE:39:EF:16:2E:BD:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/ed2e0f3c-7e03-350a-84c9-f8eacd776e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:67:60:e4:19:4c:94:ae:0f:23:cb:98:de:b2:33:77:a3:bb:
         fd:06:ac:15:e6:d1:bc:b9:32:fb:c6:f5:12:9a:81:71:15:65:
         9c:5a:09:ec:01:20:62:b7:a9:8c:7d:1e:ae:e7:44:cd:c3:84:
         28:67:8f:74:63:80:28:1c:30:f5:2d:3b:81:c5:ce:52:93:ea:
         79:58:27:a8:bc:3c:bc:39:a3:0f:c0:a6:8b:e1:dd:a3:17:8a:
         d9:02:b2:9a:0d:71:ce:8c:7d:c0:a5:21:2a:67:e8:ca:e8:b1:
         f8:6d:f3:ff:c5:18:41:40:13:42:5c:00:62:da:d5:67:14:b8:
         59:0f:ae:42:d1:89:86:e7:6e:54:a8:37:75:d2:0c:3c:2f:f9:
         28:a7:ef:46:25:ba:aa:a0:b1:5d:c7:a2:9f:66:6e:8d:3f:2b:
         84:f5:23:29:40:fb:3f:3d:17:9f:a9:64:72:d5:ec:e6:40:17:
         d8:d3:54:df:4e:e1:63:38:64:78:75:50:00:05:17:1c:83:83:
         f6:2d:e3:da:0e:10:a0:18:00:6e:b0:b3:0f:98:15:1f:b7:fc:
         51:c4:cd:aa:f4:f8:e9:e3:9d:60:6b:37:e4:4c:56:2a:cf:14:
         d8:d1:4f:4e:65:69:18:55:3d:e4:ba:d7:ff:1a:8e:19:36:35:
         5d:e8:4a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----