Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/b5f89945-27d0-3871-a676-50b0b3a572ee.roa
File:                     b5f89945-27d0-3871-a676-50b0b3a572ee.roa (raw, json)
Hash identifier:          6ninDI/fBlP7Ffx4GYhlcVy/mbQPg6P2wCgRPlF75wI=
Subject key identifier:   C0:87:B8:4E:1E:B1:B3:BE:6C:73:1C:1F:50:0F:D4:1F:B8:1C:D3:27
Certificate issuer:       /CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Certificate serial:       010D0C9F4328584104D35801333300BEEF930E80
Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/b5f89945-27d0-3871-a676-50b0b3a572ee.roa
Signing time:             Wed 22 Feb 2023 14:38:56 +0000
ROA not before:           Wed 22 Feb 2023 14:38:56 +0000
ROA not after:            Tue 27 May 2025 04:00:00 +0000
asID:                     11758
IP address blocks:        204.29.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:04:d3:58:01:33:33:00:be:ef:93:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e
        Validity
            Not Before: Feb 22 14:38:56 2023 GMT
            Not After : May 27 04:00:00 2025 GMT
        Subject: CN=d72a2b4e-6624-444f-8e41-8114a1c5086c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6d:a3:05:fc:08:17:45:1d:2f:c5:15:7d:96:
                    6b:7e:b6:3b:45:1f:63:b1:05:4a:86:1b:27:79:92:
                    63:14:76:e4:16:01:57:8d:e7:46:e0:9a:79:50:b1:
                    8c:b9:5f:01:1c:16:9f:71:2f:c9:0d:7d:3b:36:65:
                    f4:be:36:fc:70:d9:e0:04:47:b6:eb:aa:81:5f:bb:
                    2f:ad:c9:0a:67:12:e5:c3:b1:65:d6:d3:90:b7:56:
                    e0:28:86:dc:bd:c6:85:df:23:b1:36:4a:ba:02:4c:
                    a9:f8:43:e8:44:43:da:b7:43:15:d6:df:4f:52:b7:
                    c8:4c:6f:a8:c2:87:fb:6a:76:50:49:80:a5:a2:af:
                    38:e5:6a:94:49:f3:69:70:da:aa:c2:02:51:30:58:
                    d2:1c:eb:7e:a0:09:cf:57:5b:19:ed:f0:b2:cd:03:
                    98:36:65:a1:64:53:43:cb:64:08:4d:e4:cc:96:47:
                    d3:a0:5a:04:9b:08:f6:d6:1a:a3:f1:a7:ad:80:ff:
                    1b:75:9c:4c:ab:55:b4:ea:04:72:30:1d:33:0b:90:
                    6c:5f:e1:32:c4:a6:e6:b2:bc:e9:cf:6a:2a:fc:b8:
                    20:1e:15:a8:2c:c1:15:c3:f0:89:be:3e:3e:28:d6:
                    18:70:06:d0:4d:40:22:d8:fd:3c:c5:3c:6c:8a:4d:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:B8:4E:1E:B1:B3:BE:6C:73:1C:1F:50:0F:D4:1F:B8:1C:D3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/b5f89945-27d0-3871-a676-50b0b3a572ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl

            X509v3 Authority Key Identifier:
                keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:be:ea:2a:00:7d:58:1d:c1:e9:bd:47:85:46:63:a5:7b:fc:
         cd:4c:eb:a3:ce:d0:c9:dc:c7:7c:a1:74:eb:f3:3b:d3:5e:7a:
         b9:1b:93:f2:93:f4:0d:2f:33:1c:46:c9:cf:7d:c9:f8:4c:25:
         e4:5b:a6:9a:16:78:54:55:3a:35:2b:36:2b:20:65:3e:25:b1:
         29:78:ab:11:e8:bc:77:f2:72:61:22:ef:88:3a:10:8d:10:12:
         51:58:a0:9a:86:4b:24:f4:be:d1:c9:d1:4f:eb:6c:19:cd:d3:
         cc:18:27:7d:70:4c:84:90:f7:31:f0:7d:78:6a:57:ea:d0:b2:
         e1:68:1c:58:ff:ee:18:33:20:71:21:17:e7:5a:62:18:a0:44:
         66:2d:cd:35:68:60:48:ba:69:44:96:ec:f6:58:da:6f:7b:53:
         c2:9c:f8:7d:ed:23:13:04:ef:9a:a4:a7:02:29:88:80:10:4e:
         ba:1b:09:f8:3d:e8:f0:30:74:4a:1d:05:2d:da:91:e7:16:a4:
         08:bc:82:5d:39:aa:b4:b8:0a:6f:00:ff:00:d3:6d:24:f8:23:
         96:47:d6:ac:cc:a6:43:9f:97:07:98:43:63:e9:4f:89:99:b0:
         ef:9f:7a:8c:3c:5d:70:15:bd:33:e9:8f:65:90:bd:c1:86:61:
         8d:66:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----