Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/70bd0bf2-235f-34de-961c-3985f11d202e.roa
File:                     70bd0bf2-235f-34de-961c-3985f11d202e.roa (raw, json)
Hash identifier:          6rr8VMygD6pFEzYIRHB6pDondMxzSLndg9FD/okE3KA=
Subject key identifier:   5B:10:70:11:C0:3C:00:6B:39:8D:0B:F8:B6:CA:D9:FB:7A:B1:CA:E1
Certificate issuer:       /CN=47c38599-11bd-476a-9b98-d0fb43b76d60
Certificate serial:       010D0C9F43285840FC8985B18674776C515ED600
Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/70bd0bf2-235f-34de-961c-3985f11d202e.roa
Signing time:             Tue 21 Feb 2023 16:12:14 +0000
ROA not before:           Tue 21 Feb 2023 16:12:14 +0000
ROA not after:            Mon 26 May 2025 04:00:00 +0000
asID:                     19845
IP address blocks:        192.131.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Feb 2023 18:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:fc:89:85:b1:86:74:77:6c:51:5e:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60
        Validity
            Not Before: Feb 21 16:12:14 2023 GMT
            Not After : May 26 04:00:00 2025 GMT
        Subject: CN=d49908ea-7e78-4cef-bc6f-3f10400a431a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:b6:b7:a5:46:80:05:c5:42:b7:7e:86:fa:
                    c4:e4:7c:bf:18:db:35:f6:f6:5f:c9:75:a0:d0:fe:
                    f3:e5:29:6a:3d:01:4b:94:9b:73:dc:34:94:44:ca:
                    2f:b0:e3:f7:06:1f:95:93:fd:e2:6c:c7:40:75:59:
                    2e:41:d2:e8:4f:22:b4:51:f4:8e:3f:06:ab:ec:c6:
                    17:57:57:e7:ce:bc:50:0d:61:65:69:95:4f:80:44:
                    d9:49:53:f5:bc:1a:b2:78:ae:89:3d:93:77:8f:cd:
                    84:34:28:9d:83:29:d0:4c:77:84:3a:41:32:71:6a:
                    73:0f:e2:40:85:b3:94:fc:d7:27:ec:3c:9e:fc:34:
                    2c:bf:87:29:35:3e:73:d3:20:34:a9:03:e3:35:7b:
                    f7:f7:f6:08:89:88:9f:ee:c7:b2:10:47:a2:e9:70:
                    06:a4:15:94:76:99:69:78:a9:18:4b:a4:17:ba:10:
                    a1:fa:0d:a5:d1:f5:5e:44:69:7a:94:9e:c5:c3:13:
                    de:10:df:9b:5b:70:57:51:24:91:95:f1:c6:2d:d9:
                    98:50:10:13:53:e0:eb:d8:af:8e:98:91:dc:c1:26:
                    4c:d3:13:fa:ca:6f:6f:7f:6b:fc:f9:74:1a:4e:35:
                    f5:c0:3e:e6:11:bf:c6:5d:34:81:a4:63:5e:b2:ec:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:10:70:11:C0:3C:00:6B:39:8D:0B:F8:B6:CA:D9:FB:7A:B1:CA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/70bd0bf2-235f-34de-961c-3985f11d202e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl

            X509v3 Authority Key Identifier:
                keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2f:f7:30:22:87:8f:0d:8a:d3:5d:b5:b7:4c:2c:e1:c8:2a:
         e8:b0:6c:f2:69:f3:b0:5d:54:96:a1:87:a4:c3:28:e8:0d:a4:
         92:e9:5c:64:9f:f5:24:12:79:d3:0d:08:19:12:21:1c:0b:10:
         5a:56:da:53:94:ac:62:fa:80:a2:9f:33:49:3c:0f:60:2e:42:
         97:3a:ac:fd:f1:b4:d4:90:74:5d:eb:fa:5b:bd:0f:3f:9f:dc:
         03:0e:91:7b:53:8e:5e:98:9d:ee:6e:cf:d8:f1:bd:f0:53:ee:
         70:83:43:9c:62:b4:73:cc:0f:64:24:ca:70:57:2c:f5:4e:3d:
         0d:b8:b2:b7:77:0d:e9:7f:6f:5e:67:63:57:71:cd:72:36:cb:
         e4:eb:17:48:a7:4b:f1:00:d2:20:e9:5d:c1:49:0a:27:23:a1:
         0e:96:1b:05:11:eb:30:fb:d5:38:c7:d4:78:05:20:37:5b:73:
         88:78:7e:94:8c:ae:1a:bf:9c:e9:57:59:be:23:1b:34:af:be:
         6f:2e:69:d4:cf:f4:32:8e:59:52:bf:66:ef:4f:9f:dd:8f:4e:
         78:7d:f6:63:aa:5b:d4:fd:fd:28:76:62:f8:6e:46:92:39:39:
         3f:84:57:1a:72:1c:7c:fd:7f:7a:38:93:c5:f9:2e:58:68:77:
         54:a5:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----