Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/958df44b-6826-3a2b-99fe-8f6e5b4180a9.roa
File:                     958df44b-6826-3a2b-99fe-8f6e5b4180a9.roa (raw, json)
Hash identifier:          QLdgkf+Qjagtm4pBhLFfndaG/6WWPYF6j7+SjEvbN0s=
Subject key identifier:   C2:67:6B:2F:D2:3C:CD:61:7E:56:24:2F:48:D2:9B:75:3E:A5:08:48
Certificate issuer:       /CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
Certificate serial:       010D0C9F43285840F0FA9C29406F83955F0690C0
Authority key identifier: 64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/958df44b-6826-3a2b-99fe-8f6e5b4180a9.roa
Signing time:             Thu 16 Feb 2023 22:26:54 +0000
ROA not before:           Thu 16 Feb 2023 22:26:54 +0000
ROA not after:            Tue 20 May 2025 04:00:00 +0000
asID:                     62657
IP address blocks:        198.49.46.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 Feb 2023 13:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:f0:fa:9c:29:40:6f:83:95:5f:06:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
        Validity
            Not Before: Feb 16 22:26:54 2023 GMT
            Not After : May 20 04:00:00 2025 GMT
        Subject: CN=122bb828-c90d-45e7-99b8-2773c6013fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d5:b3:6d:47:71:1e:50:76:7d:14:5b:2a:b7:
                    f4:e2:5a:2a:ec:b7:5f:50:a7:ce:a2:57:c4:a7:f9:
                    9d:47:20:34:9b:7c:b4:e5:87:b7:cb:5d:82:8b:ac:
                    a0:1a:b8:30:59:6b:f6:72:92:27:91:95:58:77:85:
                    4e:f9:01:d8:8d:33:84:1c:2d:d5:14:8e:52:ab:76:
                    56:17:a3:40:6d:80:70:ef:04:74:74:04:cb:e8:63:
                    18:67:b9:5a:49:91:b6:18:e6:ef:67:b1:c5:33:33:
                    65:b1:4b:bd:19:2c:1d:a0:98:cc:99:2c:b7:af:88:
                    76:25:00:db:b2:69:93:57:1d:b0:20:31:eb:53:ae:
                    e4:dc:e7:68:7e:75:2e:c4:56:f9:33:8a:33:e2:79:
                    ac:de:7e:e2:4d:7b:3a:b7:69:39:0f:6c:80:8d:c2:
                    74:c1:27:d1:e3:30:8e:22:95:ec:15:a9:8d:b0:b1:
                    97:c3:5b:e8:d8:81:c6:00:c5:a8:72:fe:b7:36:56:
                    fa:bc:04:43:18:6d:23:30:b1:7f:92:27:90:24:f0:
                    73:5d:b3:78:d8:08:8d:54:fa:2c:90:24:ff:c6:a3:
                    2d:cb:7d:b2:f8:23:e8:fc:93:f6:46:52:69:a1:d4:
                    f4:b8:f3:70:d4:b7:7a:c4:e8:43:df:6e:3d:c1:64:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:67:6B:2F:D2:3C:CD:61:7E:56:24:2F:48:D2:9B:75:3E:A5:08:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/958df44b-6826-3a2b-99fe-8f6e5b4180a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl

            X509v3 Authority Key Identifier:
                keyid:64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c7:77:aa:2c:73:5a:5a:64:f0:5b:7c:50:d7:4a:54:5d:69:
         3c:d1:33:9d:c3:47:62:64:38:3d:a4:85:59:1c:5d:d5:20:7f:
         05:ec:73:72:ad:1c:d2:e2:9c:fd:4d:64:34:30:6c:ea:80:9a:
         d7:da:95:de:d3:92:19:23:92:41:cf:a0:68:12:60:8b:53:cc:
         c7:83:6a:b4:7a:dd:b9:8a:54:12:94:52:3a:d7:02:b9:c1:b6:
         83:9f:46:f8:59:bf:16:20:36:84:c4:02:a6:39:fd:ab:56:12:
         8f:d9:15:73:01:fe:ee:3e:6b:d7:1f:ef:df:fa:36:85:1f:c1:
         7a:96:c7:a9:cb:f9:53:c6:e6:ce:a4:db:1e:b5:06:8a:3a:b5:
         1e:64:f4:d1:bc:bf:06:ec:2e:ab:1c:3b:fe:a0:12:82:57:3b:
         5f:5a:7c:60:69:59:7d:a5:bf:6a:65:5b:f3:c6:07:2f:09:95:
         cc:c0:48:91:92:24:d0:99:2f:cd:91:84:70:23:56:3b:bd:ef:
         f0:b1:86:0c:44:17:59:51:44:18:af:2e:30:d6:3b:da:41:37:
         57:c8:37:91:04:fe:f9:52:8e:f0:41:01:25:27:e2:3c:4f:50:
         e0:88:47:93:72:c2:d0:d8:1c:93:07:51:5b:e8:c4:98:4f:51:
         ae:50:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----