Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/699915ca-91c7-3fa2-b3e2-6427de9e800b.roa
File:                     699915ca-91c7-3fa2-b3e2-6427de9e800b.roa (raw, json)
Hash identifier:          7KvyVcw1gh5uaZf700LC0B5xdCuPac9zSTC99dITC0k=
Subject key identifier:   87:A6:E2:E1:5B:DA:D4:58:B5:B8:D1:3F:65:FA:3D:9A:35:9B:F5:90
Certificate issuer:       /CN=db859a2a-df82-4532-a984-71176499699e
Certificate serial:       010D0C9F43285840360B4031AF834C20489E9200
Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/699915ca-91c7-3fa2-b3e2-6427de9e800b.roa
Signing time:             Mon 12 Dec 2022 14:24:26 +0000
ROA not before:           Mon 12 Dec 2022 14:24:26 +0000
ROA not after:            Sun 16 Mar 2025 04:00:00 +0000
asID:                     14618
IP address blocks:        208.83.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Dec 2022 03:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:36:0b:40:31:af:83:4c:20:48:9e:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db859a2a-df82-4532-a984-71176499699e
        Validity
            Not Before: Dec 12 14:24:26 2022 GMT
            Not After : Mar 16 04:00:00 2025 GMT
        Subject: CN=a253982d-e08c-47fa-b677-b0ff43deca7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:c9:f7:6b:8f:67:6d:6e:14:47:5f:8e:10:
                    09:7a:48:49:49:26:be:6d:d3:b4:08:06:82:a7:6a:
                    84:ce:74:e8:7c:54:86:f6:43:27:cd:77:72:97:e0:
                    51:c3:bc:05:68:9f:ee:3b:2b:f6:a5:a5:23:d3:73:
                    35:4e:5f:1a:5d:ba:da:cc:0f:c4:19:91:c8:e3:66:
                    9b:9e:3c:23:f0:e2:5d:90:09:e7:01:b6:5f:bc:86:
                    6d:46:e2:c5:59:67:de:c1:ba:ed:02:b6:42:27:3c:
                    36:63:20:95:89:1b:ed:ac:c6:dc:bb:e2:b4:4e:47:
                    73:47:f3:a6:8e:18:af:8b:c2:23:cc:d2:02:c1:4a:
                    f3:d1:19:c9:d6:71:c5:e1:62:cf:8f:87:a6:bb:f1:
                    fd:b1:37:bd:48:da:0c:52:c4:63:87:1f:d3:c2:33:
                    1b:05:62:77:29:68:c4:cd:a4:a3:d2:5b:e6:ec:3e:
                    de:49:06:71:12:a3:6f:49:09:de:ef:bc:3e:4c:f2:
                    53:76:37:a6:37:7c:fe:75:86:d2:8c:2c:49:33:c9:
                    8a:f8:1e:c7:ec:6c:20:a6:c2:9c:ed:1b:f7:52:ae:
                    34:54:bd:f5:98:dc:5d:26:8c:91:26:cd:6b:c9:de:
                    a8:26:a6:d1:42:cf:c6:07:b4:7c:a9:fb:f4:25:03:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A6:E2:E1:5B:DA:D4:58:B5:B8:D1:3F:65:FA:3D:9A:35:9B:F5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/699915ca-91c7-3fa2-b3e2-6427de9e800b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl

            X509v3 Authority Key Identifier:
                keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e8:49:e6:d3:72:5a:7e:9c:2c:75:14:da:7b:a7:1b:c0:b3:
         e6:a2:1d:62:f5:b0:b7:e3:7a:37:b8:1e:bf:99:6c:ce:2e:12:
         08:25:a3:b5:67:46:42:4b:22:64:cf:a3:0a:0f:fb:fe:99:5e:
         3f:29:f6:e9:81:56:f7:5c:b8:10:f3:ae:4b:84:1d:c6:3d:27:
         34:e5:c9:93:ad:fc:62:f7:25:b3:f0:83:79:72:a4:96:e5:ee:
         f9:ee:77:40:c5:da:cc:87:f9:57:23:28:95:4f:a4:3b:f3:52:
         e9:38:c8:fb:f3:cd:95:c5:ff:08:11:bd:6e:8d:03:73:1e:f0:
         a6:1b:a4:11:34:16:6d:fd:e0:f0:14:3c:02:77:7d:f9:3e:d1:
         ef:aa:ad:2c:b3:1e:bb:63:ec:ee:3a:5c:b7:9d:d9:4f:7a:05:
         3b:14:e9:f8:22:16:d4:3f:06:42:ff:42:f5:f7:f8:43:84:22:
         0e:8b:bb:99:03:5f:19:90:5d:0e:20:5a:17:5d:42:e3:5d:b3:
         0a:09:a9:fa:10:7a:b2:ec:03:dd:df:65:a4:fd:e4:14:3b:cb:
         37:4e:b8:dc:4d:aa:cd:38:12:fb:64:0a:fc:d8:75:1a:20:35:
         1e:35:a2:9b:b4:f8:bc:3b:c1:21:66:fe:e9:97:b5:f3:0e:c7:
         b8:0e:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----