Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/e2a1f000-32b9-3162-81e6-2a39bce733dc.roa
File:                     e2a1f000-32b9-3162-81e6-2a39bce733dc.roa (raw, json)
Hash identifier:          v4nlXKluEdeVcPjqKJsTqbFqoNhcodcdtYd8NJdodog=
Subject key identifier:   A0:FD:EB:39:D3:2B:2F:75:67:FF:7D:B0:58:56:ED:AD:56:42:98:49
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328583F89901C8DD509D06E345059E0
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/e2a1f000-32b9-3162-81e6-2a39bce733dc.roa
Signing time:             Mon 24 Feb 2020 17:38:47 +0000
ROA not before:           Mon 24 Feb 2020 17:38:47 +0000
ROA not after:            Mon 13 Jan 2025 05:00:00 +0000
asID:                     13760
IP address blocks:        142.190.94.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 10 Nov 2022 13:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:89:90:1c:8d:d5:09:d0:6e:34:50:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 17:38:47 2020 GMT
            Not After : Jan 13 05:00:00 2025 GMT
        Subject: CN=8f65bb42-ca6c-4d69-91f6-5483c84abfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:b3:ee:81:ea:03:a6:1c:32:08:db:2e:ba:
                    3b:56:8e:88:70:49:14:c2:f2:39:50:3d:56:60:c9:
                    23:69:7f:0a:07:ea:2b:61:91:ff:69:3b:9d:85:68:
                    72:95:bb:38:6d:b4:cb:ff:d4:07:91:15:90:0f:ae:
                    b2:03:97:79:c3:67:81:45:3f:9c:2f:63:12:69:98:
                    53:51:c4:e6:c1:57:02:7b:74:61:7c:ea:03:3d:e7:
                    5e:a6:c9:5f:9c:01:dc:55:06:dd:51:8a:ca:b8:a9:
                    1f:d5:a0:f8:1f:1a:58:37:65:e4:46:3f:21:db:c8:
                    24:fb:b8:36:32:b2:34:8e:4a:82:64:bc:62:59:24:
                    65:0e:7a:6b:72:bb:05:04:7b:97:dc:a7:88:e9:8c:
                    21:24:59:62:17:f2:05:c7:23:78:66:04:e3:fc:36:
                    81:45:49:d5:7a:ac:3e:93:3d:17:1b:10:37:f2:cf:
                    2c:88:80:8b:1c:3f:5b:d7:a3:1e:8e:53:97:f7:3b:
                    df:cb:8c:ee:18:f0:0f:56:0c:98:6c:93:c0:a6:8c:
                    14:f5:13:eb:b0:43:8d:35:d4:b2:d9:eb:c2:18:a9:
                    ca:d7:43:07:67:c7:09:e0:77:28:fd:fc:3f:81:8e:
                    b3:ab:ba:d8:42:f6:ec:5f:58:6c:fa:00:1a:a0:e6:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:EB:39:D3:2B:2F:75:67:FF:7D:B0:58:56:ED:AD:56:42:98:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/e2a1f000-32b9-3162-81e6-2a39bce733dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:98:20:9a:e1:a7:34:b0:b6:e4:6c:c8:b2:9b:fe:59:ca:33:
         3f:29:3b:12:38:b9:1b:8d:07:ec:06:77:be:6b:b0:a6:4d:78:
         36:ed:70:e1:3c:33:ca:05:74:ff:a3:9a:72:73:99:ed:da:c8:
         91:8b:43:dd:5b:87:51:0d:00:d8:74:1b:50:96:ef:ac:dd:71:
         36:d5:64:0e:94:06:dd:6c:d8:01:b0:f0:c8:a8:dc:b7:9c:1d:
         8a:11:97:fb:17:5b:b6:16:8b:87:4c:cb:97:16:63:86:04:e0:
         51:4c:a2:16:7b:06:82:57:b5:3c:7b:34:e7:71:5e:84:02:a5:
         a2:dd:43:38:0a:36:35:dd:a3:6d:cc:cc:43:67:3f:4b:78:9f:
         18:ba:34:3e:ea:6b:1b:ee:b6:84:07:8a:c8:66:b0:c5:d9:a1:
         59:c4:ce:56:96:91:13:11:fb:f3:12:79:50:fb:2a:0a:26:84:
         54:f8:8c:a5:82:a0:9b:b4:e5:7e:93:10:8e:94:75:00:25:6b:
         90:89:d8:a7:a1:36:11:24:2f:8d:da:4a:43:67:97:75:9a:8b:
         3f:2d:22:b9:5a:d4:b4:85:52:46:8b:26:3c:ca:54:97:29:ba:
         2d:cb:f1:ee:ab:1f:a3:61:93:1a:3f:d2:f8:84:53:eb:2a:91:
         ae:50:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----