Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e97ea03-8984-3845-b469-52e2072675af.roa
File:                     0e97ea03-8984-3845-b469-52e2072675af.roa (raw, json)
Hash identifier:          UL9mWYwGmkQF2YSNyZgU5wpy3eM55Nt3cSp7GItX7OM=
Subject key identifier:   12:D3:2A:8A:19:A2:0A:3B:EF:FE:55:04:2F:16:12:11:32:ED:AC:9C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583E0381E11366565C8CD9502000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e97ea03-8984-3845-b469-52e2072675af.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.248.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:03:81:e1:13:66:56:5c:8c:d9:50:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=94e54d1d-9ce0-47cb-a233-768d6cbc08d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:6e:d1:dc:d9:20:d9:fe:a4:60:b0:b3:a5:
                    0b:34:06:4f:39:a0:ce:f0:f5:c9:bc:3b:63:5e:a4:
                    aa:35:25:fe:2a:36:16:2c:b4:1b:3c:14:bc:c4:33:
                    69:6b:d1:46:6a:23:8a:1b:31:b8:51:2f:71:ae:95:
                    83:35:0b:bd:3e:9f:dc:cf:8b:18:c9:3b:a9:40:45:
                    89:1d:1c:bf:b8:3c:1c:e9:eb:a9:e8:c2:5a:34:19:
                    1f:df:e8:53:0a:cc:fc:b0:3c:fb:4a:3d:3f:c2:b7:
                    71:87:54:21:b0:64:b5:fe:04:d7:53:2d:ac:1b:3f:
                    50:1e:f5:a8:fa:3c:54:bd:87:3c:c9:0a:4f:cf:17:
                    7e:6f:55:a5:40:16:03:d8:32:cb:74:75:4c:59:bd:
                    83:e3:59:ec:8e:0e:b9:86:07:9d:8c:4c:90:10:fe:
                    54:d8:c8:98:93:99:77:99:f7:29:4b:ab:66:56:c6:
                    57:45:26:94:d7:83:56:8b:51:76:5c:d4:b4:5f:16:
                    0e:31:27:f1:1d:bd:fb:e6:fe:b3:aa:2d:a0:39:5d:
                    1c:e7:a2:5a:d5:0f:b5:50:46:72:e1:8d:06:43:1a:
                    69:50:9c:b1:b2:e3:31:a4:ac:e3:3e:75:2a:ef:9e:
                    2d:eb:79:96:91:e2:eb:11:fd:4d:17:41:70:ea:53:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D3:2A:8A:19:A2:0A:3B:EF:FE:55:04:2F:16:12:11:32:ED:AC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e97ea03-8984-3845-b469-52e2072675af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.248.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:6f:23:b9:f4:5f:8e:92:aa:d5:82:e9:08:14:b0:b7:6d:
         50:ae:9b:df:e7:3a:34:ff:db:27:4f:0c:50:08:6f:d5:25:f2:
         7a:a2:9c:a2:32:61:d2:c9:6b:21:99:1f:34:2b:92:92:70:6a:
         62:40:56:0f:dd:67:59:1b:7a:19:70:ae:84:52:f5:dd:5a:98:
         d0:ff:e8:2b:4a:32:d6:1f:af:25:11:0c:7a:5d:e7:a7:85:e3:
         34:f2:2c:5a:c3:10:a7:3e:92:4c:33:2e:58:8b:b9:9c:35:63:
         f2:f4:92:a6:3c:4e:0f:7f:27:31:80:d7:fc:89:71:84:75:e2:
         b4:53:ae:89:64:ad:54:69:34:22:9b:8d:5d:6c:12:17:83:15:
         93:cb:c1:19:02:2e:51:94:1f:22:03:8a:3b:5c:22:eb:db:94:
         14:ba:92:e0:9a:b2:88:2c:79:02:59:3c:a3:bf:8a:1e:d3:b4:
         8e:0d:46:c6:b1:12:a1:2d:56:f8:b5:5d:01:90:ca:0a:f5:89:
         74:c5:5c:47:91:28:4f:ad:72:d2:90:66:fa:f7:f9:5b:95:c0:
         b1:68:e7:51:c1:50:b1:a9:cc:44:86:13:35:4a:13:51:c7:d2:
         40:55:d1:7a:3c:c6:b6:6a:ce:cf:51:94:64:07:3b:9e:38:6e:
         9a:22:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----