Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ad29d72-b58a-3fa1-b782-8be7dd4b7bbc.roa
File:                     1ad29d72-b58a-3fa1-b782-8be7dd4b7bbc.roa (raw, json)
Hash identifier:          mrIIqucpUzHcB0vRJhJbbGHgKhYilIozR0omSaBJgyk=
Subject key identifier:   8E:8C:56:4E:DB:D6:33:8A:80:D3:2F:8E:36:93:25:1A:7B:A3:36:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DA1C8FA26EB03CD57DF93B400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ad29d72-b58a-3fa1-b782-8be7dd4b7bbc.roa
Signing time:             Wed 20 Apr 2022 04:00:00 +0000
ROA not before:           Wed 20 Apr 2022 04:00:00 +0000
ROA not after:            Fri 18 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        129.44.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:c8:fa:26:eb:03:cd:57:df:93:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 20 04:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2025 GMT
        Subject: CN=2e3ea3cb-566b-4e33-aa65-1d2de34658da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:f2:fe:12:57:b8:24:dc:28:1e:9f:ea:47:
                    2a:fa:da:9d:f7:66:88:05:ed:bd:a9:69:50:d8:78:
                    43:be:a2:8c:43:b5:6a:55:37:37:af:8b:1d:d2:ce:
                    85:f3:98:a7:d4:77:27:ea:68:a4:a2:c2:64:6f:77:
                    b7:57:da:e9:9c:2f:b1:b5:7b:fa:fc:36:51:4c:2a:
                    93:39:58:d8:1a:93:04:c2:0c:11:3c:77:d9:37:67:
                    57:23:e6:fd:2a:66:09:eb:63:68:50:e5:e7:0d:6d:
                    44:0b:b7:f2:f6:47:38:5f:8d:2d:2c:a6:bf:3e:c1:
                    99:d2:17:3e:7f:57:0c:f0:08:2b:31:4c:ce:ae:f0:
                    5b:2e:11:8e:9b:80:09:22:4f:da:d9:86:29:69:ca:
                    05:ed:a8:8b:39:5f:45:48:06:fa:02:c0:c9:8b:4e:
                    88:b4:29:fc:9f:60:1d:e0:cf:03:3a:c6:02:cd:0b:
                    80:b8:0f:54:df:a7:17:6e:ae:85:e0:75:b8:f2:3e:
                    b0:52:46:b9:47:d4:fd:7b:9d:26:8a:78:bf:01:64:
                    75:6c:ee:94:74:ea:3a:b9:c9:63:95:4a:71:87:3f:
                    54:b3:33:82:e5:a1:02:ac:a0:e9:52:62:cd:89:9d:
                    bf:4d:7c:9c:8b:35:5b:fa:55:6b:10:86:d2:45:9d:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8C:56:4E:DB:D6:33:8A:80:D3:2F:8E:36:93:25:1A:7B:A3:36:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ad29d72-b58a-3fa1-b782-8be7dd4b7bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.44.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:44:17:44:4f:02:5a:f2:84:4b:8f:cc:87:60:dc:3a:77:32:
         26:a5:78:5e:82:87:a4:ba:4e:81:25:f0:18:7c:83:63:08:bb:
         26:a9:8e:a0:21:34:da:5b:4c:e4:a7:32:80:ce:0a:e9:e6:ab:
         d0:d2:d8:8a:4f:a7:a7:fc:dc:ab:50:46:bb:fa:59:ef:8f:cc:
         75:86:7e:09:6a:8b:8e:6f:b5:5c:26:38:00:46:bf:84:61:d4:
         25:63:36:c8:fa:95:2a:d3:40:87:ff:d3:41:c4:50:e5:ef:56:
         a7:10:8e:6a:f6:bf:48:fd:cd:99:9a:20:ba:7c:da:ce:4c:09:
         09:58:78:b8:c6:b5:88:c8:6f:10:ae:49:7e:6b:a9:28:00:e5:
         6f:98:f2:63:93:56:9f:85:28:13:32:6e:e5:b8:e8:21:4c:5e:
         26:2b:f5:75:c0:0c:23:e9:56:2b:f7:4a:0b:df:8c:ef:4c:5e:
         e4:9b:cf:f8:fa:43:5a:29:72:ad:ae:cd:be:6f:c3:8d:4c:67:
         f1:a4:15:61:cb:b7:25:5d:21:3c:85:e4:66:fb:27:f8:2b:2e:
         ba:09:1b:06:33:c3:84:86:81:ff:49:8e:25:3f:e4:99:20:31:
         65:f9:a5:0d:5b:7c:bb:07:8a:3f:87:f6:08:9b:36:19:02:38:
         5a:c2:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----