Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1dbd68a1-1c54-39a9-ac82-c0a0cf40dfcb.roa
File:                     1dbd68a1-1c54-39a9-ac82-c0a0cf40dfcb.roa (raw, json)
Hash identifier:          13gjIt300L+l4RHR9Y2DZgzJIaHLdiWdEgrwxMK/UwY=
Subject key identifier:   2B:24:DD:CF:06:2E:DF:81:AF:6B:C1:80:E0:98:50:44:C8:53:07:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E048EDB59
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1dbd68a1-1c54-39a9-ac82-c0a0cf40dfcb.roa
Signing time:             Fri 25 Oct 2019 20:15:01 +0000
ROA not before:           Tue 22 Oct 2019 04:00:00 +0000
ROA not after:            Mon 22 Oct 2029 04:00:00 +0000
asID:                     14717
IP address blocks:        63.119.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:04:8e:db:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 22 04:00:00 2019 GMT
            Not After : Oct 22 04:00:00 2029 GMT
        Subject: CN=ae811ce1-5805-4639-811e-7d1325ef5cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:e3:eb:37:0b:32:dc:d8:c8:3d:63:1e:a2:
                    e6:b9:05:e5:ba:08:cb:4c:7c:1b:7b:70:fb:fd:d2:
                    73:bb:7e:46:5e:fd:3f:b6:af:c0:5d:44:0f:7d:4b:
                    37:f4:ea:96:e7:a6:d4:d8:05:c0:13:de:9b:fd:ec:
                    72:b5:3e:91:0a:b1:8d:d5:d2:ac:c9:c4:03:f0:9e:
                    87:e4:2d:d8:ac:be:c3:79:41:61:b4:17:ca:b0:d7:
                    32:d5:f1:2c:e8:76:f2:21:19:1d:de:04:fd:18:11:
                    7d:d7:db:87:6c:9f:7b:74:98:b7:4b:76:44:95:cd:
                    08:f3:9a:4d:9f:94:43:38:67:f8:31:05:0c:60:b9:
                    cf:b5:15:c7:9d:17:d3:55:74:e7:a7:7e:e7:38:c3:
                    39:5e:86:a4:44:ca:1b:69:56:b7:a5:74:38:72:e5:
                    a8:9e:f3:17:63:49:6e:ac:32:1d:2b:e3:7f:46:dd:
                    55:cc:ff:65:40:72:4c:45:c7:60:29:16:0b:1c:5e:
                    57:e6:10:83:b0:ae:51:f0:7a:6f:00:25:ce:fb:63:
                    71:74:c7:56:80:21:be:c7:1f:24:0e:00:32:48:5a:
                    31:f1:e6:83:f8:20:c5:e9:c5:cc:8a:87:b2:0b:d4:
                    1f:7c:c3:c3:f0:de:f5:14:15:9e:01:0a:23:51:e2:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:24:DD:CF:06:2E:DF:81:AF:6B:C1:80:E0:98:50:44:C8:53:07:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1dbd68a1-1c54-39a9-ac82-c0a0cf40dfcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.119.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:b7:a5:0f:44:5a:b1:43:d4:0e:74:49:3d:45:27:02:f5:
         8c:66:99:0f:21:04:b7:86:8c:5f:c2:b5:a1:92:ad:3a:cf:ea:
         45:67:78:81:de:d3:6e:ab:35:53:be:b3:12:d6:e7:52:6d:31:
         f2:aa:2e:5a:c5:bb:31:5d:5c:e2:ae:2a:07:38:87:c9:8f:20:
         18:43:69:5b:33:eb:f6:9e:82:c3:9b:e8:7b:e6:dc:f3:d7:f3:
         73:cd:ef:4e:bc:a2:fe:95:49:fb:c8:da:7d:7b:ae:c8:c7:2c:
         f1:92:b2:b8:a3:f1:f3:f9:9e:c8:38:c6:ad:92:98:71:e2:7a:
         24:6a:bb:50:d1:35:a3:26:c5:5c:4e:29:94:96:86:4f:b4:79:
         4f:76:f9:f6:dc:94:da:13:67:3c:60:9c:86:ef:cd:bc:b3:3c:
         2c:69:8c:b4:35:37:60:b3:73:b2:03:a5:67:1e:4d:29:85:a3:
         e6:28:4b:c5:ac:d8:17:4e:85:d0:30:95:32:82:e2:ee:aa:ad:
         7b:39:35:5f:e8:00:2e:7d:85:cf:50:e5:0b:25:d5:10:6d:0e:
         a4:ed:59:15:9d:a4:78:1c:46:7e:08:df:6f:77:e9:83:91:43:
         f6:75:81:4e:ac:0e:c7:86:6f:b1:b1:11:e8:e6:fb:cd:34:5a:
         ad:22:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----