Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2add6239-6ff1-319c-9f72-938fc542effa.roa
File:                     2add6239-6ff1-319c-9f72-938fc542effa.roa (raw, json)
Hash identifier:          +4diZqwVmKR3Kbg1h//uQarxw4AjmUg+ZfOjLOHcM2A=
Subject key identifier:   93:95:D6:08:24:3C:E9:D4:CB:85:CE:A8:FC:72:81:64:9D:B8:5D:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB5384A9E12D96FD174548BA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2add6239-6ff1-319c-9f72-938fc542effa.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        108.12.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:38:4a:9e:12:d9:6f:d1:74:54:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=b21a7518-e7aa-45cd-9acc-78fc4bf4734e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:40:bc:53:0d:98:d4:97:de:ac:cf:14:30:
                    bc:57:5a:fd:40:3a:7d:1a:db:8c:0a:33:d7:f0:6f:
                    0f:d9:c9:97:5b:06:97:21:28:f7:23:d9:b2:48:83:
                    f9:a5:35:8c:98:67:8d:16:02:0a:20:ec:75:2d:b7:
                    b0:1f:86:21:a5:87:75:20:25:b8:35:d4:ef:c6:be:
                    66:48:c8:af:b0:54:ec:3f:b9:a5:06:8f:db:e8:c4:
                    87:26:d6:b1:32:2f:bb:c5:ac:ee:61:9f:50:b5:c6:
                    0e:4d:c8:8a:49:24:ed:90:ee:1c:d7:cd:13:c0:3d:
                    34:c3:6d:85:ce:f8:f0:3f:c6:dc:c5:c6:33:94:bc:
                    6c:35:b7:48:40:04:0f:a5:67:81:b9:5f:93:48:f0:
                    b7:02:77:b1:a5:6d:44:f9:fa:b1:22:8f:6f:19:10:
                    72:c7:bb:fe:f0:63:a5:28:ac:47:3d:28:8e:5c:84:
                    7d:81:a4:06:56:97:a2:89:82:07:75:d3:14:7a:b4:
                    23:7b:28:d1:3d:3b:a0:b4:07:14:52:71:32:e9:e7:
                    0b:ba:5f:a4:67:18:51:6e:bc:73:7f:c0:de:9e:ed:
                    e8:8e:29:5b:33:2f:76:b3:a2:90:81:81:ec:83:ea:
                    03:2c:d3:bb:f0:7a:84:71:0d:5c:58:07:38:db:c3:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:95:D6:08:24:3C:E9:D4:CB:85:CE:A8:FC:72:81:64:9D:B8:5D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2add6239-6ff1-319c-9f72-938fc542effa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.12.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:cf:82:2f:0b:e8:76:5a:78:17:f0:ff:47:08:4f:db:d0:da:
         1c:8e:d0:63:e0:1f:4e:13:62:fc:33:44:b5:db:74:d0:f6:15:
         47:9e:6f:5b:43:34:ac:75:d8:63:d2:f4:1a:b4:5a:8f:cd:e7:
         ef:f1:17:31:15:fe:74:93:67:5e:ed:50:79:28:27:d5:00:84:
         63:f4:a6:45:80:d8:26:99:fe:d0:25:78:08:b3:c8:a3:ac:52:
         f5:f7:b9:b5:8e:2d:ab:b5:57:1e:55:c2:50:72:44:8e:1d:e5:
         a8:f8:65:e2:ce:50:bf:70:50:85:5b:d0:64:27:4c:f9:b1:10:
         fb:a1:5e:ca:24:d7:e3:b4:96:72:37:2b:15:e6:b6:20:a4:3d:
         ba:23:c9:72:5a:7d:a4:2a:79:45:74:51:cf:fb:ba:a5:77:04:
         c7:25:b9:e1:2f:38:97:d0:48:ac:70:1f:c3:2e:c0:71:8b:0a:
         db:37:38:a6:08:3b:ca:0d:50:8a:8c:68:72:b9:cc:4a:4e:2f:
         bb:ed:df:89:af:28:76:32:76:24:4c:b5:95:b9:d7:dc:8e:a2:
         e6:7d:34:24:c2:8b:a7:99:ea:08:31:50:16:ca:a3:c9:90:0e:
         66:c7:5d:38:fc:26:41:20:e0:7c:0d:bd:6d:f4:e0:ff:53:2a:
         51:75:5d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----