Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7e5cda-c7e5-3054-a9a5-a8d08eeed116.roa
File:                     2e7e5cda-c7e5-3054-a9a5-a8d08eeed116.roa (raw, json)
Hash identifier:          7dWM+7X5hnmnQsJpgJl4jCs8rxa5rFePqcUJPdx/iTc=
Subject key identifier:   37:A1:2B:64:18:E0:02:F5:A7:06:DD:F8:3E:9E:97:38:5F:97:D7:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285842464DBFA2FBA9FF96970F3A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7e5cda-c7e5-3054-a9a5-a8d08eeed116.roa
Signing time:             Sun 18 Jun 2023 12:00:00 +0000
ROA not before:           Sun 18 Jun 2023 12:00:00 +0000
ROA not after:            Fri 16 Aug 2024 04:00:00 +0000
asID:                     701
IP address blocks:        67.92.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:4d:bf:a2:fb:a9:ff:96:97:0f:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 12:00:00 2023 GMT
            Not After : Aug 16 04:00:00 2024 GMT
        Subject: CN=7b7fbf5c-efb9-41c8-b354-a8106d5ab3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:1e:c9:a6:07:05:f7:7e:65:3f:23:19:b8:
                    38:6e:0f:2c:dc:03:b8:4b:9d:70:6f:2c:ee:b7:6a:
                    d9:09:02:7e:37:02:f9:52:8c:97:37:b9:fb:32:9a:
                    69:03:92:5d:5d:fc:5e:2c:f3:a0:69:19:77:b0:9f:
                    49:0c:3c:cd:d4:4b:4f:8d:13:86:4c:19:21:69:9b:
                    d7:de:f4:b1:cb:27:91:bb:85:d8:c6:65:d9:b0:6e:
                    09:d5:25:70:2f:c3:08:bd:24:0e:c3:22:a6:72:df:
                    b6:1f:fc:73:16:56:96:84:e7:83:5c:8e:be:a7:c5:
                    41:9f:17:c6:76:bb:b4:a9:05:32:4c:72:5c:8b:02:
                    0c:ee:a2:76:b2:ff:fa:16:66:44:e0:e8:b8:b4:6f:
                    f8:67:15:0d:df:d7:e4:95:ae:da:b9:47:69:f5:79:
                    05:2a:d8:f9:fd:ca:89:87:90:62:36:54:08:72:5a:
                    b4:9a:40:a0:0c:26:e2:2d:d3:3d:78:84:89:20:3d:
                    14:63:45:c3:11:0d:d4:2d:c2:1a:01:3d:f8:d2:04:
                    87:40:a8:56:10:9e:12:9e:2b:43:0d:77:d6:90:32:
                    f3:5b:48:f1:d8:b5:87:d1:ec:19:b2:e7:30:50:b9:
                    79:7d:a0:64:43:8e:99:25:5d:aa:f2:3d:f0:d3:f9:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:2B:64:18:E0:02:F5:A7:06:DD:F8:3E:9E:97:38:5F:97:D7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7e5cda-c7e5-3054-a9a5-a8d08eeed116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.92.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:8b:c2:51:4f:4c:01:68:a4:2a:38:85:1b:67:c0:4b:0a:54:
         86:5a:e7:86:a5:7e:83:fe:d5:bc:9a:91:68:ea:77:49:2e:50:
         ab:2d:24:b4:8b:0e:00:26:1a:25:57:db:31:d4:ef:a4:6a:15:
         e9:09:48:62:75:ba:60:d1:ab:43:a8:95:55:f5:04:6b:7d:34:
         be:6c:31:60:d0:dd:e0:d0:4e:df:26:70:c2:84:2e:c5:ff:fe:
         7b:af:b6:cc:8a:61:28:a0:09:b6:60:80:a8:c2:47:62:54:09:
         c0:45:3e:90:4f:c3:6e:86:cf:9c:48:01:ab:44:6c:f4:82:84:
         3f:2c:e3:71:c6:35:7e:80:d1:a6:ee:1e:42:4f:68:36:7b:63:
         66:3a:34:4d:f0:f3:76:f8:3c:16:ea:1e:1a:8c:c8:a2:c5:32:
         5b:f6:cc:7c:33:fc:d9:a7:28:ff:1e:57:f1:16:66:dd:5e:2e:
         3c:2a:f1:4b:09:ce:b9:36:ed:f8:6a:25:8a:c6:0e:4b:df:c8:
         35:dd:f9:d3:31:12:67:f2:a4:72:4a:0c:8c:a1:69:88:b0:bc:
         68:f1:cb:33:54:be:74:c8:83:36:dd:ea:23:ac:86:35:63:49:
         d6:35:4b:c7:a1:54:f6:4f:b7:f7:33:e4:e1:34:f2:f6:6d:47:
         87:a1:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----