Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37be9aab-83a0-36ba-a758-b61047b52ddf.roa
File:                     37be9aab-83a0-36ba-a758-b61047b52ddf.roa (raw, json)
Hash identifier:          eyfzGgnuBTWzm5KPou3TtWRUXKHIaKd+gOCwe1uo40U=
Subject key identifier:   16:47:90:0F:1F:85:EE:B1:F6:B3:7B:DA:26:60:A4:B5:D9:43:D8:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E04910EA1
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37be9aab-83a0-36ba-a758-b61047b52ddf.roa
Signing time:             Fri 25 Oct 2019 20:17:25 +0000
ROA not before:           Tue 22 Oct 2019 04:00:00 +0000
ROA not after:            Mon 22 Oct 2029 04:00:00 +0000
asID:                     14717
IP address blocks:        63.89.226.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:04:91:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 22 04:00:00 2019 GMT
            Not After : Oct 22 04:00:00 2029 GMT
        Subject: CN=e60c8f70-4ec4-45fd-9d8f-54bd82568ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:e3:99:d6:9e:23:f2:92:b4:71:08:28:63:
                    33:cb:54:cf:4a:fc:10:7a:c7:57:e6:12:97:8a:fb:
                    46:91:6c:bd:af:39:7f:36:64:d3:93:db:0a:70:c4:
                    e4:8f:46:26:17:1e:f2:73:f5:11:31:0b:67:a1:f4:
                    a8:4c:1c:9f:24:42:9b:0d:02:e3:36:13:1e:c4:2e:
                    45:fa:1c:3f:af:cc:58:ae:99:bf:ae:49:8d:ff:11:
                    c7:42:af:6d:b5:72:69:25:f5:16:46:5f:b2:a4:03:
                    f6:40:37:e5:3a:82:2d:5c:45:8f:69:55:19:be:b7:
                    d9:e9:ed:f1:78:7b:dd:b5:99:4f:d1:b9:66:e0:56:
                    d7:25:d7:de:9d:32:c6:6a:f1:5c:2c:02:48:8f:de:
                    c1:3b:ea:eb:11:71:5e:d6:36:cd:34:b8:09:28:ae:
                    67:32:94:bc:18:53:d7:53:68:9a:97:de:59:f1:77:
                    2e:b6:10:cd:67:b8:d0:33:15:8e:61:51:ac:5a:ae:
                    a5:e8:85:89:07:a1:12:51:0a:36:39:1f:a8:c0:cc:
                    cf:80:6a:b4:18:6b:b8:b5:27:fe:7f:a1:f1:c7:85:
                    c9:55:fd:de:dd:22:a3:67:0c:19:04:45:7f:e0:d4:
                    e0:e3:43:8d:20:68:65:eb:81:75:e1:a8:44:23:60:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:47:90:0F:1F:85:EE:B1:F6:B3:7B:DA:26:60:A4:B5:D9:43:D8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37be9aab-83a0-36ba-a758-b61047b52ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.89.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:07:79:3b:4e:83:a0:03:5d:b3:f1:7b:fe:53:2a:ec:dd:27:
         5b:24:93:81:d3:c4:10:3b:dc:47:85:ec:06:e3:29:0c:6e:35:
         cf:75:f4:bc:86:31:88:8e:d1:64:ae:54:e6:74:e6:1c:2f:b5:
         80:43:98:ad:7d:f6:99:a3:b6:9e:5a:dd:c1:0a:8f:68:35:c4:
         07:b0:16:e5:73:97:29:27:2c:61:53:50:93:9d:b2:42:cd:ac:
         4d:74:c6:87:3c:63:72:8c:e9:39:3f:75:eb:6e:82:27:98:6c:
         a1:91:b5:72:52:e3:a5:7c:e7:1c:b3:be:56:37:7f:01:6f:48:
         d4:76:7d:ed:6a:fb:c9:13:53:d4:d5:23:fc:b1:0b:01:48:72:
         8e:9b:e1:5e:bb:5c:c1:0e:43:b9:b2:81:89:f0:f2:bd:8c:74:
         ae:c6:c8:9c:e4:81:29:61:54:3d:c6:8a:31:67:d4:82:77:c3:
         3e:d3:a3:0f:10:43:48:a7:ba:8a:c0:42:ad:06:91:a1:9a:43:
         4c:e0:9e:fa:13:23:27:16:d7:6a:39:9b:56:79:b2:eb:08:cb:
         b2:23:03:74:98:ff:c0:42:54:3a:aa:77:59:86:95:b7:bd:34:
         c1:2a:88:14:d4:a6:f4:76:6c:0f:35:dc:5d:36:e9:36:21:e8:
         bb:63:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----