Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ea0268-1913-3ec3-ada3-c85ef614027d.roa
File:                     48ea0268-1913-3ec3-ada3-c85ef614027d.roa (raw, json)
Hash identifier:          Vk0nbS9wSkA0T+A7WiMjLvuI23xEx0RpgGK4FYwyzds=
Subject key identifier:   BF:63:AD:AF:BD:C5:FB:98:43:4D:10:92:12:08:E2:7E:E0:B9:13:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DC8C48B75B62A2C332E171A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ea0268-1913-3ec3-ada3-c85ef614027d.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Fri 02 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        72.94.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c8:c4:8b:75:b6:2a:2c:33:2e:17:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  2 04:00:00 2025 GMT
        Subject: CN=9fb0bd03-a12f-45a0-854e-484dd755e530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:cb:3a:37:8d:9e:60:25:c6:50:3f:83:7e:
                    21:98:34:f9:a9:4d:8d:18:13:5d:58:65:97:11:dd:
                    ed:4a:d6:80:17:bc:ee:89:79:8d:92:f5:66:e3:85:
                    d2:38:ae:52:6e:c4:a2:dc:0b:c7:c6:e0:71:f4:ac:
                    c3:ab:2b:7e:16:13:8a:f6:1c:36:23:c5:20:2d:ad:
                    9c:15:bd:38:15:64:a3:f1:bc:ba:e9:48:75:e5:96:
                    04:bd:5f:5d:0c:d8:8b:29:ca:89:cc:ec:a8:49:13:
                    9d:25:e7:5c:ab:b2:f4:c6:22:66:55:6f:6b:96:58:
                    7f:1e:e7:7c:78:de:27:44:0c:8e:1c:e8:4f:a6:96:
                    fa:c9:be:aa:c5:17:46:8b:c2:59:dc:92:fe:ba:81:
                    c8:bc:04:34:d7:67:d8:fa:3a:84:8b:f3:4f:ef:26:
                    b2:eb:96:08:8d:04:75:af:fd:35:82:e3:8f:a3:f6:
                    19:f0:42:5f:7f:ec:9a:8a:00:c6:30:02:46:b5:34:
                    0c:43:74:f4:91:72:76:a8:c0:f0:4c:23:35:18:39:
                    14:fe:21:c1:87:e1:7d:19:b0:7a:1c:45:31:c8:da:
                    e9:dc:0b:0e:d0:82:a8:70:a6:7b:37:09:fa:f5:5f:
                    f8:82:a9:6a:bc:b0:05:81:d3:30:cf:f3:37:33:8d:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:AD:AF:BD:C5:FB:98:43:4D:10:92:12:08:E2:7E:E0:B9:13:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ea0268-1913-3ec3-ada3-c85ef614027d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e8:f1:b3:3f:7e:99:de:3b:b1:1e:d5:f6:86:e2:ca:ed:4f:
         f0:ac:2b:d9:2b:48:39:98:b5:2c:a4:b6:80:fd:1d:74:ec:ce:
         9d:6a:23:29:f5:a8:83:22:c9:34:d2:53:8d:f3:e6:1b:bd:b6:
         65:6a:88:7e:d6:66:15:18:17:cb:ce:1a:68:50:99:04:15:4c:
         08:f3:10:dd:d4:22:72:74:bf:5d:05:c4:9e:3f:35:b9:1f:dc:
         bb:b5:a3:b2:8b:6d:03:b9:1f:55:67:2b:64:57:36:f3:9f:14:
         48:b5:06:82:5d:72:4f:4f:50:ca:62:90:97:c4:e4:91:45:89:
         6c:ce:89:d6:ed:a4:8e:97:97:ee:ef:79:7d:08:0f:80:33:ee:
         a2:7b:07:a0:98:77:63:bb:37:66:8c:e1:db:5c:94:10:21:b3:
         89:39:ca:35:1e:75:9a:b0:66:ac:76:81:f5:20:5c:48:79:f6:
         94:fe:18:39:be:a0:21:14:6c:24:77:e3:f8:5c:7a:bc:b9:66:
         1c:b7:7a:e8:eb:c0:b1:3b:b8:c4:44:ec:7c:b2:5e:fb:e2:58:
         59:6f:3e:89:ad:f1:a3:e2:6f:40:36:8d:27:1a:5b:65:23:1e:
         e6:33:af:af:fb:a9:ff:e9:b6:f4:47:ee:c4:ff:ed:de:48:dd:
         2d:7c:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----