Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51464531-57c5-3af8-910d-ca75290ccfd9.roa
File:                     51464531-57c5-3af8-910d-ca75290ccfd9.roa (raw, json)
Hash identifier:          /84nRYvT9d3LAnEqSZk9Az7i9GfJfmw6vxyJAMhJVFs=
Subject key identifier:   36:E0:8E:77:78:36:02:EA:FC:B0:97:12:9D:62:B7:8E:56:C1:CE:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E04853F49
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51464531-57c5-3af8-910d-ca75290ccfd9.roa
Signing time:             Fri 25 Oct 2019 20:04:31 +0000
ROA not before:           Tue 22 Oct 2019 04:00:00 +0000
ROA not after:            Mon 22 Oct 2029 04:00:00 +0000
asID:                     14717
IP address blocks:        208.231.72.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:04:85:3f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 22 04:00:00 2019 GMT
            Not After : Oct 22 04:00:00 2029 GMT
        Subject: CN=a9e716f9-2889-4af6-ba8c-22fd17c0f332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:56:9e:b9:9b:d2:9a:c6:02:75:9d:ec:7a:
                    33:6c:4a:fc:e4:86:a7:05:2a:37:d2:d3:1f:2d:fa:
                    64:78:9e:61:15:8a:de:d1:6b:8a:16:7b:4e:54:b1:
                    47:d9:bb:46:41:22:1c:ca:80:b7:22:c5:aa:4d:2f:
                    da:51:a1:85:79:21:67:c8:73:80:f9:41:6a:0e:e7:
                    c6:19:81:02:99:db:90:c7:4e:31:35:d0:0a:49:0a:
                    44:d6:97:ba:48:b6:6b:23:ed:13:b1:b0:4f:e8:d7:
                    f6:3d:89:a8:6f:8a:b3:81:8d:48:14:d3:60:43:de:
                    dc:58:f2:a4:f9:8d:2e:b1:ba:da:b4:d3:68:db:c0:
                    5a:f4:68:f0:21:23:59:ea:2f:f1:16:55:35:bf:48:
                    35:e3:53:fa:4a:c5:e1:a4:6b:f3:95:57:34:55:32:
                    24:8a:8e:7c:fc:9a:46:3d:a0:9e:57:a5:f6:da:68:
                    1b:90:ca:7e:2e:ef:04:e9:fd:da:c4:41:ca:68:08:
                    e5:af:d8:81:dd:d5:66:38:1a:60:77:d5:d0:3b:64:
                    48:84:28:4c:9c:a8:22:94:04:37:ca:2a:ff:7a:e2:
                    a7:8c:3c:9f:85:de:d3:13:d4:0e:e8:6a:1a:3e:dd:
                    8b:45:40:5a:98:4a:10:7d:4b:83:99:c3:25:da:80:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E0:8E:77:78:36:02:EA:FC:B0:97:12:9D:62:B7:8E:56:C1:CE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51464531-57c5-3af8-910d-ca75290ccfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.231.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:8e:2c:31:ad:6f:18:df:01:b5:d3:d9:c2:52:37:f0:e0:
         7c:a3:d3:36:c8:c4:d1:9a:51:38:6e:5d:b0:75:e5:b2:3c:42:
         e8:c7:df:14:d2:96:0e:39:bf:43:bd:99:84:fe:c2:34:53:9f:
         36:d5:7d:e7:e2:18:f0:a8:5e:57:58:af:80:50:e1:b0:dc:bc:
         f2:53:f5:3f:c1:40:53:2a:47:4a:59:3d:0c:90:f0:f9:b6:de:
         2c:77:c1:53:51:f7:7c:6f:36:f9:5a:e7:2f:70:5c:8a:4f:66:
         d2:4d:6c:14:7e:a9:71:d0:bd:7c:72:87:db:a7:94:a2:59:f6:
         bb:86:a5:59:bf:d2:55:31:b0:ef:f6:19:c6:f3:5a:d4:ff:b2:
         aa:3c:ca:25:7c:d2:b4:cf:05:24:17:02:06:71:d7:18:0f:ee:
         d3:fa:67:fd:40:f3:a5:81:2f:9e:28:87:57:5b:c5:03:b7:46:
         79:27:5f:35:31:46:a6:cf:c0:2c:db:d6:41:4a:99:c1:96:2c:
         85:74:aa:54:41:d5:89:41:c7:de:0f:c0:04:b9:f7:4e:a9:ef:
         1f:67:b6:fb:70:b8:eb:4f:48:b2:bf:89:17:b0:fb:5f:84:fe:
         61:38:85:af:4e:14:dc:f4:e0:ee:8d:f4:da:f4:bf:f3:ca:f5:
         90:58:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----