Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58f35117-56c4-3c71-ae42-73dee95f9d8e.roa
File:                     58f35117-56c4-3c71-ae42-73dee95f9d8e.roa (raw, json)
Hash identifier:          BClfiv7mUqgSse2hUmQq1mYLvcz5Sy01dzq0ItKdg40=
Subject key identifier:   44:91:76:C1:8F:91:57:D5:62:BF:BA:9C:56:FA:C8:48:7A:83:CD:04
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB53A4774217B1042EC053300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58f35117-56c4-3c71-ae42-73dee95f9d8e.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        98.117.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:3a:47:74:21:7b:10:42:ec:05:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=17778d9d-83c5-419d-bf28-59d28825db6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:61:63:1f:1d:2a:5a:35:cd:1f:9a:d5:39:
                    ea:7a:a2:b7:63:f5:c7:ab:d9:21:60:e9:2f:05:8e:
                    a9:08:b5:e2:d7:98:55:ab:db:ec:a5:c5:a5:12:6f:
                    8e:3d:57:6b:20:5e:51:6a:9b:e6:be:98:72:d1:c8:
                    24:cd:ad:1b:d2:15:ff:a1:97:19:fc:c0:cc:ea:51:
                    a6:fe:53:dc:1f:0d:8c:e9:ac:9e:dd:e9:19:5f:dd:
                    79:d1:66:88:28:64:72:78:72:ec:74:eb:e7:00:ab:
                    f6:03:ce:50:f1:e9:f6:50:df:dc:bb:56:ee:96:45:
                    c0:7a:41:ac:68:84:ca:e2:4b:45:58:45:b4:bd:4d:
                    d0:91:1b:cf:7e:fc:24:a4:04:43:01:aa:e2:8e:07:
                    44:76:ba:a8:df:ca:58:91:a6:13:3d:0e:11:8f:2c:
                    7d:bf:de:55:ad:ac:c7:e1:3c:a4:0c:76:e0:ad:0e:
                    41:84:ac:32:f7:18:17:20:35:18:d4:d4:22:27:20:
                    eb:56:4e:5d:44:53:61:e9:1b:89:9c:26:7f:9d:27:
                    ce:18:ce:7c:a7:e4:3e:70:2e:d9:56:f0:3f:91:e1:
                    95:2b:bf:14:fc:4e:11:78:36:30:25:b9:c7:37:ce:
                    98:d2:5c:db:bb:7c:24:3d:39:3f:5d:d5:a1:05:1a:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:91:76:C1:8F:91:57:D5:62:BF:BA:9C:56:FA:C8:48:7A:83:CD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58f35117-56c4-3c71-ae42-73dee95f9d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.117.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:2a:1e:92:08:a6:15:4b:eb:fd:13:b6:47:a7:29:50:02:
         67:98:0b:b3:47:f7:83:70:08:40:eb:3d:4e:da:4e:61:c0:78:
         1a:dc:25:4e:62:be:11:cb:02:54:81:6e:77:ad:bf:c7:fb:5d:
         de:0d:7e:1a:f7:4a:9f:fc:6d:ae:10:4f:ff:39:98:be:2c:af:
         d1:f2:37:2a:5e:4e:57:96:7d:0a:6c:bd:2a:27:53:5b:cc:f9:
         38:4a:e2:a6:91:b4:77:20:a3:c8:03:0e:97:e3:91:af:57:36:
         33:4e:ba:1f:4b:e9:09:a0:0b:4b:c2:db:5d:e8:5a:db:0e:c0:
         a5:84:2d:b8:5d:d3:aa:16:5f:27:a1:9e:f4:16:30:51:7d:6b:
         24:f5:07:08:3a:2b:25:6f:85:3a:54:32:ff:a4:04:93:11:44:
         83:f6:ac:9c:28:fd:ab:31:9e:ca:6d:d8:d3:1f:a3:28:be:11:
         1f:24:cf:8f:e2:5a:db:86:66:89:a4:3d:4f:e2:58:0d:47:84:
         b0:da:d9:da:dd:6d:7b:83:aa:01:94:e5:76:a4:7c:6d:9f:e2:
         63:5b:f4:f6:4b:a8:ce:49:8a:70:5c:db:4e:a6:65:8d:b7:63:
         1c:a7:36:ef:9b:90:65:0d:4a:44:f0:4d:68:16:5f:c5:a4:e9:
         46:56:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----