Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/625063c6-b6be-371c-b053-4712cc71d97e.roa
File:                     625063c6-b6be-371c-b053-4712cc71d97e.roa (raw, json)
Hash identifier:          gPunlD1O0d9hbFiSogKKo5kz6YOD8WOxJAETf0DnBIU=
Subject key identifier:   30:26:59:11:46:41:34:E6:04:44:66:17:7C:4D:FC:DF:48:D4:A9:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583B384581B8AA2F750E061F7A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/625063c6-b6be-371c-b053-4712cc71d97e.roa
Signing time:             Fri 10 Sep 2021 04:00:00 +0000
ROA not before:           Fri 10 Sep 2021 04:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     701
IP address blocks:        65.249.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:38:45:81:b8:aa:2f:75:0e:06:1f:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 04:00:00 2021 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=e102c7d1-1d2a-48d8-bc22-a3d286ba2fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:24:76:fe:46:d6:de:f0:05:29:60:93:f8:
                    a4:56:31:58:f9:06:57:07:46:54:cf:13:c9:52:19:
                    de:3a:5a:7d:8a:55:8d:71:f9:b8:77:94:fc:79:84:
                    55:f4:9a:0a:c1:62:a7:5f:38:cd:d3:00:f5:c2:bf:
                    7d:24:b8:b8:8f:3b:0d:0c:1c:cd:03:f2:c3:7e:a2:
                    26:33:a0:5c:99:de:34:ef:2e:03:04:bb:ae:08:19:
                    62:cd:91:0b:9c:ed:9b:94:95:63:f2:53:f0:9f:9d:
                    c8:66:dc:20:96:6c:51:c9:69:0b:80:aa:b6:b4:0f:
                    43:35:6a:f3:e9:26:50:fe:7f:8f:89:4a:6b:5f:a4:
                    3a:2a:40:33:5b:34:46:41:2e:9e:80:28:ed:00:1b:
                    80:99:d3:41:a0:33:2e:33:38:b2:e7:78:67:6d:25:
                    63:f8:21:c6:9b:6f:05:66:50:e8:04:1b:30:76:e1:
                    46:f3:a5:12:62:c3:8f:f3:60:3d:52:50:a9:02:1e:
                    25:c2:b2:1a:f1:fe:43:47:b6:c7:e6:29:17:48:20:
                    f9:1b:6b:98:86:b1:81:2e:68:c1:a6:d2:4c:45:d6:
                    e6:89:40:6b:86:d4:36:48:b2:4f:5b:3c:55:02:4a:
                    f9:55:07:46:62:d7:74:58:d2:1a:01:55:0c:5a:18:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:59:11:46:41:34:E6:04:44:66:17:7C:4D:FC:DF:48:D4:A9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/625063c6-b6be-371c-b053-4712cc71d97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.249.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:63:fd:a4:b2:7f:eb:3f:ed:e4:85:dd:63:17:d5:36:b0:
         e7:e1:ff:9f:7c:d6:d2:fd:2e:30:f4:a0:eb:ec:ff:f6:6b:7d:
         14:91:91:73:28:55:1c:b0:21:83:ce:6b:ab:97:ed:5d:0f:1a:
         58:c5:2c:c2:16:6f:61:79:1e:84:e9:36:77:ad:a9:d4:c2:04:
         f8:e2:fb:64:08:e5:7d:3a:11:0a:38:3a:b8:04:f0:6b:81:a3:
         5f:74:f4:ad:be:d9:df:87:1a:ac:b6:72:b4:f8:94:63:30:cf:
         37:a8:d1:ba:f5:a3:4a:69:e4:69:03:5f:f7:4a:66:27:a1:33:
         85:7e:18:26:b5:c6:95:24:cd:6d:77:fc:97:c4:42:58:6a:20:
         06:c8:6e:fb:06:82:e5:3c:37:51:50:a4:51:c6:ee:27:68:19:
         a5:29:35:6a:00:e5:68:30:3b:a1:ee:0f:f1:c9:7f:05:dc:df:
         d7:c0:de:da:f5:00:8a:58:10:31:32:35:9b:fa:fe:c7:e0:fe:
         74:5a:5c:d0:1b:48:ff:2f:9b:66:00:f0:69:04:57:6f:59:f6:
         61:5a:94:89:91:39:10:4f:fa:33:75:04:dc:d3:11:a8:84:22:
         95:8b:97:f1:33:e1:43:1e:31:63:8e:56:dc:5e:8e:29:5f:74:
         7a:c3:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----