Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69eff6e2-13c9-366f-b49a-ee3f7342e191.roa
File:                     69eff6e2-13c9-366f-b49a-ee3f7342e191.roa (raw, json)
Hash identifier:          GIvIuKi0Meccc6UDakltxQuL5+ou/4f6qFyd6K0gVCM=
Subject key identifier:   4C:27:D6:48:B7:F3:73:B5:B4:E5:C5:98:02:9F:E7:F3:2F:98:AA:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DEFE08DEDFFD69141C04C1540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69eff6e2-13c9-366f-b49a-ee3f7342e191.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        98.117.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:e0:8d:ed:ff:d6:91:41:c0:4c:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=38d470e8-700c-4d64-8f14-bb01bb8e90e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:f1:32:c5:45:bb:77:ef:57:e7:5e:71:15:
                    78:58:30:2e:e5:52:fa:fe:33:10:25:7e:10:9e:b7:
                    5f:22:0c:fd:04:20:f6:23:76:8d:1d:41:32:01:07:
                    a6:04:0e:46:ff:27:70:b0:55:3c:16:9a:a3:78:bf:
                    23:83:09:1d:15:78:41:0c:4d:61:10:f5:2c:62:7b:
                    03:8b:9e:f8:86:f2:2a:b4:24:66:d4:58:43:07:4e:
                    d7:5f:64:2c:13:97:64:dc:56:1c:98:89:fb:34:e6:
                    8c:7d:d5:df:36:30:0e:29:30:6f:a4:a4:97:38:80:
                    41:6d:4c:75:72:0f:69:c3:d6:b0:19:17:fd:24:c5:
                    58:da:8c:14:06:24:a9:5e:92:a4:a7:1e:1f:36:27:
                    d2:52:c1:46:82:14:bc:c0:c8:89:ac:30:e5:f7:c8:
                    12:fa:41:4e:81:5b:87:77:54:2e:a4:f6:fb:57:01:
                    8c:4c:c7:8e:a1:46:49:04:47:ea:5b:54:55:e2:09:
                    a9:d7:52:c5:27:64:80:16:82:cb:d0:03:9e:a2:11:
                    81:38:e0:48:a5:f7:aa:e3:49:b8:85:da:d5:53:30:
                    79:20:c6:3a:07:9b:d5:ca:72:4f:5d:7a:3c:63:af:
                    9a:5b:5c:8d:19:b5:df:2b:8b:d3:8c:fc:c2:35:36:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:D6:48:B7:F3:73:B5:B4:E5:C5:98:02:9F:E7:F3:2F:98:AA:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69eff6e2-13c9-366f-b49a-ee3f7342e191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.117.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:a9:40:3e:7c:36:7b:27:93:7f:f8:c4:b8:9a:e8:fc:e5:
         64:a4:42:a0:d0:87:34:9a:6c:28:52:8f:c5:18:b9:2a:d0:5c:
         57:2c:b9:ee:9b:f5:42:6d:7c:37:e6:35:d3:4c:2e:ba:c7:c4:
         50:b9:3a:8e:0b:ea:0c:bf:b8:16:3f:03:05:d3:14:5d:68:74:
         b0:29:e6:0f:94:92:e3:f6:9f:64:9e:5d:96:0c:be:50:ec:4c:
         3a:f0:c8:06:ff:08:cc:52:23:9a:9c:98:59:77:e3:db:91:9e:
         41:0c:04:1c:84:4d:63:42:14:bb:c3:63:94:ea:92:df:eb:20:
         4a:a5:a5:ca:fb:91:a8:85:bb:80:29:bb:67:fc:67:14:69:68:
         66:2d:ed:d3:c9:ec:65:98:5c:4b:02:da:e3:e4:f4:17:d1:09:
         59:f8:f1:dd:ae:18:bd:a3:2c:8d:ac:5c:37:6b:50:1f:bf:0e:
         ba:4f:57:17:bb:7c:78:2d:1b:fd:ab:15:a0:60:60:a8:18:cd:
         a4:04:b4:89:93:e7:b7:d4:7d:3d:a9:eb:d3:75:7c:76:74:17:
         f4:b1:bc:c6:ab:ca:b5:06:91:80:ba:5b:b4:7f:63:7f:a2:4d:
         4a:0b:62:61:75:74:00:b1:48:e4:96:22:db:1f:ac:39:6d:db:
         0b:2e:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----