Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/795add2a-00f7-3079-b0b4-08e981090338.roa
File:                     795add2a-00f7-3079-b0b4-08e981090338.roa (raw, json)
Hash identifier:          aQr5Va2kzN/0ffuq6yWx0E9mD3cr4DqbQLg4tKuUq4o=
Subject key identifier:   D0:68:0B:36:51:5E:03:C7:D9:DE:86:55:90:74:3B:2D:B0:BB:71:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB538EFFBDB3B4BD37C527C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/795add2a-00f7-3079-b0b4-08e981090338.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        108.26.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:38:ef:fb:db:3b:4b:d3:7c:52:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=a0315c26-6067-407c-954e-107fbbf11fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ef:ae:e2:bf:b8:4d:cb:2f:18:bf:74:56:ad:
                    0c:31:d5:d0:3e:5e:a3:e7:99:c1:97:2f:d4:83:7a:
                    5f:b3:90:ba:fd:a4:78:dc:67:44:9d:6b:9b:b7:8e:
                    f0:8b:87:f8:8b:ee:03:dc:c0:91:19:13:80:0f:de:
                    0d:c9:ac:9e:89:06:ba:13:b4:81:67:81:48:3a:a8:
                    c0:17:66:cb:85:09:21:b8:2d:17:fa:a3:b8:1c:c8:
                    88:37:1b:2d:62:22:1e:4d:d5:24:a8:17:3b:57:ed:
                    24:f2:0b:34:33:2f:ac:f1:b4:31:8a:9d:77:63:46:
                    51:c1:66:73:8e:66:bf:7e:6d:ca:c0:fb:fc:88:0a:
                    db:2f:d6:1b:ec:7c:8c:a9:94:93:0c:95:fc:20:e6:
                    a1:fd:30:be:68:5e:86:36:7a:26:73:98:34:8c:69:
                    35:7c:cb:a1:cb:90:01:93:c2:be:c8:10:be:7e:e3:
                    a5:a6:d3:d5:a9:d9:9c:d9:f2:00:e6:e0:b9:bb:74:
                    c6:2c:71:23:46:6f:2d:64:5f:99:98:b1:b9:01:d0:
                    43:84:26:97:87:66:ab:5d:62:9a:7b:a6:b8:35:3d:
                    ca:e3:0e:d2:a5:b9:8c:f6:f8:6b:66:b1:31:7b:14:
                    8b:c8:d0:74:ae:8f:f6:2a:a5:e9:48:f1:26:a6:8d:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:68:0B:36:51:5E:03:C7:D9:DE:86:55:90:74:3B:2D:B0:BB:71:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/795add2a-00f7-3079-b0b4-08e981090338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.26.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:58:b9:4d:b2:7c:fa:9d:5f:f0:56:7d:26:dc:94:0b:d1:92:
         86:ba:b7:2c:96:43:61:83:8d:6b:23:c7:98:3c:40:8e:29:0a:
         80:2e:97:3d:ff:52:90:56:ff:8e:b7:8f:95:4f:9a:a2:76:05:
         40:8c:53:67:60:54:7e:5d:c1:d9:3b:fd:dd:14:8f:ff:f6:d4:
         10:0b:aa:7a:a3:ee:9c:bc:28:b1:2e:1a:8b:17:5b:35:59:05:
         f1:90:ad:88:35:04:d1:90:bd:62:72:f0:9f:f8:9e:9b:52:d9:
         15:a4:45:9a:7d:16:5a:1e:fe:24:5c:20:12:c6:79:4d:9f:65:
         c6:e8:43:9f:f2:e8:a0:cc:d7:64:4c:52:93:26:28:09:03:02:
         d7:7f:bf:8d:7d:71:4d:cf:8d:90:61:b8:61:07:6a:61:47:aa:
         8d:e0:bd:f7:f8:54:1b:98:0f:cd:7d:a7:8e:64:18:d1:26:e9:
         87:7d:5a:a8:24:0c:e6:ea:43:5a:9e:62:7b:90:51:d2:01:f4:
         0e:97:5d:2f:de:5e:22:48:59:cd:05:92:bc:35:ad:15:81:7e:
         ee:6a:ba:b1:ac:0c:d1:41:04:ce:d8:0e:62:52:a9:8b:0e:aa:
         8f:fc:5c:35:66:ad:ef:de:ae:85:46:42:33:8e:bf:67:10:94:
         4c:00:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----