Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87039785-94d0-32ff-bc95-df26dc1180f5.roa
File:                     87039785-94d0-32ff-bc95-df26dc1180f5.roa (raw, json)
Hash identifier:          0SqFG5yod5qq4ABbO/knLJ6iN8B7C8meM0/hb7WsVSM=
Subject key identifier:   01:64:C4:33:D9:1D:FD:06:F8:30:83:4F:0B:03:EF:91:2C:BD:72:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F071F21DB82A4F55A4935EB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87039785-94d0-32ff-bc95-df26dc1180f5.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        151.203.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:1f:21:db:82:a4:f5:5a:49:35:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=064ae4d1-be1a-4956-bb2a-73ac9eab98d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:08:3f:4f:27:9a:81:61:7c:c3:71:2f:58:
                    ca:59:43:b3:a1:7d:af:b3:6d:bb:b8:38:4f:10:3b:
                    d9:6a:b4:aa:8a:49:38:52:80:82:ef:f0:cc:dc:0d:
                    e1:cd:50:43:6a:3c:02:23:31:58:d0:bc:81:0f:20:
                    6e:a9:65:43:e9:b3:e6:dc:0e:cf:d2:90:9c:f9:a9:
                    79:31:84:be:d2:58:a7:38:cd:11:4c:93:f9:16:72:
                    e6:29:c2:6a:b6:f9:87:07:64:eb:7a:44:b5:3a:5e:
                    14:fb:41:c6:47:3e:b0:47:26:42:13:7c:27:45:84:
                    8b:5d:50:2c:2c:b0:e9:2b:13:8f:41:b6:55:07:9c:
                    57:68:a6:94:ff:fe:f3:a9:03:50:e0:0b:eb:18:4d:
                    0d:57:76:4a:51:99:ec:7b:f3:73:4f:e9:a5:49:9e:
                    fb:80:4c:88:9c:e2:f2:8b:3e:a1:ba:24:7f:da:58:
                    60:6d:87:90:41:d9:8b:ec:32:b4:7d:94:38:d8:b0:
                    c9:8e:0a:be:89:55:f4:d1:cc:a5:bf:a9:ef:86:45:
                    63:bf:3d:c3:f7:2b:65:e1:c4:41:53:e2:8e:a8:fe:
                    83:1a:ef:4f:97:ea:27:9a:c2:35:2e:61:6d:a1:83:
                    4b:52:89:1b:d6:18:3d:a3:46:36:00:47:d5:c9:bd:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:C4:33:D9:1D:FD:06:F8:30:83:4F:0B:03:EF:91:2C:BD:72:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87039785-94d0-32ff-bc95-df26dc1180f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.203.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9d:05:94:50:f4:ac:a0:b8:76:bf:2a:42:41:ab:de:61:8e:
         08:0d:b7:ab:c4:af:82:9a:c1:4d:ce:0a:a4:70:93:89:5a:3a:
         40:ed:03:13:04:47:f2:c0:b0:3a:78:07:5b:2b:79:ac:81:99:
         c0:57:51:94:d8:c6:2c:ca:41:d4:f8:50:e5:df:99:fe:2c:0e:
         1f:c5:72:62:d7:e3:d4:ad:15:7e:8f:29:da:e6:03:af:e0:12:
         a7:3f:f3:25:0e:37:eb:08:cb:9a:c9:37:50:af:0b:00:be:43:
         ff:14:c9:0e:65:ae:9d:91:be:5b:45:92:e4:47:f7:35:b4:76:
         37:06:81:8b:85:75:2f:1d:49:4f:ff:47:24:5b:22:81:4a:ed:
         bc:87:a0:c6:3e:32:80:11:c2:22:c8:2d:f9:f0:de:a8:b7:e0:
         3f:79:68:c2:07:af:cd:9b:89:16:11:c0:15:6e:65:47:ea:c2:
         aa:07:15:42:7c:fe:87:4f:85:80:19:5d:41:53:87:b1:de:bf:
         6e:ba:db:5d:5b:78:34:f0:fd:49:48:e3:94:c2:c5:8e:36:59:
         c7:82:40:3b:06:04:b0:38:a0:fe:92:6d:af:85:b4:bd:22:4f:
         0d:50:ec:9b:76:9d:58:34:18:35:5f:2d:b9:5f:72:25:0f:bb:
         ed:7a:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----