Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/978e14ea-4186-3251-97ef-db8a622a5b30.roa
File:                     978e14ea-4186-3251-97ef-db8a622a5b30.roa (raw, json)
Hash identifier:          skPWBaZs3dOIMPdtDxbRpwEcXjyxxlp9SmOg8Fg6a7w=
Subject key identifier:   41:2F:CE:94:A8:13:BE:56:35:1A:CA:1B:52:70:C2:0B:7A:0C:D6:51
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DEFE107856D49EDCC79E84BE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/978e14ea-4186-3251-97ef-db8a622a5b30.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        68.163.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:e1:07:85:6d:49:ed:cc:79:e8:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=ea7e52dc-cab4-4197-b99f-e8e9e978ac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ab:f6:07:d3:82:65:22:a6:ea:79:55:b2:0f:
                    21:ed:a5:82:5a:79:14:22:bd:32:fb:bc:37:79:b9:
                    ea:6f:08:4e:ac:10:e7:51:6b:c9:70:29:97:3d:df:
                    ef:60:58:4e:bb:26:19:c8:4f:de:69:b9:6e:8a:ff:
                    19:c3:95:bf:75:1b:00:59:0e:c3:09:ec:9e:73:d2:
                    d4:50:e4:ab:46:d7:f9:f5:f4:e4:5a:d3:e1:a5:a5:
                    38:ba:0e:78:e3:fb:49:f5:f7:e0:d7:af:0f:15:28:
                    88:b8:e7:34:f0:37:d9:4a:27:42:97:93:2e:c8:b8:
                    59:e6:55:3e:ee:c4:32:30:35:71:b4:b4:9e:97:5e:
                    56:43:ef:90:5c:1a:2d:71:a9:c3:99:a6:d7:b0:92:
                    98:85:4d:b2:60:95:b7:da:8d:8d:a7:4a:c1:f4:5e:
                    f8:9b:2a:7b:c9:2b:8c:92:27:24:47:a7:2d:bd:22:
                    4e:78:92:4f:f1:26:a6:a5:51:45:2b:c7:7e:2c:22:
                    20:d1:80:5a:3d:1b:6c:2e:41:88:5e:93:59:32:40:
                    3f:01:88:bf:ac:b1:e3:3b:c7:13:89:b8:9f:21:5a:
                    bf:8c:ff:1c:b5:4b:39:75:3a:a5:20:33:e8:5f:dd:
                    de:ca:ab:ef:4a:b7:18:3b:45:f6:78:b9:c2:37:90:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:CE:94:A8:13:BE:56:35:1A:CA:1B:52:70:C2:0B:7A:0C:D6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/978e14ea-4186-3251-97ef-db8a622a5b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.163.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:ea:32:d2:a3:04:3b:47:b6:16:e4:34:6b:53:05:24:75:
         17:73:f3:1a:93:7c:11:14:6e:9b:21:fb:ca:19:01:8e:54:5d:
         05:6c:e4:99:fa:48:ca:9a:47:86:b2:6e:6b:04:3b:09:5e:15:
         58:63:e7:cc:b2:43:f8:79:e5:48:49:0d:ea:50:1b:1f:18:db:
         fa:74:8f:e1:f0:9e:8f:3a:fa:bc:82:a6:3c:46:7b:fd:01:01:
         41:73:a2:90:87:b6:70:07:81:f9:ce:5c:d4:19:0f:4a:ad:75:
         c1:26:6e:0c:28:55:32:7e:03:fc:6a:71:bc:25:68:b9:36:b3:
         02:a9:11:c2:fc:31:38:8c:52:a9:a0:8b:e9:26:ef:6d:30:db:
         29:b0:16:67:cc:bc:df:36:96:93:7b:61:aa:33:77:87:34:a0:
         4e:ad:13:b5:6a:92:f9:49:9c:84:da:f5:98:32:36:cc:11:fe:
         a0:e8:46:a8:8d:ba:38:1c:ba:a2:cf:86:75:7b:ff:55:da:9d:
         2c:fa:11:4f:b5:b4:3f:f3:65:25:c9:c3:5a:4d:1a:b9:02:33:
         48:19:69:96:9b:0c:60:79:74:53:32:c1:82:d0:99:91:68:47:
         23:00:1f:b5:3b:80:92:d2:2b:9c:ed:8f:12:0e:75:b2:89:79:
         d5:59:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----