Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3734e28-915f-3691-93a6-3b35178e2211.roa
File:                     a3734e28-915f-3691-93a6-3b35178e2211.roa (raw, json)
Hash identifier:          ZMCQGi/GPBCBAhqK7Bt8XVTSTDlK8JhK2MlpKdF+LXo=
Subject key identifier:   06:88:5C:1B:D8:62:49:93:54:B1:4B:08:B0:9E:07:B2:BC:F3:B1:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DEFDB1EEADD9933BBD1A15280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3734e28-915f-3691-93a6-3b35178e2211.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.254.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:db:1e:ea:dd:99:33:bb:d1:a1:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=1b26a664-6ffe-4a6a-9e2f-c173aece87f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:79:47:a7:34:2c:a9:d6:c6:fd:52:b2:87:
                    a6:0f:cc:fd:fd:ac:8f:bc:ef:fd:59:f5:ea:04:a5:
                    ba:a8:d8:e5:71:ac:b0:f5:81:ec:38:99:88:34:36:
                    2b:f9:77:21:1a:42:b9:91:b7:c8:80:75:68:40:f0:
                    48:3b:f2:8d:cb:18:2a:75:49:47:18:c8:a1:f1:72:
                    40:bf:86:d0:13:30:62:95:d3:3b:a5:63:04:70:c6:
                    ca:1c:44:28:39:83:7b:14:47:dd:85:14:72:21:e0:
                    97:4a:de:5a:05:aa:71:35:02:ec:78:1f:fc:ea:8f:
                    e0:2f:87:96:b0:ed:5d:24:d5:3a:48:31:24:a5:1d:
                    5f:6c:d1:3a:15:e1:5d:d5:83:a5:d6:17:df:03:34:
                    52:3a:2d:fd:04:b3:6b:7a:5f:a6:e0:8a:84:c5:02:
                    a2:88:a2:21:a8:62:84:85:99:bd:1b:57:2d:ee:d6:
                    ef:cc:9b:ad:26:ce:19:6e:50:24:20:03:cd:35:8c:
                    25:2a:80:35:30:c7:84:79:05:12:89:7e:71:22:5f:
                    bd:80:37:40:d8:09:b8:85:00:e2:e7:6f:de:25:40:
                    38:55:4e:4e:ff:1c:4a:03:f6:af:59:71:1f:5f:89:
                    0d:27:a2:6c:44:63:11:df:4f:cb:82:71:66:1f:4a:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:5C:1B:D8:62:49:93:54:B1:4B:08:B0:9E:07:B2:BC:F3:B1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3734e28-915f-3691-93a6-3b35178e2211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.254.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:16:27:d7:eb:01:a8:80:37:da:58:82:59:9f:dc:bf:c2:
         78:c9:2a:f3:b4:75:45:0b:0d:6c:08:17:2f:74:54:d2:11:19:
         e8:b5:0e:f6:28:66:36:2e:aa:3d:65:4c:ab:35:b7:ae:4a:54:
         c5:b4:18:a8:81:8f:53:ae:bb:bc:32:8d:6e:07:65:b6:34:82:
         11:40:ef:44:54:99:24:36:e4:f0:3f:52:3c:dd:24:9e:25:cc:
         b8:aa:f4:60:4d:41:7c:7c:f8:07:6d:1f:20:6e:14:59:5c:20:
         2b:52:a7:a7:51:49:07:50:ab:f5:d4:b0:62:73:38:14:22:8b:
         a6:29:cb:6f:d3:b7:ba:cb:7c:f0:3a:12:ea:b2:37:47:0c:cc:
         fb:9d:59:f6:2b:b3:c3:bc:87:18:25:bd:74:8e:34:4c:d2:44:
         3b:8e:89:cd:b5:df:f7:4b:70:9f:98:72:30:b2:f7:91:88:b1:
         ef:a6:98:3b:89:07:32:10:ae:f9:d3:96:e1:53:d4:2b:ca:7d:
         b7:f7:37:79:df:74:ad:87:a1:d0:05:1c:a3:b4:1a:c9:7c:2f:
         f7:30:17:48:7f:c8:d3:3f:70:b9:54:46:9c:9a:37:9f:1f:a8:
         93:ea:e1:f3:1d:e1:82:eb:ed:de:1d:5f:97:57:39:3d:a2:01:
         77:c4:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----