Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0b1d82a-3e4b-3b98-9e5a-10cabb8cd2b7.roa
File:                     b0b1d82a-3e4b-3b98-9e5a-10cabb8cd2b7.roa (raw, json)
Hash identifier:          NHkMNVoDiwFh0BAqUJaJr+vv9qJFb8ulq3xkcK/cB3U=
Subject key identifier:   F0:11:C3:60:04:67:85:9D:2E:A5:31:6D:DF:49:A1:87:3F:7E:93:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07160350E7B8BFDB05029B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0b1d82a-3e4b-3b98-9e5a-10cabb8cd2b7.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        141.150.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:16:03:50:e7:b8:bf:db:05:02:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=055a6199-32d7-40ce-8347-4cc43f948407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:69:2f:1c:56:1d:58:08:a3:fb:e2:c3:3a:
                    0a:a8:55:11:08:82:25:13:82:37:c1:ea:97:bf:5e:
                    1f:89:d6:ec:55:57:92:99:e9:fd:b3:92:a9:c1:69:
                    16:24:80:f9:02:0d:4c:89:38:92:32:f8:69:cb:42:
                    8d:20:1a:73:d2:f9:30:e7:7b:e2:5c:4e:0a:1d:2e:
                    99:9f:de:13:e8:35:bf:82:0e:58:ab:98:c9:9c:2a:
                    3a:01:bf:3c:07:bb:d6:a3:43:03:a0:81:22:b2:6b:
                    24:78:0d:9d:29:67:cf:51:d6:ca:3e:67:26:06:4b:
                    26:fe:c8:25:f6:c9:00:39:91:bf:dc:1c:61:f4:01:
                    1e:e8:68:95:83:3d:36:f8:7f:0c:ea:67:d3:c0:60:
                    cc:d2:ac:ec:58:79:72:58:bd:c4:73:88:b2:08:6f:
                    92:10:48:a5:78:20:92:0b:b4:a3:87:f4:ca:95:87:
                    ee:14:8f:0f:c4:41:fa:0d:80:c5:47:d3:25:cf:7c:
                    b4:b4:75:95:4b:27:b1:19:0e:df:b9:c1:7e:cc:a4:
                    28:63:e2:33:eb:02:d3:d7:22:77:20:d4:46:64:98:
                    95:f7:d8:3e:e5:f7:bd:8a:e7:4f:cf:4b:b1:29:0f:
                    50:ce:78:1a:49:41:aa:2e:30:cb:15:a4:da:1a:83:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:11:C3:60:04:67:85:9D:2E:A5:31:6D:DF:49:A1:87:3F:7E:93:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0b1d82a-3e4b-3b98-9e5a-10cabb8cd2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:11:97:7d:33:8d:c5:6c:61:ce:c4:6b:8b:db:5f:c3:37:32:
         a0:64:a5:97:3a:4f:e7:3e:07:6b:b8:d4:82:0c:81:e4:31:0a:
         2b:bc:3f:d6:53:e0:c2:f6:0f:74:20:19:64:7f:da:6a:92:2e:
         a4:cd:b9:ff:96:dd:c7:17:80:00:90:66:7b:4d:38:eb:3c:b8:
         0f:b4:a9:78:9a:46:20:0e:8b:94:39:43:d7:e8:fe:d9:db:07:
         00:62:81:1a:e5:f8:6e:8e:b9:19:12:a8:42:b9:7d:a2:82:4a:
         a5:00:4f:86:98:d4:e0:92:0a:12:64:60:7f:c4:80:31:2c:a7:
         ae:97:e1:5d:3f:c7:3a:93:a1:6d:b7:48:25:07:fd:64:82:d1:
         54:40:ec:ad:22:20:ee:be:73:0c:49:06:20:d2:09:89:f1:8d:
         4e:47:21:c6:6c:c5:2d:46:6d:1b:31:fc:9e:b6:2b:e6:22:be:
         74:df:da:97:6e:2d:37:b8:26:06:91:9d:d5:21:74:46:b3:36:
         f3:10:5a:a3:47:35:a8:24:45:b9:cc:ed:d7:e9:46:3f:09:35:
         64:11:ae:c0:22:2b:3f:48:44:fe:8f:b2:5a:c5:5f:9e:18:ea:
         a5:f1:02:c2:0a:ef:06:04:2a:77:d4:e0:db:9b:c8:48:85:dc:
         05:71:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----