Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb6e20f9-e69b-3711-8647-0fb5351a724b.roa
File:                     bb6e20f9-e69b-3711-8647-0fb5351a724b.roa (raw, json)
Hash identifier:          JiwCr0tWW+2AUkJFQg7slGFssckwazO3DpYMWW6bWGk=
Subject key identifier:   9D:87:84:C7:F2:49:29:FE:08:1E:D4:76:3C:ED:66:10:66:13:D7:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F072C5FDD8DA2F1B4B5048780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb6e20f9-e69b-3711-8647-0fb5351a724b.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        108.55.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:2c:5f:dd:8d:a2:f1:b4:b5:04:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=ae94174f-22c7-40e0-b1ec-a35d0dfd33dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:20:11:f5:ae:2d:06:ca:4f:55:42:f5:6a:
                    41:9c:68:88:4a:6e:94:7b:40:e3:73:19:aa:7b:9f:
                    78:02:79:72:9f:81:19:1e:72:9a:78:85:c0:98:f8:
                    31:1c:d4:50:3d:2e:4e:b1:d3:6d:d0:46:b8:e6:0b:
                    4b:9e:27:50:1d:5c:57:17:80:59:82:f0:e5:05:01:
                    63:5b:ce:e4:b8:22:aa:48:ea:5e:10:a6:50:09:ea:
                    80:d0:6a:99:62:d8:b7:5e:91:d8:2e:7c:21:78:1d:
                    ff:e4:40:9e:05:bd:cb:8f:8c:54:47:f3:f5:2a:ea:
                    22:80:a4:2f:59:13:8c:db:96:18:5f:f2:1d:88:66:
                    e9:d0:69:61:33:5b:73:99:c2:f3:cd:a1:8a:81:0a:
                    e9:7e:a9:1c:0a:00:9e:5b:8b:9d:da:90:74:6d:87:
                    e6:0c:ba:b1:e8:fe:d8:9d:9c:3b:26:57:85:a5:46:
                    7a:85:12:6b:a8:e1:66:18:b4:2f:90:59:1f:bd:e8:
                    cc:2c:13:6b:56:45:c6:ee:c2:0e:50:30:d4:84:8b:
                    83:7d:20:20:2f:30:9c:c0:50:68:c2:a1:d3:52:8e:
                    86:24:3b:5d:88:18:30:29:3c:0d:19:98:b6:e5:87:
                    4a:d7:8d:a0:58:67:2c:d2:75:54:c2:78:95:b4:17:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:84:C7:F2:49:29:FE:08:1E:D4:76:3C:ED:66:10:66:13:D7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb6e20f9-e69b-3711-8647-0fb5351a724b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.55.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:a5:c5:2b:bd:c9:8f:b9:48:7c:c2:49:36:83:0d:90:23:
         12:89:4e:60:74:ec:dc:a5:11:0a:d3:df:1f:c4:3f:a4:2e:d3:
         dd:ba:b9:7b:46:aa:19:55:82:06:2c:8c:aa:31:8c:22:4d:e0:
         29:09:e4:eb:57:14:30:1d:a1:2e:ef:3e:06:8e:fc:2c:53:7b:
         33:28:4d:74:2e:c8:53:ae:6b:6b:a1:0d:ce:83:8d:e3:3e:30:
         08:7f:b3:67:f7:4d:46:cf:be:58:af:d9:0b:7c:4d:2f:11:2f:
         2a:09:d2:11:f4:0b:92:59:2c:1b:bc:f6:05:39:c9:a4:54:35:
         e1:5e:7e:94:b8:6c:86:56:d4:bd:cc:79:fb:1f:44:8d:8f:f3:
         6f:f1:a3:b6:83:7a:2f:92:f2:47:c2:25:48:89:7e:21:74:5c:
         23:51:7d:2e:e3:04:30:d1:43:ad:cb:85:76:06:10:45:21:e0:
         08:a1:42:b1:c1:3e:65:91:0e:0a:41:9f:bf:2b:8f:25:8f:a2:
         35:1b:32:c8:69:95:52:cc:e8:8c:25:94:bc:fe:6a:57:f7:a9:
         b4:60:d8:eb:e1:63:68:9d:9b:13:6c:ce:fd:25:83:c1:f9:41:
         24:26:28:cb:7d:30:4a:81:df:2b:53:11:90:94:00:99:8e:c7:
         d2:a8:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----