Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2892b64-9de5-324b-b5ff-ece5dde1498b.roa
File:                     c2892b64-9de5-324b-b5ff-ece5dde1498b.roa (raw, json)
Hash identifier:          EQXXBjqRXmqRghbi+pdz4OTMkRR/vGu/KGKZLAlTx+I=
Subject key identifier:   EC:DD:6B:A7:7F:45:83:81:32:61:3B:2A:D6:FF:3A:C9:0B:04:7D:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DEFDDC12CBB60786204788B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2892b64-9de5-324b-b5ff-ece5dde1498b.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        96.225.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:dd:c1:2c:bb:60:78:62:04:78:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=93b412ff-3900-4693-baba-8dde3af6a97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:39:aa:09:b2:ba:ff:f7:86:b6:a0:42:0c:
                    4e:bf:0b:bd:a8:eb:d2:07:71:a1:83:00:7d:6c:de:
                    91:55:b3:7d:d5:91:41:1b:e0:e6:fc:eb:bf:9f:8e:
                    a8:44:1f:db:52:91:0a:5e:02:55:e0:ee:36:8a:db:
                    e0:69:18:68:ba:2e:ea:7a:a6:11:f7:35:a7:b1:8e:
                    64:99:3e:fe:1e:86:49:41:f9:9e:b2:85:98:f1:6a:
                    a6:d0:55:74:df:81:c7:24:17:cc:3b:b0:77:35:0f:
                    86:a6:f3:3e:b4:6a:9d:4a:79:b1:7e:a8:a2:8d:e3:
                    b9:d7:2a:d9:7c:f8:e1:f2:7d:65:2a:ad:c5:0b:a4:
                    df:6c:85:a5:94:11:6d:ae:10:0c:6d:fc:b4:42:82:
                    c9:c1:43:d1:70:6b:50:93:3d:ca:c9:12:eb:87:ac:
                    89:54:53:fc:ee:04:94:7e:e7:a5:d0:7a:d8:94:2b:
                    d8:8c:12:c5:2b:7e:68:78:76:92:af:1a:3b:e3:e9:
                    19:b6:c9:10:8c:d3:27:c8:8e:5b:58:7e:32:74:d0:
                    48:19:57:c2:2e:e3:31:bf:f7:be:07:f2:50:f5:e9:
                    e3:6b:46:ff:c9:5b:0f:a1:2d:61:61:66:c3:6e:ab:
                    1d:5e:b1:97:e8:08:49:f2:8c:f8:a0:c8:c4:fb:24:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:6B:A7:7F:45:83:81:32:61:3B:2A:D6:FF:3A:C9:0B:04:7D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2892b64-9de5-324b-b5ff-ece5dde1498b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.225.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:cb:5b:ca:9d:88:d6:6b:39:1e:3c:d1:89:e6:f6:e6:f7:
         ad:34:ba:8b:8f:6a:93:0a:96:d8:0b:de:39:75:e6:e7:a4:23:
         ea:45:b6:78:7e:68:42:25:7c:87:13:08:b5:69:9d:d3:6c:a4:
         15:00:50:3b:5e:3c:ac:19:d4:2e:6a:80:ed:35:06:7d:4c:7c:
         56:38:80:b7:ba:9e:2c:70:c5:ee:46:37:70:bb:4d:49:c7:d1:
         d8:6c:12:7b:75:0e:f7:f7:e4:e2:60:b2:34:44:fe:42:7e:ad:
         8c:be:74:bf:3a:15:d3:fc:d3:38:94:78:54:78:17:37:d6:82:
         03:bc:48:b8:a1:73:f0:e7:68:20:d2:45:69:5a:fd:05:51:c0:
         cb:8b:80:5b:88:e2:a2:c3:1a:1e:b3:ef:61:37:68:b8:d5:e9:
         d1:b2:e3:b4:8e:99:61:5d:34:2a:5b:51:df:ef:fa:2a:96:60:
         d6:6b:ba:d3:c8:f6:b2:e0:ff:e7:08:f2:30:75:0d:b5:2c:33:
         7d:33:c8:df:04:f8:c0:c2:d8:28:7e:a4:58:aa:29:37:28:02:
         9b:4a:ba:5f:99:df:38:7b:c5:7b:6e:64:bb:83:61:cd:34:61:
         04:c7:d9:64:d4:d3:71:ff:ad:4b:b6:e8:e5:b4:f5:fb:db:4f:
         32:75:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----