Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db3d9d47-eb22-37a6-9e7e-a7df09cba855.roa
File:                     db3d9d47-eb22-37a6-9e7e-a7df09cba855.roa (raw, json)
Hash identifier:          qkvvyb21FQG+uUQE5kWgIkw01jRMuUnsrxwJTNFE0xs=
Subject key identifier:   C1:5A:56:66:B2:C3:B2:60:96:91:FF:62:E8:96:85:40:05:51:CB:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DEFDC503A72C8B1D90A44E680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db3d9d47-eb22-37a6-9e7e-a7df09cba855.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 16 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        96.250.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:dc:50:3a:72:c8:b1:d9:0a:44:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 16 04:00:00 2025 GMT
        Subject: CN=55644e6f-3636-4e9c-98a5-a40c5b1cbecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:de:e8:ef:fa:3d:91:f3:63:ac:87:45:2c:
                    75:67:5a:67:76:a5:98:65:f4:55:7d:47:17:59:e0:
                    f2:99:42:bf:c3:71:f5:00:a5:c5:6d:98:4b:0e:2a:
                    1e:69:90:e7:71:5e:de:2b:9c:b3:ec:b9:ff:f5:1b:
                    06:44:3d:26:c0:6c:05:89:16:18:98:c8:a8:7c:12:
                    e4:a5:83:f4:4b:0e:82:42:c1:9d:92:dc:5a:bd:c8:
                    f5:c4:ac:22:aa:e9:a9:e2:17:a8:7d:14:3e:1f:81:
                    2f:d1:c9:2f:8b:9f:f0:61:b1:80:4a:3e:52:8d:fc:
                    58:92:df:f3:72:65:24:43:1f:88:c8:da:bf:9a:12:
                    23:91:35:b4:eb:73:1f:7d:29:06:aa:82:22:f3:f6:
                    e4:99:c3:5b:30:37:8b:de:1f:14:60:56:93:07:8d:
                    c6:7f:48:5b:64:e5:44:c4:b3:37:a8:7a:1a:85:b3:
                    f5:31:ec:07:fb:aa:17:17:3c:e6:bd:b7:c3:2d:a8:
                    6e:ae:6b:8b:df:89:59:a2:9c:e2:9d:dd:0b:67:4f:
                    b4:d2:15:4e:0e:73:c3:81:25:44:e9:c7:06:de:c0:
                    a2:92:f4:f9:a8:1f:fd:fc:7a:ee:3f:e8:e8:f0:7c:
                    18:ad:46:ed:fd:dd:8a:15:78:7e:12:60:80:17:96:
                    2b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5A:56:66:B2:C3:B2:60:96:91:FF:62:E8:96:85:40:05:51:CB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db3d9d47-eb22-37a6-9e7e-a7df09cba855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:44:e9:2b:f5:a9:3e:0f:05:2f:de:ff:62:70:74:61:b3:8f:
         2a:7d:33:31:7c:92:16:ed:4e:5d:48:a0:c1:3f:0a:c5:bb:2d:
         2f:9b:1a:22:67:c8:36:77:bc:6b:11:5f:91:78:3e:53:99:32:
         a6:52:d6:a0:14:b2:24:c4:da:d3:7e:90:56:38:e9:f7:ce:6e:
         80:fa:d5:fa:3e:d5:e6:b9:7e:94:50:5a:f2:8b:7b:72:d8:83:
         ba:02:dc:dd:b1:c7:8f:1d:9a:7a:51:10:15:82:2e:52:f7:9e:
         b8:b3:3f:61:df:52:5c:0c:66:3c:a1:3a:11:4e:28:82:78:09:
         9c:84:8a:70:2f:a4:88:81:81:9e:f6:30:39:ac:e5:7e:13:6f:
         fb:57:0b:49:5c:21:de:19:fa:5f:d1:58:aa:7d:4a:ae:9d:97:
         cd:0f:f6:29:10:ab:46:ed:2f:4b:40:a8:4e:df:5e:3d:35:b8:
         d3:66:08:2e:d6:1c:9b:e3:e9:81:5c:ae:30:be:90:cc:c4:ea:
         bf:de:ac:38:9d:cb:28:fb:0b:63:9a:b6:8c:16:6e:5d:73:96:
         45:15:08:66:5c:47:40:38:9c:1b:80:86:a5:43:82:68:57:7d:
         c5:32:2a:76:03:db:8c:17:1d:0a:4b:86:7a:09:ed:63:75:41:
         e2:e1:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----