Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e80a50c0-f034-3503-b4e5-e5c1a52ab814.roa
File:                     e80a50c0-f034-3503-b4e5-e5c1a52ab814.roa (raw, json)
Hash identifier:          NUpby43ABVjZ6lHX0Rk/hKomtMGYamqpq9BgwgYxQsQ=
Subject key identifier:   BD:35:C0:C6:09:0E:B7:69:B4:12:23:00:10:74:47:79:CF:A3:64:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F0731F16698E8D9A73E5C0C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e80a50c0-f034-3503-b4e5-e5c1a52ab814.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        151.199.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:31:f1:66:98:e8:d9:a7:3e:5c:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=432f54a8-54be-42f6-98c0-65126676e336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:91:24:b7:53:15:df:8d:ac:cd:87:63:b5:
                    44:5e:77:a9:22:21:a2:90:b7:ef:9a:99:36:03:21:
                    15:9a:30:07:ff:1f:17:6a:7a:84:9b:26:5f:9a:1a:
                    f0:ee:98:0a:48:db:cd:c9:03:c3:8c:1b:d4:1b:ab:
                    4b:d6:3e:76:75:ad:e7:ff:fa:ac:6c:bf:19:79:5e:
                    a9:df:0d:d1:a8:4b:d3:12:ff:8c:50:62:49:c0:3a:
                    ea:6c:3b:98:de:59:9c:9a:5d:ff:17:65:0a:b3:8a:
                    86:da:ae:73:e9:c8:c3:0c:77:7b:91:b4:74:8c:59:
                    0f:71:e0:2b:55:7e:91:9f:2a:cc:6c:e6:8d:05:b3:
                    67:cb:5f:11:b1:4d:b0:ac:16:1d:5a:d1:9b:89:7b:
                    0c:01:6d:e3:13:b3:99:28:bf:74:ad:1a:5d:c2:9d:
                    35:a8:f3:66:7b:1d:74:be:f1:90:d0:f4:b8:e0:c3:
                    aa:ae:ba:25:a8:b1:a3:62:fe:32:a9:73:99:40:d3:
                    d7:b6:06:b8:db:a7:8e:ee:0e:75:b7:8e:6f:fc:f1:
                    bb:9d:5b:dc:ca:4b:79:5b:bc:aa:75:79:c4:b5:f1:
                    9b:5b:58:4d:7c:20:ab:38:bb:47:4c:7d:73:fd:fc:
                    f8:0b:8c:1a:fd:6b:fc:fa:73:4f:d3:2b:95:d0:af:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:35:C0:C6:09:0E:B7:69:B4:12:23:00:10:74:47:79:CF:A3:64:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e80a50c0-f034-3503-b4e5-e5c1a52ab814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.199.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:34:48:f4:67:a6:e7:2f:eb:38:e5:6f:3d:e6:24:97:ee:62:
         5c:61:3b:27:68:8f:3c:2a:4c:d4:3f:43:75:32:c2:c1:58:7e:
         03:7b:7c:38:90:23:89:ef:d5:0d:20:8a:cf:0d:7c:71:af:77:
         a2:b0:05:e4:15:aa:fa:fa:9e:43:74:e0:48:71:a5:db:f0:7c:
         ba:4b:d4:80:32:be:ea:08:ef:c8:0b:ac:b3:94:8c:80:10:17:
         53:e2:5e:08:12:1a:41:d5:1d:cb:0d:aa:43:b0:7a:c1:8a:59:
         14:3b:38:9a:7d:0d:a7:b6:a9:54:3c:58:86:da:b9:cd:d6:61:
         a5:98:e8:ef:16:07:2a:a1:72:7e:d7:62:03:8f:23:90:57:4e:
         57:6d:0f:8b:51:98:56:02:e2:9e:96:76:6d:8c:52:21:b0:b4:
         31:e8:e1:95:76:70:18:c5:d5:75:ad:99:4d:40:6c:4b:5e:52:
         fc:8c:2b:50:16:8d:e4:0f:ed:dd:51:12:37:23:97:62:25:9d:
         7f:27:a1:bf:87:29:a2:c4:d4:ac:ff:48:a1:5f:72:72:13:9e:
         ad:90:74:6c:10:59:40:4e:3f:9e:92:6c:31:4b:98:b3:c8:10:
         12:0f:cd:7d:04:5b:80:2f:0b:cd:76:4c:e8:c1:e2:c4:cb:02:
         c0:4d:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----