Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eeaa3dda-bbb1-3d2f-9cb6-2ceb0940dfd3.roa
File:                     eeaa3dda-bbb1-3d2f-9cb6-2ceb0940dfd3.roa (raw, json)
Hash identifier:          Vpxue6yclrCapp2vFQm76LwFx2nZPPmFiaDzBWYGJlU=
Subject key identifier:   72:C5:35:D7:0D:33:04:25:D0:86:4F:FD:0A:B5:49:7A:B4:86:F4:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E049938E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eeaa3dda-bbb1-3d2f-9cb6-2ceb0940dfd3.roa
Signing time:             Fri 25 Oct 2019 20:26:20 +0000
ROA not before:           Tue 22 Oct 2019 04:00:00 +0000
ROA not after:            Mon 22 Oct 2029 04:00:00 +0000
asID:                     29956
IP address blocks:        65.249.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:04:99:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 22 04:00:00 2019 GMT
            Not After : Oct 22 04:00:00 2029 GMT
        Subject: CN=d5619617-f800-4ac2-a253-6cfeb46d69d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:6b:a4:e2:60:46:f3:85:92:35:bb:bb:87:
                    73:4b:47:a7:63:f1:19:07:5d:b7:ab:0b:e5:f8:51:
                    6b:f1:12:61:a1:69:1e:70:b0:0c:6a:87:ee:fb:b2:
                    c4:30:34:3a:34:85:30:b2:cc:58:1d:51:d3:c4:48:
                    3a:c7:47:3c:f3:d1:c8:78:44:57:d1:f6:7f:73:fc:
                    eb:04:f4:76:df:d0:fb:44:bf:1e:2d:42:8b:0d:40:
                    1c:d8:92:1f:ad:b3:fa:65:24:a5:15:27:74:5c:90:
                    40:99:6a:fd:15:25:d3:f4:1e:1e:af:86:49:9c:75:
                    a8:cc:99:47:97:20:59:67:60:9a:1f:cb:83:4a:bc:
                    23:29:72:35:ba:de:08:12:03:5f:2e:93:ef:bb:94:
                    44:b6:56:8d:9a:e4:07:08:8d:9c:90:b7:43:0e:59:
                    d3:ea:01:9e:32:38:9d:e5:42:77:6d:ea:c1:3c:72:
                    ac:5d:44:03:76:e7:d0:58:75:77:6d:11:7c:51:41:
                    74:28:ba:59:6e:96:8a:7a:50:74:8e:99:2a:f0:41:
                    08:96:7d:df:60:8a:01:64:40:90:e0:ad:da:11:e8:
                    d5:f8:49:e7:96:4e:54:de:6d:19:8e:72:91:2a:e4:
                    ae:c9:3c:d2:c8:9c:e7:81:97:84:df:49:cd:00:c8:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:35:D7:0D:33:04:25:D0:86:4F:FD:0A:B5:49:7A:B4:86:F4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eeaa3dda-bbb1-3d2f-9cb6-2ceb0940dfd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.249.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4b:a5:72:ed:fe:ae:1a:1d:3f:a6:35:dd:6c:1d:c7:03:fd:
         78:80:7a:b0:82:4c:f4:b1:93:96:45:8f:73:db:78:d9:04:4f:
         d3:2a:d4:db:40:a3:3a:70:fa:69:31:5d:c0:6a:6e:d8:a5:65:
         62:9a:6d:d4:75:25:1f:af:28:a8:9f:38:ac:8f:d2:1e:14:ef:
         7b:b9:a4:e9:b0:10:4b:54:29:d1:b7:aa:a2:ae:63:19:96:ea:
         50:ff:c5:83:4a:71:90:f8:61:e9:90:5a:3f:a4:2a:fb:a1:5e:
         81:12:3a:79:f3:13:36:b6:a5:d0:65:fb:34:c5:61:10:ff:66:
         c5:64:08:f5:7e:52:1a:f0:c8:09:4d:8a:d9:05:8d:7a:96:34:
         7c:bd:d1:6e:bc:6c:97:12:d4:b4:9f:39:0f:a3:d7:d5:13:0e:
         16:36:8d:ef:7e:27:6e:f5:23:9b:df:52:8c:49:7e:64:97:b9:
         c0:f0:bf:c0:90:20:e2:19:4b:2b:21:5a:68:f1:b6:05:d9:20:
         56:aa:a4:a1:34:9a:51:34:56:ff:c7:f4:92:8d:91:b6:40:e7:
         10:2e:7d:34:5b:01:0b:72:c3:08:20:7b:e8:70:9d:ca:55:75:
         c6:9b:4f:96:77:93:35:d8:c6:fb:b7:ca:26:0d:fb:8b:4e:87:
         0c:19:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----