Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/df0489f3-1d5e-3676-9ee6-fd15222f7dc3.roa
File:                     df0489f3-1d5e-3676-9ee6-fd15222f7dc3.roa (raw, json)
Hash identifier:          o1XEPewYOKFBBMIOHA2f1IQRZ4B3D2d0FBmo91IjU9Y=
Subject key identifier:   CE:9E:50:76:B0:A5:A7:BF:4D:6B:32:F8:CE:2D:D8:FF:16:2C:AF:E0
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F43285840AB5602A5346AE52C6B51F700
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/df0489f3-1d5e-3676-9ee6-fd15222f7dc3.roa
Signing time:             Fri 30 Apr 2021 13:37:47 +0000
ROA not before:           Fri 30 Apr 2021 13:37:47 +0000
ROA not after:            Sun 27 Apr 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        64.112.79.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 24 Jan 2023 02:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ab:56:02:a5:34:6a:e5:2c:6b:51:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Apr 30 13:37:47 2021 GMT
            Not After : Apr 27 04:00:00 2025 GMT
        Subject: CN=4265e9bb-3c57-4c43-bc14-823bedd159dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:c3:b4:b2:e6:31:f9:fd:e4:af:43:59:11:
                    fd:76:f2:c3:4c:3b:fa:0e:56:d2:8c:1e:31:c0:e8:
                    9a:91:4d:98:88:79:b1:a7:10:f9:78:89:4c:5c:06:
                    a7:23:12:6c:af:b5:76:4f:13:96:17:e7:b4:15:ff:
                    e7:09:19:c8:fc:ae:ad:7a:36:05:f9:ab:16:c2:10:
                    d9:8b:fa:63:91:3b:70:71:8f:df:09:28:e6:88:59:
                    9c:78:a2:b0:93:65:37:f8:69:d4:f5:4d:94:52:ae:
                    ef:ce:84:a7:dd:55:f1:26:cc:70:25:2b:e4:db:0b:
                    74:6c:51:40:ad:69:0a:e8:f9:75:00:08:af:0b:83:
                    f3:c0:6d:eb:98:75:12:48:e0:b6:e7:b5:1d:a8:84:
                    69:a1:51:4b:85:d6:08:5a:0e:e1:9d:b1:9b:e2:f5:
                    08:af:32:89:19:1d:ab:d8:40:a8:ab:6a:5c:b0:5f:
                    50:1e:76:dc:e8:0a:b4:3d:3f:1d:ae:5c:71:94:07:
                    40:d8:87:44:bf:d0:94:0e:f8:e8:c0:f9:55:40:21:
                    fd:eb:b2:57:37:0e:01:d5:e9:3e:a4:d7:c2:47:e0:
                    1f:85:96:88:68:51:03:c3:bf:1c:6d:40:08:09:1e:
                    a8:0b:95:86:88:b9:69:b6:67:6b:a9:93:c1:26:a8:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9E:50:76:B0:A5:A7:BF:4D:6B:32:F8:CE:2D:D8:FF:16:2C:AF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/df0489f3-1d5e-3676-9ee6-fd15222f7dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:59:a9:ed:51:b8:17:0c:bb:cb:37:7f:0b:43:8d:7d:7f:49:
         74:fd:c7:d9:4b:1b:4e:79:bb:eb:69:a6:50:03:8e:89:1c:da:
         48:be:b7:3c:57:35:e6:0b:0a:24:f5:57:12:91:6a:cf:4b:8b:
         fd:7c:af:27:c8:2b:6c:e5:f8:73:f3:82:e8:6b:ca:21:3e:85:
         07:6b:95:53:58:36:43:10:b3:05:ab:a9:01:8f:20:e1:c3:1d:
         6b:24:7b:88:20:7e:a1:77:0f:4e:bd:80:e9:8c:2c:b5:dd:a4:
         42:5a:b6:06:6a:c7:20:96:c7:c0:b9:0f:00:07:d7:7d:dc:40:
         44:d3:ea:0c:00:07:cc:d1:68:68:f0:74:20:5e:c2:19:a8:ae:
         78:d1:fa:f7:5b:92:04:53:11:98:22:7f:36:bd:78:e1:73:bd:
         10:03:53:ad:a0:8c:f6:07:5c:f6:3f:21:9d:0b:9a:20:05:c8:
         31:c1:94:3f:a4:a1:58:46:8a:b3:05:c1:3d:a6:c9:95:71:bf:
         6a:5d:dd:6f:a4:39:bc:db:4b:fe:9f:aa:7f:54:6a:c2:8d:61:
         c6:ba:67:78:24:47:b5:3b:fb:ab:50:78:93:68:bf:70:9f:f1:
         88:76:86:7d:a7:65:40:24:9d:dd:a4:51:43:5a:d1:71:42:82:
         d3:17:f8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----