Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/0eb1f686-bd23-391e-bc3d-7943bbe94a4f.roa
File:                     0eb1f686-bd23-391e-bc3d-7943bbe94a4f.roa (raw, json)
Hash identifier:          jbbGOoUcRkfvITaSYTZ991QQygDH2NTq+jVn7gJhwBQ=
Subject key identifier:   C2:5C:C3:2C:29:C2:99:73:03:F9:A3:27:EA:B3:02:57:71:7F:2C:CA
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285844BDF4FAEEE693AEAF6DD11D60
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/0eb1f686-bd23-391e-bc3d-7943bbe94a4f.roa
Signing time:             Thu 01 Feb 2024 02:00:26 +0000
ROA not before:           Thu 01 Feb 2024 02:00:26 +0000
ROA not after:            Wed 01 May 2024 01:00:26 +0000
asID:                     834
IP address blocks:        67.43.32.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 16:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bd:f4:fa:ee:e6:93:ae:af:6d:d1:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb  1 02:00:26 2024 GMT
            Not After : May  1 01:00:26 2024 GMT
        Subject: CN=ed367cf5-ac4a-4202-a334-cb92d9d2a432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:d9:45:b9:0f:ec:9c:d4:2b:81:1d:64:c4:
                    09:38:69:a4:7c:da:46:ba:16:90:a2:bd:ba:1b:a3:
                    3f:fd:dc:c9:66:5c:73:ed:b9:51:40:22:4f:2d:29:
                    81:26:03:59:4a:7f:2b:bf:d2:51:2a:a3:0b:be:b0:
                    bd:06:53:b9:27:61:94:e5:9e:a2:2b:02:17:6f:f6:
                    27:05:8d:d2:43:83:63:bc:1d:3e:6f:7d:cc:7f:fa:
                    8e:ff:85:f3:9c:f0:da:87:76:0a:c7:1a:5a:d0:8b:
                    a3:6e:0c:dc:d8:b7:6c:60:97:14:b5:23:de:1d:b4:
                    41:fe:b3:6d:de:c0:1b:2d:5d:a8:f5:83:69:30:f8:
                    b1:bb:9b:e6:75:9a:46:d7:d6:42:39:4f:99:29:78:
                    de:2f:d9:61:13:a8:e4:a2:f9:55:b2:f8:30:35:ee:
                    c0:fa:4b:d4:05:d7:49:db:19:ff:86:81:27:ab:73:
                    7f:46:f7:51:3d:21:d9:c6:69:af:8d:ca:15:f7:ae:
                    8b:23:8a:89:0d:87:4f:c2:9f:ff:57:78:52:9a:2f:
                    25:c1:a2:d6:c6:99:4a:9a:23:2a:ac:c5:48:c8:d3:
                    53:fd:3f:da:48:c6:ab:ba:51:fa:b5:65:25:d9:61:
                    ef:d5:55:3d:fe:c3:fe:74:a3:03:a7:10:88:22:54:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5C:C3:2C:29:C2:99:73:03:F9:A3:27:EA:B3:02:57:71:7F:2C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/0eb1f686-bd23-391e-bc3d-7943bbe94a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:c9:90:ea:6d:05:05:c5:64:71:bc:c4:6b:62:08:39:48:9a:
         d1:9b:7d:80:dd:03:cf:17:19:07:1e:bc:d2:8d:78:0c:c2:c9:
         a2:f8:cf:d0:fc:05:60:e2:97:f8:f2:98:ae:19:5f:97:05:a6:
         c1:b3:3e:61:25:44:cf:91:e6:1b:40:8e:73:12:e4:3c:a3:8c:
         53:b0:26:1c:b2:04:f6:de:3b:db:b0:ab:88:6e:8a:3a:4b:9d:
         bf:46:81:fc:aa:17:63:74:0e:03:00:e9:9b:3d:4c:c6:73:68:
         7e:4d:2f:4f:01:ca:70:23:29:34:2b:0c:f7:60:4f:01:75:ce:
         cb:4e:96:89:dd:ee:ec:b2:db:82:39:87:14:18:59:21:2a:d0:
         ab:e9:9e:3f:ea:3a:a8:65:10:14:1d:8d:3a:3d:a9:c7:1a:92:
         3f:1e:7b:62:13:2d:b3:10:18:a6:57:2c:50:e8:fa:fe:9e:46:
         65:60:dc:75:79:b3:ac:67:a3:fc:5c:7b:d2:35:08:8a:21:20:
         5b:29:4c:2f:21:9b:6e:20:26:55:28:35:4d:b3:77:73:bf:6d:
         2b:70:be:24:4f:09:f4:39:d1:fe:81:86:79:92:e7:56:9f:1c:
         0e:6b:af:41:71:9c:99:69:b9:cd:38:32:9b:c8:c8:6a:c0:bc:
         88:0c:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----