Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/9dc17903-2f47-3f0f-801c-7ea2205239cf.roa
File:                     9dc17903-2f47-3f0f-801c-7ea2205239cf.roa (raw, json)
Hash identifier:          C8s7kQbSj4MLbIjfcBWsIbWVFbjpxZxh5Pb0RyHRr2I=
Subject key identifier:   93:22:64:7A:60:D6:0C:22:E6:4A:3C:6C:63:D4:FF:6A:A7:2F:C4:EB
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285840DB6FC3C501D78E3F54322580
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/9dc17903-2f47-3f0f-801c-7ea2205239cf.roa
Signing time:             Mon 10 Feb 2020 18:18:36 +0000
ROA not before:           Mon 10 Feb 2020 18:18:36 +0000
ROA not after:            Wed 14 May 2025 04:00:00 +0000
asID:                     60721
IP address blocks:        68.67.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 Mar 2023 16:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:db:6f:c3:c5:01:d7:8e:3f:54:32:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 10 18:18:36 2020 GMT
            Not After : May 14 04:00:00 2025 GMT
        Subject: CN=b2b95cf0-387d-408e-a86c-f96aae37ee54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:25:ca:81:a1:0e:44:1c:2f:f4:07:10:20:
                    5f:a2:14:2f:11:9d:40:00:3f:2c:ec:b7:1c:89:fd:
                    ad:4e:c1:e1:65:9f:6b:29:59:ce:7f:20:67:c4:bd:
                    a5:11:a9:89:4f:cd:3d:82:fd:ac:32:56:e7:d8:33:
                    10:8e:40:b9:7b:58:cc:e3:12:31:a5:35:d9:5c:43:
                    3d:f9:e5:bb:cb:95:28:fa:a5:3e:a9:0a:87:46:4f:
                    9f:bd:b7:e8:b7:9f:d9:63:95:ff:a1:71:6f:f7:fd:
                    e0:4d:aa:99:a6:ad:d0:0c:48:53:5d:28:fa:1d:5d:
                    49:ed:cb:31:60:99:53:ab:33:f9:11:b9:ac:22:d7:
                    51:eb:13:c0:81:c6:cb:cd:ea:7d:ab:82:69:be:83:
                    9d:5a:84:8a:4a:4f:38:e4:b5:c3:25:1f:61:45:f4:
                    f9:8d:e0:5c:24:91:c4:a2:64:0a:70:60:47:10:12:
                    87:aa:bb:b2:0e:aa:71:b9:b1:6b:87:16:a7:78:f5:
                    20:1c:36:41:b7:92:65:b8:fb:24:63:6f:cd:74:d0:
                    61:81:4d:c1:5c:04:b5:0d:8b:f1:14:bf:ff:d7:a3:
                    ed:2f:80:ae:61:bd:2a:67:ec:55:85:ea:f0:00:5d:
                    84:94:31:d4:76:92:0f:63:96:97:12:9b:00:62:11:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:64:7A:60:D6:0C:22:E6:4A:3C:6C:63:D4:FF:6A:A7:2F:C4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/9dc17903-2f47-3f0f-801c-7ea2205239cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:86:22:20:90:00:31:a3:98:d4:1a:73:ec:0a:bc:04:78:
         ce:16:e9:6c:ef:ba:42:3b:60:92:e4:0d:fe:e9:e3:50:a2:a7:
         c7:a0:14:96:0f:6b:13:e5:a5:73:53:3d:24:21:7c:a9:70:33:
         ff:4c:6c:48:c6:a5:88:b0:62:e1:54:d6:21:01:54:3e:f7:5c:
         22:54:a8:97:74:49:30:32:55:02:e0:5a:93:91:18:8d:c7:2f:
         9d:00:88:5c:d0:6b:29:52:e9:58:71:37:4c:1d:d7:b6:23:eb:
         b7:40:ce:01:13:cf:2f:3e:1f:70:6d:a2:9d:08:9b:5f:9d:50:
         cd:be:df:62:b4:2a:9e:eb:ab:6b:d6:e5:c4:a9:1f:66:41:10:
         09:78:f2:31:bb:fa:62:7d:ea:63:74:de:eb:47:e7:fe:f8:cb:
         ec:e8:96:f7:5d:20:f3:b7:ba:d8:69:33:e5:0e:2d:35:80:f4:
         a1:81:1b:b3:1d:91:d7:7d:9d:8d:3d:a8:0e:63:5c:ef:80:8a:
         94:c7:36:9a:a1:dd:79:30:9f:e2:22:56:0b:98:3c:46:f8:7b:
         6e:96:90:8c:73:67:61:22:6f:fe:60:2a:90:81:fe:84:63:bb:
         3e:71:09:89:17:64:9a:46:4d:f5:07:e1:e6:ef:4e:bf:a1:d3:
         9d:9b:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----