Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/036cda68-f1f2-3d23-9fc2-62b2953b8d0e.roa
File:                     036cda68-f1f2-3d23-9fc2-62b2953b8d0e.roa (raw, json)
Hash identifier:          xl5g8AagXrQVtfM5iai+NsKf4l0ss1PQDHyoHVe+HCU=
Subject key identifier:   57:BF:DA:42:76:42:54:A6:6E:3E:FF:24:2C:53:FC:AC:58:73:39:19
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F43285844DD79C1EDA66C8DF9B0ECBD00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/036cda68-f1f2-3d23-9fc2-62b2953b8d0e.roa
Signing time:             Mon 12 Feb 2024 08:58:07 +0000
ROA not before:           Mon 12 Feb 2024 08:58:07 +0000
ROA not after:            Sun 12 May 2024 07:58:07 +0000
asID:                     33383
IP address blocks:        16.134.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 09:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dd:79:c1:ed:a6:6c:8d:f9:b0:ec:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Feb 12 08:58:07 2024 GMT
            Not After : May 12 07:58:07 2024 GMT
        Subject: CN=28f2c6b3-949c-43bc-a850-1e482b80f7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:13:36:93:2f:bf:ac:d1:7f:29:78:be:c9:
                    9a:72:6a:38:ec:db:b6:20:28:28:0f:c9:18:3e:ac:
                    c7:6a:42:b1:d8:9c:bd:d6:e0:c8:9e:37:64:cb:c4:
                    33:33:b5:69:c3:83:91:ec:63:b5:c4:41:e7:35:93:
                    0b:35:06:c9:7f:da:a4:99:fe:60:b9:d8:13:22:a2:
                    20:4b:6e:8e:87:e9:c9:4c:de:65:27:2b:01:34:8a:
                    4f:33:85:8e:88:22:90:60:29:a3:12:52:7a:2d:3a:
                    eb:48:39:5b:2a:02:a2:a0:c2:36:6a:68:a3:dc:9c:
                    3a:b1:ac:5b:19:6f:8c:e3:26:2d:20:cd:11:1e:54:
                    a4:f9:73:25:e4:ad:ab:26:8f:65:39:27:44:f6:fc:
                    8b:8f:bf:07:16:95:d5:44:bd:eb:c3:a7:51:ed:33:
                    81:e6:08:0d:4f:ce:8c:66:d5:99:dd:17:da:c5:c4:
                    b6:48:f2:33:96:d5:ec:b2:8d:2c:9c:c7:61:e5:a5:
                    70:81:81:70:36:00:d3:18:6e:0c:f3:f1:61:1e:c4:
                    53:bb:1e:31:e3:19:ec:1a:88:19:3d:d5:9b:a3:c4:
                    c5:67:6a:17:77:91:fb:e9:fc:3c:1b:e2:45:e9:f0:
                    55:5e:77:35:75:c7:e6:0f:1a:71:33:ce:98:6e:4b:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:DA:42:76:42:54:A6:6E:3E:FF:24:2C:53:FC:AC:58:73:39:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/036cda68-f1f2-3d23-9fc2-62b2953b8d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.134.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:73:40:59:4a:45:30:77:39:90:97:33:16:00:f3:72:e9:0d:
         0d:c3:72:f5:39:57:36:9c:13:d6:9a:b2:65:a2:8f:37:97:4c:
         9a:fc:bf:34:ec:7d:36:30:9d:2d:94:b0:82:b4:b1:0a:15:a8:
         9d:35:d5:f1:73:11:d1:65:35:f9:cf:f5:22:6c:aa:d6:d2:52:
         df:f1:ab:bd:43:d1:a0:d6:3b:51:8a:9a:7b:68:02:37:7f:a5:
         d3:a6:c4:99:97:d6:89:3b:09:75:82:ce:28:c1:b2:b4:ff:9a:
         9c:12:6d:b1:5a:c0:da:61:2b:61:5a:ef:26:f0:e6:03:25:67:
         a8:a0:5c:3e:d4:c7:4d:76:67:3d:ee:e4:f2:71:42:5e:5a:34:
         bd:36:24:83:74:4a:b4:15:57:ec:d0:33:cf:10:ab:e5:e0:79:
         82:8b:82:71:bf:84:bf:90:4f:4e:96:e0:5b:a7:b4:e4:b9:b5:
         94:b5:73:b3:6d:8e:50:fb:9c:57:8a:07:5c:46:ff:48:56:81:
         36:bd:9a:ab:16:62:12:4c:cb:fb:71:74:3f:af:7b:00:b7:7f:
         d3:9e:c0:a8:01:c5:3b:f9:00:d3:5d:1f:c1:53:94:c4:a0:e7:
         77:de:b4:16:b6:60:81:96:f4:79:60:63:57:d3:e4:03:f7:1a:
         f1:3a:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----