Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8cfd1181-7876-39e0-a7ff-ecabb57077dd.roa
File:                     8cfd1181-7876-39e0-a7ff-ecabb57077dd.roa (raw, json)
Hash identifier:          mJ+g0xmQLiJmCpQuZQimS4DiZT5lvtc46wXHYtBEcQY=
Subject key identifier:   68:FD:85:B5:B1:96:E2:19:07:77:95:58:2B:5C:5C:D7:3A:A2:19:3D
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720AEAF75D5EFC73D6B15EB4
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8cfd1181-7876-39e0-a7ff-ecabb57077dd.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     36040
IP address blocks:        207.126.152.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:ea:f7:5d:5e:fc:73:d6:b1:5e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=2f05fb4f-34ab-4dc6-b7fa-0f4a806bb56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:5b:82:9e:f3:d3:36:04:4c:c8:53:6e:60:
                    99:fc:d1:93:f2:e4:31:39:9c:99:55:17:0d:b5:6d:
                    a3:8f:65:42:49:0d:66:01:3e:3b:8f:ef:62:42:15:
                    7d:d8:4e:0b:14:a6:01:8a:38:bf:a5:8c:d7:fd:7e:
                    74:f3:30:6a:c4:6b:cf:6b:27:e9:69:e4:a4:dd:f8:
                    0d:4c:87:16:27:ed:53:4e:a3:4a:d7:0a:48:93:3b:
                    d5:8c:9c:96:26:09:c9:84:33:51:4a:ba:d8:26:42:
                    e8:4b:d5:35:c5:1d:46:ac:f7:a5:0f:1c:55:68:b3:
                    b7:e8:81:c3:19:5d:91:ed:b5:00:3f:91:88:97:e7:
                    b2:48:f2:a5:9e:be:6b:04:8a:3b:16:6c:47:f9:e0:
                    84:af:18:a3:52:67:c5:f3:ec:bd:d1:3f:c8:82:84:
                    ef:c4:3c:17:2f:89:7b:7e:ae:38:61:3c:0d:a5:56:
                    18:d6:6e:90:d2:22:a3:06:ff:c4:b8:78:60:28:cc:
                    6b:30:a4:e1:51:23:dc:9d:56:01:f9:c2:ac:51:61:
                    d6:c4:5b:7c:d8:24:ba:70:2f:c6:f9:e8:ad:08:f5:
                    46:10:89:11:43:3e:f9:a3:2f:5a:12:81:b9:c0:56:
                    70:23:8e:ea:3c:4d:15:ad:17:f8:5b:45:d7:0c:fe:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FD:85:B5:B1:96:E2:19:07:77:95:58:2B:5C:5C:D7:3A:A2:19:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8cfd1181-7876-39e0-a7ff-ecabb57077dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:2d:03:cf:97:72:f3:f7:c4:4f:97:fb:29:49:8a:14:c7:
         f1:48:a6:56:3c:8c:81:d0:1c:d0:31:9e:9f:40:2c:e3:9a:d5:
         12:e7:43:0e:d3:c7:20:19:42:0a:0c:57:f8:89:2b:84:52:e1:
         2e:03:43:70:e9:d9:5e:19:78:6d:82:5c:04:26:d2:aa:5a:b3:
         69:33:ea:6d:66:32:a9:3a:15:ca:63:21:ef:4a:b8:ac:97:ce:
         ad:97:2b:a7:6b:ce:96:47:1c:e3:56:0d:79:69:9c:34:09:9b:
         3e:60:f3:db:f3:9a:a7:8b:29:28:7d:e8:90:e1:f8:a1:ae:bd:
         b1:24:36:ab:e5:84:88:d0:72:64:a1:43:44:e0:87:91:13:1c:
         3b:8a:d2:fc:39:d8:19:d8:40:0a:df:fc:19:1c:62:f8:15:3a:
         13:45:19:0b:50:67:7a:c9:32:70:05:b0:c5:23:ab:7b:53:4b:
         93:5b:84:33:b5:5a:61:8d:5f:ee:e3:10:ff:9c:bd:04:e9:78:
         70:ee:ec:3d:4e:25:89:a4:8c:6f:88:6f:fd:9a:89:c5:88:84:
         89:16:bb:64:e4:73:eb:b3:02:2d:8c:55:78:c7:e5:96:16:fb:
         7f:8a:c2:51:4a:55:5c:e1:a6:3b:b2:67:47:c3:fa:43:57:66:
         e8:48:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----