Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/02714d0d-9e3f-3865-b264-bfb4603b4bf0.roa
File:                     02714d0d-9e3f-3865-b264-bfb4603b4bf0.roa (raw, json)
Hash identifier:          c9zhTFi599J+nowqLn6ydr0BiMQ9v50Kd6ywNcw0mQk=
Subject key identifier:   56:35:DA:85:78:FF:B2:ED:6B:04:9A:71:BA:CB:D3:3B:50:CD:43:8A
Certificate issuer:       /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial:       010D0C9F43285846F8C02D698EAC28570B4E0480
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/02714d0d-9e3f-3865-b264-bfb4603b4bf0.roa
Signing time:             Fri 23 Aug 2024 13:00:41 +0000
ROA not before:           Fri 23 Aug 2024 13:00:41 +0000
ROA not after:            Thu 21 Nov 2024 14:00:41 +0000
asID:                     7018
IP address blocks:        74.122.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 16:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f8:c0:2d:69:8e:ac:28:57:0b:4e:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
        Validity
            Not Before: Aug 23 13:00:41 2024 GMT
            Not After : Nov 21 14:00:41 2024 GMT
        Subject: CN=65208105-c3db-4644-8e68-e181f8930069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:4e:45:a5:86:f3:8a:1c:a2:3a:22:1a:07:
                    d3:8c:e5:a9:ef:a3:81:5b:db:52:1c:48:e8:23:15:
                    98:a2:a5:ac:88:ac:36:86:e7:99:b0:54:e0:28:4f:
                    ba:4b:9d:21:73:e8:d4:6a:13:b3:ee:75:e9:85:f8:
                    b8:0c:8a:49:9c:01:43:95:ae:1b:f7:ff:80:26:c4:
                    de:36:f7:71:ee:eb:66:e6:c8:8b:c0:59:9b:c0:75:
                    43:4d:34:36:4f:43:96:97:12:c6:e2:c5:90:5b:b2:
                    3b:3b:58:f2:bf:bc:2d:47:7b:14:0b:89:5e:60:ca:
                    7d:df:38:69:db:3d:a2:a9:e5:03:02:30:3f:74:aa:
                    3f:55:cf:db:7c:79:d2:8c:51:96:9b:4b:55:e8:b6:
                    94:fa:a8:f7:3f:87:11:33:55:45:09:d1:64:f9:5e:
                    f9:db:99:5a:e3:63:73:99:1f:44:f1:b0:ae:84:80:
                    87:e5:27:f4:8d:24:7c:eb:98:f0:ef:1c:a9:44:ee:
                    f6:39:69:09:4f:4f:58:d2:e0:13:b5:90:12:38:b7:
                    e7:2b:d7:9f:48:93:8d:21:14:5a:2d:8b:74:73:c6:
                    91:83:d4:34:cc:8f:c2:4e:06:7e:bf:82:10:9c:48:
                    d1:63:e8:63:7b:83:fc:15:d3:64:60:78:7a:e1:c7:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:35:DA:85:78:FF:B2:ED:6B:04:9A:71:BA:CB:D3:3B:50:CD:43:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/02714d0d-9e3f-3865-b264-bfb4603b4bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:18:79:fe:22:2c:b3:b0:09:ce:70:1d:43:37:39:fe:3d:
         5a:2a:06:9c:6a:90:a0:c2:43:85:29:66:3c:da:88:cf:26:40:
         1a:63:a7:b7:cc:b3:d3:18:cc:14:f4:89:70:b4:7a:8a:ea:7c:
         02:7e:21:4c:d4:56:2a:8d:38:7e:75:78:d6:83:3f:9c:a4:51:
         fb:b5:9c:1c:48:a8:a4:07:43:67:e5:1c:bb:06:c9:7b:19:a2:
         31:54:23:2f:c4:2e:b0:a4:5b:92:76:ff:ec:31:00:fa:ea:06:
         2c:54:df:e9:e2:f6:14:f7:68:a4:93:7a:a8:7a:e2:cd:00:db:
         9d:26:66:25:ec:26:d7:59:d6:48:8b:64:ce:1f:0a:f6:1c:cd:
         d1:9e:31:51:86:8a:b6:97:da:b4:2a:0f:0f:ad:b1:ad:8c:fe:
         d3:ef:08:3b:a8:21:ff:f1:eb:9b:0b:ee:5e:98:76:5d:32:5e:
         d6:c5:e0:5e:55:40:4c:63:a2:cf:ae:ee:c6:fe:cd:60:0e:1a:
         16:7f:de:39:40:df:4e:f3:9b:94:46:f7:8f:7d:ce:7f:4e:0f:
         21:bc:95:6e:95:c2:89:af:dc:3c:5f:1b:33:7c:82:96:58:22:
         3f:a5:fe:27:79:c9:dd:3a:6b:d6:a1:d4:48:a1:6a:b6:b9:af:
         25:9a:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----