Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/7d2b2913-c4a5-345f-bc30-a86c00cb80ad.roa
File:                     7d2b2913-c4a5-345f-bc30-a86c00cb80ad.roa (raw, json)
Hash identifier:          St+GPGrqSHpEwYlYHJalE5vjzg2pUTMvF7hJ6V08Hr0=
Subject key identifier:   E5:AB:25:47:12:9A:20:83:23:A3:E7:92:5D:BF:54:9C:F4:A5:9C:DB
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F43285846B2F51C8048CA5C9BECD24000
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/7d2b2913-c4a5-345f-bc30-a86c00cb80ad.roa
Signing time:             Mon 29 Jul 2024 13:00:38 +0000
ROA not before:           Mon 29 Jul 2024 13:00:38 +0000
ROA not after:            Sun 27 Oct 2024 13:00:38 +0000
asID:                     54203
IP address blocks:        64.145.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 13:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b2:f5:1c:80:48:ca:5c:9b:ec:d2:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Jul 29 13:00:38 2024 GMT
            Not After : Oct 27 13:00:38 2024 GMT
        Subject: CN=0f91f771-8160-4320-b9cf-40feb71e1802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:c4:7e:97:48:1a:5c:c0:ca:5d:ae:43:ff:
                    53:7a:6a:f2:0e:5e:5f:37:36:2d:33:e9:00:e3:b1:
                    12:0d:3b:47:d3:70:61:e2:79:e0:d2:36:4b:c0:cf:
                    94:16:81:6d:f3:a1:16:51:86:1a:ad:5f:de:94:c8:
                    63:f0:1d:94:cb:e3:98:f0:d0:b7:78:b0:22:07:fa:
                    51:8e:71:c8:d4:32:8e:40:8d:a5:5f:58:aa:d3:c0:
                    89:7c:ee:e0:44:5c:c2:11:d1:76:82:e9:42:6a:34:
                    23:2a:40:91:88:e1:3e:db:7a:49:f6:b4:d1:bd:d3:
                    18:72:e5:05:40:e2:55:b3:12:6c:ad:83:17:76:22:
                    16:e1:79:85:69:dc:b4:b6:cd:d9:cf:fb:17:e4:67:
                    a2:32:6f:d7:8a:53:21:73:dc:6f:13:39:5e:f1:46:
                    30:ac:ac:d0:b5:b3:3f:0c:da:8b:8c:18:34:b0:fa:
                    21:77:20:03:8e:9c:f9:ca:6c:14:4c:35:52:e4:a3:
                    59:c7:cc:d7:81:5d:97:1b:4b:8d:2b:34:97:be:da:
                    95:55:0c:d7:6a:7a:8b:a9:f6:65:0f:8c:3c:6b:b6:
                    de:ba:01:ba:47:06:e0:8e:9a:ed:12:65:16:aa:32:
                    82:e1:5c:d5:e2:0e:15:83:ba:03:66:04:3c:53:bd:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AB:25:47:12:9A:20:83:23:A3:E7:92:5D:BF:54:9C:F4:A5:9C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/7d2b2913-c4a5-345f-bc30-a86c00cb80ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:c7:fe:a1:a4:ce:86:d5:d2:3a:8d:3c:f1:84:ab:44:ca:
         47:f1:48:1c:69:08:59:6a:55:a4:b9:c9:72:52:02:2e:f6:52:
         47:6a:9e:f6:78:09:1d:8b:16:7e:6b:ad:de:cd:9b:92:a8:9d:
         f4:b2:ba:fe:7f:43:c3:2f:95:75:49:28:12:b6:87:ab:ee:7c:
         48:9a:c4:fc:8a:79:f8:43:c6:e0:b8:be:9e:fe:29:0d:77:25:
         5b:61:9c:1a:58:27:58:5e:9b:05:1d:34:d2:5a:a4:9d:cf:2c:
         67:78:a0:be:10:c5:a1:b4:b1:df:9c:f5:39:b7:9a:8c:f9:eb:
         cc:ff:ef:4c:8a:55:9b:34:8b:69:94:94:4d:4b:40:cb:1f:24:
         74:f8:4b:d3:91:04:c9:49:d4:04:a9:1a:63:68:84:9c:8f:a8:
         93:9b:65:2b:11:25:a3:57:d8:65:7f:c1:eb:55:ca:fc:26:2b:
         a0:38:61:70:21:96:81:bb:da:95:3c:9c:cd:08:2b:6e:7a:5c:
         52:3e:03:2e:bd:ed:cb:e2:23:d9:f1:7e:e3:30:c9:f2:0b:a4:
         0d:30:4c:7d:c1:34:cb:f9:4e:88:fa:da:e6:be:19:99:e2:1c:
         64:2d:c1:cb:c5:af:95:52:99:d9:9c:41:c0:9c:4d:31:4a:c1:
         50:c2:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----