Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/0eb66577-db29-3a7a-b5f7-3e624e998a47.roa
File:                     0eb66577-db29-3a7a-b5f7-3e624e998a47.roa (raw, json)
Hash identifier:          fOPL9nrEyryVatmG2D7J7zll+t0ga00jlV0sJY4nZ7g=
Subject key identifier:   AA:B7:87:75:D3:28:F8:52:A9:02:34:1B:5B:6E:B4:31:8E:FA:8F:12
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F432858468F2D0C37635937D5DB898E40
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/0eb66577-db29-3a7a-b5f7-3e624e998a47.roa
Signing time:             Tue 16 Jul 2024 17:24:22 +0000
ROA not before:           Tue 16 Jul 2024 17:24:22 +0000
ROA not after:            Mon 14 Oct 2024 17:24:22 +0000
asID:                     834
IP address blocks:        199.7.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 17:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8f:2d:0c:37:63:59:37:d5:db:89:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Jul 16 17:24:22 2024 GMT
            Not After : Oct 14 17:24:22 2024 GMT
        Subject: CN=16772d9a-9e70-46ca-b4f8-358058358591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:38:8e:fc:86:00:6e:3d:aa:7a:0d:2a:5f:
                    49:14:f4:44:7a:9a:a4:a3:0f:60:4c:72:56:f4:cb:
                    09:c0:ab:bc:25:1a:22:d9:34:1b:cf:33:83:7f:59:
                    37:91:e7:1b:35:dd:e1:74:96:d7:99:c4:73:25:33:
                    a9:6a:a7:e9:cf:77:fe:50:93:7c:63:01:dc:47:84:
                    bb:23:08:e3:88:b0:08:3e:e3:b4:90:c4:d1:f3:9c:
                    63:b4:a0:17:a6:f9:1b:a1:96:03:f5:7c:fe:a3:47:
                    ea:f1:94:28:63:46:ad:d0:29:fd:f6:b2:cb:2c:f6:
                    04:ad:ad:e7:2a:71:7f:db:2c:17:29:8b:d1:27:7a:
                    e9:44:f9:3c:e6:e8:82:4b:92:b0:20:d9:9c:fa:84:
                    c7:7d:d6:e4:48:43:e0:af:84:8b:d5:1a:0b:3d:6f:
                    62:0c:fa:34:d4:ab:aa:c8:bc:0e:64:30:a2:3b:5e:
                    31:a5:dc:93:ac:3c:1e:a7:7e:30:1f:c0:33:4c:e3:
                    81:7a:c9:0a:df:95:17:c4:99:a5:86:41:4f:b8:e4:
                    87:6a:c5:77:06:30:a0:2a:62:09:fc:8f:b9:26:f4:
                    f0:52:34:61:b0:40:50:b8:ff:8f:d7:fa:2d:44:40:
                    3b:ce:a4:8b:a0:b0:b7:5e:a5:d6:a5:50:0c:d6:27:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:87:75:D3:28:F8:52:A9:02:34:1B:5B:6E:B4:31:8E:FA:8F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/0eb66577-db29-3a7a-b5f7-3e624e998a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e5:2b:01:2b:5a:dc:e7:95:73:e8:c4:28:fa:e8:ec:60:5a:
         1f:83:33:f4:d6:58:7d:a7:cf:68:9d:07:88:16:f0:4c:d8:e5:
         3d:63:71:97:98:00:07:99:42:db:de:f5:88:dd:3d:cc:d2:bd:
         0f:4a:9e:9e:7c:ac:d0:04:95:e1:4e:e9:81:a7:d0:ad:24:64:
         5f:c0:f2:aa:c4:18:eb:b1:1e:47:63:b6:41:cd:d7:93:e0:e5:
         d5:34:63:c9:2c:ef:a8:80:de:d6:ae:ba:3d:7d:79:cb:97:5b:
         d5:91:11:91:90:05:a5:bc:0d:e1:8b:16:86:a5:36:4a:7e:4c:
         ea:44:ea:2e:e2:5e:72:19:a0:f2:9d:7d:48:66:5a:93:86:b3:
         6c:04:74:f1:de:ef:c4:0a:7a:30:31:f8:74:a2:20:6b:d7:4f:
         52:3d:f9:b9:78:a5:44:0f:56:8c:37:12:87:5c:82:79:c5:28:
         d3:f0:60:b8:ed:47:a8:39:7a:fd:dc:00:38:6e:f3:1f:e8:4b:
         af:17:c5:67:4c:25:68:8e:63:53:61:fa:54:99:bd:f4:42:31:
         b2:11:13:71:69:24:20:32:22:e5:c9:a0:29:94:39:3c:07:13:
         96:39:e6:c3:34:dd:9a:09:ee:5e:1f:0d:c1:68:43:d0:9a:97:
         47:f3:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----