Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/c9543dbe-ff9d-36a4-bbb7-a4d132c92c82.roa
File:                     c9543dbe-ff9d-36a4-bbb7-a4d132c92c82.roa (raw, json)
Hash identifier:          rmwTb3s88AQRRVzeKNFLrs0u38mXjX0G8PIJKNQoKzU=
Subject key identifier:   A4:BB:49:44:F3:68:95:3D:02:16:2F:A4:1E:44:F4:5D:2F:E1:EB:94
Certificate issuer:       /CN=a202cda7-435d-4f90-a518-9afdbac20cab
Certificate serial:       010D0C9F432858464353DE0BEDDCD9C2D155A1C0
Authority key identifier: 55:8B:D5:19:57:B0:AC:92:95:64:00:D1:F4:57:E2:E5:AD:33:4A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/c9543dbe-ff9d-36a4-bbb7-a4d132c92c82.roa
Signing time:             Wed 19 Jun 2024 13:21:09 +0000
ROA not before:           Wed 19 Jun 2024 13:21:09 +0000
ROA not after:            Tue 17 Sep 2024 13:21:09 +0000
asID:                     54702
IP address blocks:        208.65.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 20 Jul 2024 05:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:53:de:0b:ed:dc:d9:c2:d1:55:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a202cda7-435d-4f90-a518-9afdbac20cab
        Validity
            Not Before: Jun 19 13:21:09 2024 GMT
            Not After : Sep 17 13:21:09 2024 GMT
        Subject: CN=dd8d2c9d-b15f-43d0-bba1-09cd797a8211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:ac:ae:f4:5e:9f:4c:fe:e1:ab:5a:91:f9:
                    40:12:e6:d1:e4:d2:27:cc:67:a3:8f:46:40:aa:76:
                    4c:c3:5c:89:18:55:45:0e:05:36:9a:d1:a8:65:a7:
                    73:76:dd:1a:ce:4b:32:b5:f4:d8:51:c0:96:38:97:
                    74:f5:75:09:a3:05:18:eb:31:ca:f0:d3:77:99:a8:
                    65:07:22:8b:8d:0b:56:68:58:e4:68:67:22:3e:dc:
                    9c:e0:06:14:63:4d:ed:3f:a0:e8:e8:03:a4:b2:c4:
                    83:a6:97:46:6c:6b:f2:b0:f4:6b:9b:30:9b:60:1b:
                    95:1f:38:8e:78:68:57:7c:5e:5c:9e:da:33:b8:c2:
                    ae:07:06:7e:f7:9c:8c:01:3a:ec:d5:bd:82:2b:54:
                    23:26:04:a8:b0:d5:43:bc:91:8e:de:f8:59:b3:fa:
                    07:6a:0d:de:73:2b:86:89:19:f1:a6:82:1d:45:14:
                    fe:c2:83:9c:73:26:15:40:d4:83:63:b1:e9:90:ce:
                    f9:9a:10:1c:41:34:2e:7b:39:43:15:04:3b:35:51:
                    ef:34:6a:22:5c:87:98:23:c1:d8:4b:d4:f5:c7:8d:
                    49:af:75:9f:bf:68:47:92:2a:f1:a3:7c:19:49:d8:
                    53:a9:8b:ad:e9:06:f3:ee:18:50:e9:de:7a:77:54:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BB:49:44:F3:68:95:3D:02:16:2F:A4:1E:44:F4:5D:2F:E1:EB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/c9543dbe-ff9d-36a4-bbb7-a4d132c92c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.crl

            X509v3 Authority Key Identifier:
                keyid:55:8B:D5:19:57:B0:AC:92:95:64:00:D1:F4:57:E2:E5:AD:33:4A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:d2:60:b8:b9:ee:24:84:41:c5:c9:01:28:7f:96:e0:41:
         0d:2f:64:a1:d9:2b:16:9c:cf:13:a2:da:62:4c:20:60:99:c3:
         1c:21:27:41:1f:7a:4b:42:f2:6e:2f:cf:3f:2c:0b:63:59:79:
         32:a8:87:7b:50:29:af:a9:74:5d:83:3c:60:84:a3:e6:9a:fd:
         70:0d:d0:c9:46:d5:f7:ec:ea:d3:a7:c0:77:9f:c1:ee:9c:ec:
         66:e6:9f:0c:10:93:80:75:f4:65:72:35:25:67:ce:15:a7:b9:
         f5:2f:33:f6:a6:67:32:7a:c5:bb:02:e8:6d:c9:c5:16:9a:bc:
         b8:20:96:ca:a8:48:3f:f9:93:70:04:64:8f:5c:cc:0a:a9:99:
         25:20:3e:65:45:1a:06:8b:5f:ca:a9:9e:f0:f6:b1:75:ea:a0:
         92:ee:dd:cf:17:74:07:c3:0e:37:32:ed:93:1d:0c:d3:fa:1b:
         45:d4:b0:75:30:f3:41:46:44:67:f6:6c:51:b2:af:4a:09:8f:
         7a:2d:8a:1e:f3:77:82:9e:af:78:8f:f9:3e:bf:bf:e4:cd:8b:
         8a:f8:cc:81:21:9a:4a:2c:63:65:ff:d6:ca:68:1d:12:49:99:
         40:07:e7:90:2d:11:b7:c6:b2:31:38:fd:e6:a8:74:e5:03:63:
         c3:9f:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----