Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/be006960-88e9-3224-9d69-90726468960b.roa
File:                     be006960-88e9-3224-9d69-90726468960b.roa (raw, json)
Hash identifier:          E0LLZfZNQTJ6KGlSFLZIgbLYmn4kMJoxxBoZzuv0Ht4=
Subject key identifier:   11:D9:A4:A8:21:69:C1:53:7C:7F:A8:F7:37:51:0D:08:90:AB:BA:A1
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285845DA98F4E64930115C706D6500
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/be006960-88e9-3224-9d69-90726468960b.roa
Signing time:             Mon 13 May 2024 01:00:25 +0000
ROA not before:           Mon 13 May 2024 01:00:25 +0000
ROA not after:            Sun 11 Aug 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        23.172.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 23:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:98:f4:e6:49:30:11:5c:70:6d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: May 13 01:00:25 2024 GMT
            Not After : Aug 11 01:00:25 2024 GMT
        Subject: CN=c554036d-3fdf-44bd-8fa1-2c4c510a396f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:f8:9a:89:e7:bf:ec:13:b7:3a:7e:49:56:
                    5d:66:84:b9:16:78:c2:81:c8:45:8d:7b:52:54:96:
                    c1:a7:be:68:66:0c:90:39:3f:66:de:83:82:40:46:
                    65:79:68:df:18:1a:87:2c:d4:5a:bc:3e:8a:4a:52:
                    0c:00:aa:8d:67:e2:7d:da:71:e4:49:fc:d4:96:3b:
                    25:ef:79:9b:c0:05:fd:c7:a8:81:b2:f5:ba:76:58:
                    11:75:d0:ee:ee:85:98:9d:cc:17:06:14:13:fe:b7:
                    aa:16:b1:e7:de:66:0f:1f:fe:4a:1c:9b:3b:04:76:
                    5e:e9:57:59:83:93:b8:9e:8d:93:d4:dc:69:d7:d7:
                    ee:59:61:ba:ed:6d:b1:7a:76:eb:41:05:c0:eb:5c:
                    e4:25:f6:12:31:b4:4c:d4:e1:62:43:f1:bb:c8:41:
                    85:7f:b9:7c:97:89:04:a1:9f:c6:0c:ca:87:2c:80:
                    d5:5a:fd:16:81:7b:50:32:c1:5c:b6:85:d9:10:ad:
                    fb:27:ea:8b:6b:cb:e8:21:46:30:7a:86:88:32:ed:
                    00:5b:3b:3f:6e:3a:46:ce:e1:d7:8a:8d:70:50:70:
                    df:1a:f7:99:f6:50:2f:e7:a8:9e:07:ed:70:b7:c3:
                    64:71:71:2f:a8:6d:62:b8:aa:77:5a:83:15:3c:c1:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D9:A4:A8:21:69:C1:53:7C:7F:A8:F7:37:51:0D:08:90:AB:BA:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/be006960-88e9-3224-9d69-90726468960b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:01:c8:88:5b:6c:f4:27:1e:14:27:bc:73:c0:6d:85:bd:0d:
         0d:f9:b8:9f:4c:a3:a5:86:eb:49:f9:8b:b8:71:83:fa:1c:35:
         65:86:64:ad:e8:d5:3d:02:d6:27:6f:cb:9d:29:18:50:96:ad:
         c0:b1:57:04:54:49:03:f3:fa:32:9b:d1:92:6b:cc:bf:40:e3:
         28:f4:0a:0e:86:4b:de:83:22:7a:13:e1:6d:8b:d2:65:dc:68:
         8f:21:31:51:b6:61:a9:bb:17:bb:73:a8:e8:1a:81:e1:ca:3e:
         dc:53:34:67:c6:43:a6:42:e7:a5:76:c4:f7:4b:63:47:b7:38:
         33:ac:bc:a3:78:93:65:47:36:ee:f9:22:b0:ef:7b:3f:0c:e7:
         73:f6:ca:c4:58:74:76:37:ba:63:d1:d3:ef:c8:f4:d0:c6:a4:
         fe:b0:07:b2:8a:d2:9d:52:06:30:6c:af:41:b7:e5:77:91:2d:
         49:00:e3:36:04:00:99:13:49:08:79:47:e1:ae:5b:2f:e1:04:
         92:e3:53:5b:f2:e2:96:38:36:11:81:ac:5f:d9:73:bc:0e:a0:
         97:a5:dc:f7:e5:cb:5c:cf:cb:e0:ae:65:68:d1:ec:19:d2:6a:
         6b:20:40:c9:9a:de:17:eb:05:a2:12:f2:2d:01:92:52:68:e7:
         1e:52:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----