Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/0bee9100-3fe4-3959-a0c4-73801bbddc7a.roa
File:                     0bee9100-3fe4-3959-a0c4-73801bbddc7a.roa (raw, json)
Hash identifier:          9vQ6wVW6p14tVjVgqwt99pf0Sv29jONIfDoUY5LWaxA=
Subject key identifier:   39:E5:1D:2A:EB:2B:78:EB:1B:EC:B7:D6:A6:79:67:C2:B5:6C:64:56
Certificate issuer:       /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Certificate serial:       010D0C9F43285845860A9061E99766690086EC00
Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/0bee9100-3fe4-3959-a0c4-73801bbddc7a.roa
Signing time:             Fri 12 Apr 2024 18:05:41 +0000
ROA not before:           Fri 12 Apr 2024 18:05:41 +0000
ROA not after:            Thu 11 Jul 2024 18:05:41 +0000
asID:                     16509
IP address blocks:        168.100.164.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:0a:90:61:e9:97:66:69:00:86:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
        Validity
            Not Before: Apr 12 18:05:41 2024 GMT
            Not After : Jul 11 18:05:41 2024 GMT
        Subject: CN=2633ab97-6a9d-4531-9b6d-696d9226db4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:aa:90:52:9d:98:19:82:b9:4a:96:90:fe:
                    6a:78:f5:ec:7a:83:f1:66:cf:bc:31:fd:40:a4:14:
                    9a:f9:3a:ce:58:2c:1b:1e:1a:de:11:a0:5c:ec:0b:
                    8e:27:c0:e1:50:ac:95:9c:2e:32:12:73:85:80:c7:
                    f1:ab:13:86:6d:71:da:54:0b:bc:7f:d2:5e:f8:86:
                    a5:9a:d8:7b:5a:cb:0e:8f:2b:87:61:f1:46:0b:db:
                    c5:8d:bd:f3:c0:82:a1:68:eb:f6:a8:7e:3d:c0:fe:
                    ff:5c:c3:9f:0f:bd:44:07:9f:51:f5:53:97:ba:9f:
                    89:14:ad:94:5b:34:5b:b0:f7:23:e8:86:a6:c4:45:
                    b6:cf:19:dd:32:43:5e:66:58:61:22:e7:c4:90:d0:
                    87:e9:d0:7a:29:e2:45:ad:57:a6:31:98:bb:55:25:
                    e0:73:6a:38:ab:a1:31:52:0c:9b:25:3e:86:51:33:
                    34:6c:cd:0f:01:18:c3:a9:1c:13:b6:e3:79:57:63:
                    ff:30:27:ca:6d:1a:9b:55:30:97:d2:b8:6c:73:35:
                    90:9c:36:9e:5f:db:a0:dd:94:d1:2e:ea:d5:c7:ee:
                    49:f1:6b:0e:e4:27:12:65:68:41:06:72:38:6f:96:
                    90:9e:72:47:1a:e7:fa:3e:6b:0d:a2:0c:5c:8b:4a:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:1D:2A:EB:2B:78:EB:1B:EC:B7:D6:A6:79:67:C2:B5:6C:64:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/0bee9100-3fe4-3959-a0c4-73801bbddc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl

            X509v3 Authority Key Identifier:
                keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:de:09:d2:60:5d:4f:da:e6:cc:74:26:68:41:4a:2b:e0:74:
         2f:ee:75:23:d6:72:18:a3:c2:a1:4e:e7:85:bf:e8:9c:88:75:
         9a:39:04:4a:9e:6c:64:4e:e7:78:b6:d9:48:67:d1:ed:36:6c:
         c0:60:67:11:b3:7b:84:84:1e:cb:27:bd:08:0d:e0:ef:fb:65:
         f4:66:22:af:4a:7c:e6:f4:6a:88:f5:7a:7f:64:43:fd:83:1e:
         b0:8f:c7:0c:c1:f2:eb:e7:0c:b6:84:17:6f:e6:e8:9d:74:21:
         32:87:f9:4d:34:1d:54:c0:62:88:d1:11:5d:88:23:80:23:83:
         88:15:f0:0f:4c:aa:97:74:dd:c4:81:d2:b6:37:a2:f8:73:19:
         86:92:5d:df:da:d4:14:3b:8d:5f:f0:40:dc:d5:91:36:0f:c3:
         77:6e:81:f6:1e:b4:91:8c:ef:51:2f:f4:ba:8f:17:82:97:1a:
         b2:61:4d:55:c8:2c:b2:bf:3f:21:58:33:2d:d8:28:c0:7c:fa:
         e5:18:84:94:ed:e7:2c:cc:b2:5c:8d:8e:a8:52:5c:f5:1d:6b:
         47:49:fe:1e:84:e1:ea:16:b8:68:ae:1d:d2:ba:9f:c2:40:c0:
         86:d7:9b:72:dc:64:2f:70:9c:76:ce:21:76:3c:aa:05:00:72:
         c2:48:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----