Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa
File:                     2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa (raw, json)
Hash identifier:          +73fJ0yNEHIS8MB7dSCj239WX1APmeQuP+Ki0X6W4jk=
Subject key identifier:   FB:60:18:ED:01:40:1B:37:67:5B:9C:EA:85:E9:A7:CA:56:3D:89:80
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858468A7A154D10DDEC66A32B8740
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa
Signing time:             Mon 15 Jul 2024 01:00:24 +0000
ROA not before:           Mon 15 Jul 2024 01:00:24 +0000
ROA not after:            Sun 13 Oct 2024 01:00:24 +0000
asID:                     1225
IP address blocks:        165.254.137.64/26 maxlen: 26

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 17:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8a:7a:15:4d:10:dd:ec:66:a3:2b:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 15 01:00:24 2024 GMT
            Not After : Oct 13 01:00:24 2024 GMT
        Subject: CN=683091e3-0706-4f2e-bfd9-e416d9381489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:cc:a7:d5:e5:60:8f:a2:99:f1:e1:79:21:
                    85:3d:c5:76:84:8e:29:23:d2:69:6e:89:6f:03:55:
                    9f:76:0a:f3:11:d5:d8:39:b2:b2:91:8a:c4:7b:f6:
                    f0:39:ed:91:fd:da:7e:9a:27:23:fb:5f:12:ae:d0:
                    3b:ad:5a:a3:64:49:2c:42:e7:3f:91:0b:71:99:23:
                    ca:e0:19:9f:e6:7f:a7:f2:2d:75:a0:d6:12:d1:51:
                    36:57:19:94:33:4d:58:bc:bd:ed:0c:23:5d:c5:ab:
                    08:2f:11:fa:23:26:d3:85:6f:8a:ab:3a:1c:00:f8:
                    5c:83:f4:2b:f1:2c:91:c8:8a:04:02:52:23:66:99:
                    88:22:12:a4:50:57:69:0d:96:5e:ad:62:2c:95:f6:
                    f0:f3:5c:9d:f0:ce:12:98:f0:30:05:ec:c6:4c:48:
                    80:45:cc:cb:2d:9e:d5:19:46:6f:7a:92:78:40:4c:
                    71:eb:9a:d3:d0:7c:59:21:95:5f:45:4c:c0:9a:46:
                    2d:61:53:d9:08:71:c2:92:ee:02:31:75:c6:ac:29:
                    8a:b8:87:d7:df:33:b1:87:ec:3d:e7:95:6b:c7:85:
                    42:90:54:69:4e:d1:77:40:b4:73:68:62:1f:04:23:
                    24:0d:9d:ee:8e:d1:00:7e:d3:b5:71:a6:59:96:a9:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:60:18:ED:01:40:1B:37:67:5B:9C:EA:85:E9:A7:CA:56:3D:89:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.137.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:13:4f:4a:34:e9:16:b5:17:28:4f:e8:a8:16:83:bb:7c:
         43:2c:db:37:56:67:6c:a5:47:09:8f:2e:a2:5b:31:8f:d8:f7:
         8e:f0:dd:49:43:8b:b2:dc:7b:01:c5:55:0c:9a:6a:da:57:10:
         c4:63:b9:7e:49:68:27:01:95:30:67:52:9a:03:da:f4:c2:1f:
         39:9f:b7:60:61:f4:4c:de:8f:9d:6c:0d:85:40:05:78:fb:f1:
         07:8e:b0:ca:7e:ad:4e:43:79:ff:0d:f7:60:29:4e:d5:7f:90:
         68:1a:74:8e:b7:62:e0:bd:cd:1b:25:48:8f:19:59:8c:ef:d9:
         5c:54:48:0b:2c:fc:3b:61:ef:70:f0:1c:b2:de:f7:7f:7c:94:
         fb:2e:0b:c4:64:55:37:5a:4a:a4:b9:c7:9e:86:af:b7:70:4f:
         fd:67:42:d5:8e:67:70:82:77:d1:73:bf:7b:e5:1e:2d:5b:7a:
         11:08:f4:61:7f:3e:c0:18:a8:af:ba:ee:a6:2c:86:f3:d7:7c:
         99:da:ee:ac:e8:56:1d:6d:f5:33:16:ec:67:58:e9:24:ba:11:
         d2:86:15:09:4d:c0:0e:24:80:1a:98:ad:ea:ed:fa:e4:2e:d0:
         a0:4d:94:ae:82:6a:97:37:c9:39:41:66:aa:52:8d:24:41:87:
         3c:cd:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----