Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e7968373-9ba7-3cc2-b3c7-c49df93b2683.roa
File:                     e7968373-9ba7-3cc2-b3c7-c49df93b2683.roa (raw, json)
Hash identifier:          rq/6T1znbaDwrTxZZs2+Hr/74/U0U27ZpLAOHLyRM7E=
Subject key identifier:   2D:31:B4:3E:40:01:7D:37:F9:0E:CF:8D:E3:8F:9E:EB:B7:B5:46:EF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F642C0D219EE5F69704F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e7968373-9ba7-3cc2-b3c7-c49df93b2683.roa
Signing time:             Fri 12 Apr 2024 17:24:46 +0000
ROA not before:           Fri 12 Apr 2024 17:24:46 +0000
ROA not after:            Thu 11 Jul 2024 17:24:46 +0000
asID:                     212238
IP address blocks:        166.88.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 20:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:42:c0:d2:19:ee:5f:69:70:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:46 2024 GMT
            Not After : Jul 11 17:24:46 2024 GMT
        Subject: CN=4b8aec3d-642f-4caa-be89-87a71f286420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:82:27:41:c0:e0:3b:7d:4b:aa:a4:14:04:
                    c1:e2:81:92:af:9c:ad:6d:f8:6f:6e:d4:88:48:12:
                    9c:bb:67:f0:a0:76:fc:96:14:ac:c7:59:d5:cf:5c:
                    84:0e:60:c0:8d:37:9a:86:54:6f:68:3f:85:8e:7c:
                    af:d7:0e:b1:b1:91:f3:46:cb:20:35:ae:b0:b5:7f:
                    d6:97:32:34:95:23:cc:6d:03:4b:3d:ab:be:12:29:
                    53:b3:27:93:b3:df:9b:47:b5:aa:02:21:12:7e:12:
                    24:0b:4c:66:c1:33:c2:15:b3:4e:f5:e9:9b:b0:5f:
                    44:4f:a7:02:52:c4:b2:41:9f:a4:ed:f3:39:d0:ea:
                    cf:87:91:65:8e:d1:02:65:ba:bf:d7:70:29:7a:e5:
                    a1:57:7f:6e:8e:71:e6:57:b7:a5:0e:3e:8a:2e:48:
                    17:41:44:2a:af:b4:65:e9:7e:f8:78:82:77:01:8e:
                    1e:8e:bc:e1:f8:bb:b2:78:69:88:ab:1c:0f:0d:41:
                    2a:9c:48:b2:4c:04:7c:80:e9:cf:e9:92:db:81:2d:
                    65:b0:b6:9c:a5:8e:4c:34:e7:ff:7f:a0:32:fe:34:
                    00:46:dc:1c:18:2a:2e:23:de:e9:76:de:b6:43:b9:
                    9f:01:07:f3:5e:53:19:f0:6f:a2:a6:3f:cd:13:6a:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:31:B4:3E:40:01:7D:37:F9:0E:CF:8D:E3:8F:9E:EB:B7:B5:46:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e7968373-9ba7-3cc2-b3c7-c49df93b2683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:96:17:39:83:c0:fd:0c:68:27:f1:c3:90:0f:fe:66:97:a3:
         2b:f9:ab:38:42:f6:9e:a7:f8:ba:ef:0e:bf:78:8d:59:b6:dc:
         c2:ec:31:c7:77:83:e9:5f:9f:29:6a:9e:cf:38:f5:58:ea:3b:
         4d:47:8d:ed:b9:a6:00:fe:ff:f2:1d:84:93:e5:d6:89:57:fe:
         da:2a:b7:55:6f:d5:1c:32:a6:24:3e:8e:60:9c:b7:1f:8e:8a:
         f7:33:2f:68:64:02:e2:3d:b9:08:a0:78:b3:73:74:2e:73:e9:
         c2:01:87:db:55:36:ae:95:69:0b:56:2d:9a:ea:5e:19:c7:76:
         77:fa:d2:46:72:c8:82:27:b1:30:28:59:00:8c:05:86:18:08:
         bd:e9:c5:a3:84:06:b3:5f:3b:37:39:c4:01:cc:d9:a6:b3:85:
         13:75:2a:c1:3e:ee:b1:a0:b0:f6:4e:2b:a2:57:a1:94:19:6c:
         23:17:75:0e:61:95:85:47:86:3d:86:5f:8c:54:56:2e:20:7c:
         90:ca:ca:0a:d6:e6:a4:e1:26:88:5f:0f:fa:37:9d:21:0e:74:
         45:99:e1:bf:50:ea:51:90:cb:72:82:16:6c:cf:a4:cf:7f:41:
         da:0e:49:f0:5a:90:2e:0d:2f:e5:b9:ab:23:e7:16:61:54:0e:
         6f:47:14:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----