Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0a72805e-0414-3812-b356-036762f08b37.roa
File:                     0a72805e-0414-3812-b356-036762f08b37.roa (raw, json)
Hash identifier:          zIrIhmIc6r6//+iP5ShtOwA0nh8CgTDxh8I1pgIyy3E=
Subject key identifier:   D2:CC:3E:C9:F1:48:15:EF:47:5F:05:C5:06:C4:18:70:8F:5B:19:36
Certificate issuer:       /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial:       010D0C9F43285845823B74EF6B87621C4A074D00
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0a72805e-0414-3812-b356-036762f08b37.roa
Signing time:             Thu 11 Apr 2024 09:20:57 +0000
ROA not before:           Thu 11 Apr 2024 09:20:57 +0000
ROA not after:            Wed 10 Jul 2024 09:20:57 +0000
asID:                     35908
IP address blocks:        66.186.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 02:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:3b:74:ef:6b:87:62:1c:4a:07:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
        Validity
            Not Before: Apr 11 09:20:57 2024 GMT
            Not After : Jul 10 09:20:57 2024 GMT
        Subject: CN=224f164f-32ca-4f2e-b159-dfc8a10b406b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:f8:15:65:ce:a2:7e:de:f8:3f:26:f8:ce:
                    bf:69:e3:60:97:71:03:8d:f4:95:35:2b:c2:a2:a9:
                    27:39:80:25:17:c3:c9:3c:d2:17:c5:87:86:98:41:
                    b8:48:35:3a:87:02:48:70:70:3d:4d:e0:31:16:c0:
                    34:73:d8:ec:01:88:6c:3a:4e:71:2c:4e:dc:2e:af:
                    70:3b:72:b0:32:76:98:19:cd:6a:19:16:50:68:81:
                    22:d1:76:83:c7:78:9e:30:2d:72:05:de:88:10:89:
                    4a:7c:44:52:30:2b:76:07:94:60:71:59:af:5e:7a:
                    b0:d0:19:af:97:5d:bb:5c:61:51:fe:ef:2e:a6:d7:
                    44:98:87:a6:19:f2:c0:25:fa:bb:48:be:c3:91:8e:
                    a0:66:74:2d:4d:48:b5:33:82:4a:b9:aa:ce:6a:75:
                    cb:e4:ec:a9:7d:b5:e0:ae:a7:aa:74:e2:4b:76:83:
                    8d:0f:9a:aa:69:27:c6:c3:95:7b:ef:2a:0f:f3:e7:
                    b3:84:91:bb:d7:e1:48:d5:ae:2c:57:5a:29:c0:4c:
                    e9:06:56:6d:d1:52:b3:e5:8c:b8:64:31:01:a8:3f:
                    54:fc:ac:4c:0a:c5:d8:dd:71:99:33:31:6e:c8:c3:
                    b9:24:33:72:1f:46:0b:b2:05:9f:dc:35:b9:7e:d6:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:3E:C9:F1:48:15:EF:47:5F:05:C5:06:C4:18:70:8F:5B:19:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0a72805e-0414-3812-b356-036762f08b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl

            X509v3 Authority Key Identifier:
                keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.186.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:78:3e:48:06:13:31:36:2c:60:26:87:cf:ad:94:23:56:be:
         3f:38:81:f3:52:f1:87:2d:d8:aa:1b:78:55:0f:f9:56:2c:9e:
         32:cd:e5:98:5e:25:d0:9e:88:0e:0c:b6:99:13:a8:df:11:67:
         d3:ee:b4:28:04:13:15:d1:05:b6:99:3b:df:8b:83:78:9c:93:
         02:b9:9e:a6:a4:49:ca:f5:b1:d1:94:ee:49:38:d1:3b:27:ed:
         0f:99:36:9a:18:e9:2d:57:82:18:9d:2f:4c:09:d2:cf:be:28:
         2d:47:e4:80:7d:86:bf:2f:1a:b9:e3:63:db:79:93:2c:89:8a:
         84:89:38:5d:11:cf:28:b7:3d:e9:2e:61:86:45:39:43:a7:13:
         8b:5e:5e:e2:e4:64:35:22:22:21:22:49:b5:f1:4f:7c:0e:e2:
         1a:94:da:3b:fc:61:18:f5:ee:43:52:90:a9:84:df:77:9a:2a:
         4e:b1:b6:6d:07:5a:0f:eb:0a:fb:37:1f:ff:77:05:54:9f:eb:
         2e:d7:95:97:e9:b2:62:2d:2a:3a:d2:ef:56:80:6c:89:29:97:
         61:66:d3:8f:92:cf:27:2c:7a:f7:58:19:0f:e1:51:b1:46:8e:
         6b:d8:81:18:3b:4a:42:05:8b:05:7f:db:d2:18:3a:96:f6:e2:
         53:85:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----