Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/156d8faa-84d0-377c-b52e-0d95132ac945.roa
File:                     156d8faa-84d0-377c-b52e-0d95132ac945.roa (raw, json)
Hash identifier:          QYzY0pFcjYeekCMvU2uYom4NIO2XrWnq83Z+mX+yIQ8=
Subject key identifier:   22:7D:62:FB:B6:66:E1:AA:13:A5:53:D5:71:25:4C:5F:09:88:AA:7C
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F43285845FACB5455F70ADC1A31635480
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/156d8faa-84d0-377c-b52e-0d95132ac945.roa
Signing time:             Fri 24 May 2024 13:47:51 +0000
ROA not before:           Fri 24 May 2024 13:47:51 +0000
ROA not after:            Thu 22 Aug 2024 13:47:51 +0000
asID:                     394321
IP address blocks:        216.147.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 May 2024 15:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:cb:54:55:f7:0a:dc:1a:31:63:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: May 24 13:47:51 2024 GMT
            Not After : Aug 22 13:47:51 2024 GMT
        Subject: CN=d12d8c73-6f64-41c4-8b57-f447f579cd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:63:e6:8a:61:18:fe:62:51:dd:71:99:17:
                    ae:33:8e:6d:ca:2f:ca:8b:81:f9:d1:72:7b:85:1e:
                    5b:c2:80:9b:c4:36:38:63:e0:15:f3:3b:7a:2b:d8:
                    16:01:2f:9e:af:66:bc:5e:60:ec:22:84:50:12:bf:
                    bd:79:de:23:21:d2:63:24:41:c5:65:58:10:ff:a8:
                    74:53:e9:21:22:ac:9d:60:3f:80:be:5b:a7:cf:dc:
                    b2:c2:83:0c:30:67:61:58:2a:6f:f1:44:13:da:0b:
                    3e:2d:40:26:68:66:62:da:fb:cd:94:2b:9d:4a:de:
                    14:03:24:69:ee:88:39:70:fe:1c:9f:42:cb:50:41:
                    ac:e7:ba:58:9e:69:8d:e0:ec:4f:e2:94:bf:76:d7:
                    77:9a:04:17:40:1c:cc:f4:4f:53:37:8c:71:98:6f:
                    1a:ac:7a:25:45:5d:74:c9:25:f6:72:e0:f7:77:39:
                    bb:d5:41:43:b6:ab:4d:12:e4:49:a9:d0:74:64:0e:
                    f6:38:92:6c:28:f2:c1:e1:5e:62:08:ce:d7:b7:60:
                    16:da:2d:e0:5e:9c:90:d6:0b:5c:db:de:98:af:cf:
                    a9:62:e9:04:11:e0:b4:67:58:13:c1:7b:2d:b4:90:
                    38:3e:f2:bb:0a:94:76:92:06:ff:65:80:36:cc:16:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7D:62:FB:B6:66:E1:AA:13:A5:53:D5:71:25:4C:5F:09:88:AA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/156d8faa-84d0-377c-b52e-0d95132ac945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:36:48:e3:f9:7a:d4:58:42:4e:c2:7f:cb:6d:fc:88:0c:ab:
         83:25:f9:43:d9:1d:ff:8e:a1:d3:98:0e:61:38:ab:97:c9:11:
         5f:0a:80:de:5b:e2:e5:d5:f3:99:b1:d8:1d:30:89:f9:ca:27:
         32:36:7c:4d:51:35:75:93:f4:db:9e:46:f9:ef:94:0e:89:c0:
         e8:61:94:2d:58:01:d9:bb:3e:35:30:a1:ff:c0:b5:ca:6f:df:
         b7:70:9d:2e:68:d8:78:6e:46:93:3e:84:da:d0:71:76:fb:02:
         9d:9f:dc:66:b0:da:2e:2b:7b:d2:fd:b7:fc:fb:29:16:16:ee:
         08:10:75:d0:a5:e9:cc:e2:6e:40:a0:26:de:c4:44:bc:57:7f:
         75:37:89:18:ad:ec:af:78:0c:62:43:2c:26:b4:b7:e4:ce:11:
         7e:05:f0:96:89:80:a7:d8:df:12:c5:8d:87:93:7f:c7:1d:cd:
         25:a5:67:dc:44:da:6d:6d:b0:ae:a5:9a:b1:84:a1:66:af:9b:
         b7:c9:26:ed:c5:09:0b:a9:9b:4b:45:08:49:af:b1:c9:ef:19:
         8a:1f:e6:1e:62:1d:21:94:80:8b:d7:90:5b:b1:66:d1:ef:14:
         64:bb:d0:35:7d:e0:60:92:a7:c0:d6:86:ca:16:bf:9d:d0:93:
         17:27:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----