Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/3277a19f-1890-3af9-a132-a8c716b788f2.roa
File:                     3277a19f-1890-3af9-a132-a8c716b788f2.roa (raw, json)
Hash identifier:          ZHv0iHse2CEAl9IgDBZSpZdEkd2MqpL2I11eOr2NWFo=
Subject key identifier:   9E:AB:C7:C9:80:B9:11:AF:2A:07:6F:08:E3:54:BA:DB:3D:8E:E4:A6
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F432858460313F14BB32C19B9E07FA200
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/3277a19f-1890-3af9-a132-a8c716b788f2.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     398420
IP address blocks:        208.89.52.0/22 maxlen: 27

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 17:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:13:f1:4b:b3:2c:19:b9:e0:7f:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=8b10b8a5-9655-4af6-9f3a-b36373e5ebee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:f5:c7:dd:57:ea:16:e9:f3:74:d2:07:a6:
                    f3:c0:94:90:f5:84:03:46:06:10:cd:c2:02:a0:f6:
                    da:1d:c6:fb:f0:65:30:16:84:b0:1f:5c:8a:29:97:
                    2f:0c:49:34:68:ab:8d:7c:9b:d3:31:c3:b7:e2:30:
                    cd:05:46:97:5b:32:ca:aa:91:24:f1:2c:2c:d5:98:
                    c6:26:26:b9:21:b0:63:3d:d5:ec:8e:7d:8c:4c:c6:
                    7d:09:c2:c8:0e:a8:b2:e7:ea:6d:18:8b:5b:1c:d2:
                    dd:42:db:f8:a8:a7:05:eb:f8:72:ec:ed:6e:a3:2b:
                    43:20:e1:47:83:5b:cb:e8:a2:c2:67:01:81:48:ac:
                    cc:7e:f2:75:3e:32:32:82:71:7e:60:e5:86:c1:e1:
                    72:b4:9b:b2:58:72:14:87:7b:42:a6:10:e1:d4:52:
                    de:6a:28:d1:0f:6f:bf:cb:10:b1:72:78:c5:02:4a:
                    49:10:2e:f2:81:c8:36:75:51:20:ea:45:93:d8:09:
                    4d:f9:e8:03:4c:6c:ab:40:6a:c2:33:fd:97:81:f4:
                    d6:ba:90:fd:0a:c7:13:dc:22:77:be:41:80:09:b4:
                    23:81:f4:e6:51:e6:13:01:5e:4d:45:1e:57:04:23:
                    87:3e:75:13:fe:05:2d:42:6c:cd:2b:65:98:73:3e:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:C7:C9:80:B9:11:AF:2A:07:6F:08:E3:54:BA:DB:3D:8E:E4:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/3277a19f-1890-3af9-a132-a8c716b788f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:63:4c:06:88:64:c3:00:06:00:04:d4:ff:4b:32:0f:e2:22:
         88:a9:5c:6e:6e:3c:76:32:ef:67:8f:bd:64:8b:16:de:6f:df:
         a3:52:0f:6e:52:2f:db:97:2d:ba:43:ad:51:69:e6:39:3b:f7:
         3f:c9:79:52:61:7c:8e:81:ca:2c:11:d8:f1:89:c2:4d:28:8d:
         70:84:60:7b:58:48:50:f0:06:39:dd:6e:4a:7a:16:0e:65:a3:
         6b:49:35:b8:53:71:de:7c:69:6c:22:4f:ff:b2:cf:6c:ec:37:
         be:68:8a:f5:84:f5:84:3a:3b:94:ab:10:e6:11:57:56:e0:76:
         52:8a:59:93:de:43:f0:b2:dd:a3:7d:bc:7a:53:5a:4e:64:2e:
         b6:89:07:7b:74:32:28:0a:6f:3a:91:56:72:ee:0e:66:79:b0:
         48:c8:d7:5e:d2:fe:8e:c0:9a:4b:4c:ca:1e:dc:c9:56:c0:21:
         f1:64:c0:19:3e:ef:d0:6e:3c:a3:3b:e8:07:82:d8:33:20:38:
         b9:3e:9f:70:6d:5a:ed:64:55:f3:c9:f3:ae:c9:56:6f:5b:e6:
         70:87:9c:43:77:07:d2:c6:36:c3:6e:b9:86:df:a7:0f:84:a1:
         a0:f7:a7:dd:fc:52:10:af:45:bd:73:40:73:58:af:80:65:04:
         51:71:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----