Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62ae9da1-f0ba-3192-b113-8c4283d5ea66.roa
File:                     62ae9da1-f0ba-3192-b113-8c4283d5ea66.roa (raw, json)
Hash identifier:          DRSFZzP4MOcGcRECs9c9tvuRcEeZcgaRsFDTQ7z6dj4=
Subject key identifier:   6D:6D:B5:B5:9A:71:68:EF:B1:37:B1:4B:8F:03:C1:7F:09:8B:DB:92
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333065334F576927E0EC600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62ae9da1-f0ba-3192-b113-8c4283d5ea66.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        98.22.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 May 2024 06:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:06:53:34:f5:76:92:7e:0e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=55e23958-33c2-46b8-ab8a-5db3dcc2963a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:d2:ed:82:2c:36:e2:8c:a7:54:56:37:11:
                    85:f5:08:7d:48:e4:87:bf:09:48:59:b1:3f:cd:be:
                    88:65:6d:28:0d:ad:68:39:c7:60:43:00:11:71:8e:
                    b3:c9:96:e6:84:6c:32:70:80:96:ed:7e:c0:0f:3d:
                    78:69:2f:f8:1c:51:fa:41:9e:b5:87:35:73:a0:0d:
                    48:c4:05:ac:4c:45:ef:42:c5:a1:f6:ab:2f:b0:8d:
                    a6:6f:d2:c4:52:ee:a8:56:44:a3:93:8c:41:8a:91:
                    fd:84:0e:1a:02:d3:0a:d4:a0:92:e1:78:04:6e:48:
                    8f:02:4f:81:20:cb:30:9c:fd:aa:8a:2f:62:35:e2:
                    80:4b:00:12:1a:c8:11:e3:3a:6f:47:b7:d7:b1:bf:
                    03:7b:13:c3:38:47:fd:4e:26:b0:ee:b4:81:d7:6a:
                    a1:e3:a3:b6:d6:bc:40:c6:f6:84:e7:59:56:41:7c:
                    26:91:12:19:b3:18:d8:f1:36:b1:f6:01:44:15:35:
                    d3:32:a8:fe:2f:51:3a:9a:34:81:e7:28:fd:23:6b:
                    f6:31:d3:73:4c:fa:4c:7f:71:ef:53:77:88:ef:49:
                    15:47:03:75:0f:15:78:6e:d1:a0:9f:01:7e:13:41:
                    0a:2e:36:d1:70:32:05:f3:e7:2d:cd:00:31:89:12:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6D:B5:B5:9A:71:68:EF:B1:37:B1:4B:8F:03:C1:7F:09:8B:DB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62ae9da1-f0ba-3192-b113-8c4283d5ea66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:8e:93:3c:58:4e:0a:2c:f0:09:56:1b:4c:b8:f8:15:ef:
         1e:b1:d7:5c:0e:0d:8f:01:d1:22:68:00:c2:43:50:9d:0d:36:
         2a:be:92:bd:a4:b4:01:42:16:73:14:af:5c:2e:33:76:39:33:
         62:06:7f:a9:e9:25:b9:1b:ec:cd:e9:f0:3e:f5:5b:88:5b:a9:
         d8:4a:89:44:54:ab:7a:ad:54:2d:6c:0f:94:b8:08:ad:57:eb:
         b8:cd:b9:8b:05:32:69:3f:5e:6a:95:c1:39:7e:04:ce:1e:26:
         23:71:41:be:cb:25:99:25:3e:57:d1:60:0b:af:c8:b6:b9:28:
         cd:8d:0a:0c:d8:4d:71:62:52:3f:3f:70:83:fd:6f:41:e6:6a:
         52:70:71:4f:20:7c:3c:a9:1d:22:4d:29:77:c1:97:e9:66:d7:
         88:2f:b2:6b:12:3d:8e:1c:a9:15:90:a2:ca:5b:79:8c:2d:bc:
         5b:5e:5b:6e:0c:78:07:05:2d:dc:39:c2:1e:b8:f9:fc:e4:93:
         50:56:12:3e:71:3b:a7:b2:0b:12:07:3b:69:fe:57:42:ce:f1:
         4d:7e:70:5d:ca:d9:f9:f8:fa:ba:f4:5e:1f:31:92:ba:d6:33:
         12:cf:56:17:e7:43:e3:4e:8e:ea:5a:be:45:94:25:93:9b:64:
         7b:79:30:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----