Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bf8cf47-a3ec-31c5-9eca-3ec8bd24596d.roa
File:                     7bf8cf47-a3ec-31c5-9eca-3ec8bd24596d.roa (raw, json)
Hash identifier:          qXBPq5Fggi17gbU9UCtksjymJ6lft15adKo43nBzBO8=
Subject key identifier:   F0:F9:B1:CF:8E:DA:35:5D:7F:61:1A:40:CB:E4:55:26:6F:D6:89:86
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328583D90646E3F5AF5132B1C71FC00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bf8cf47-a3ec-31c5-9eca-3ec8bd24596d.roa
Signing time:             Fri 17 Dec 2021 05:00:00 +0000
ROA not before:           Fri 17 Dec 2021 05:00:00 +0000
ROA not after:            Tue 16 Jul 2024 04:00:00 +0000
asID:                     0
IP address blocks:        209.112.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 13:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:90:64:6e:3f:5a:f5:13:2b:1c:71:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 17 05:00:00 2021 GMT
            Not After : Jul 16 04:00:00 2024 GMT
        Subject: CN=e733077f-5689-41a5-8e38-a6a44369dfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:17:1c:f0:e7:64:6d:ac:c6:70:c3:59:1b:3e:
                    fe:f0:97:2c:20:55:c9:67:cd:8c:c5:64:c6:29:c6:
                    d8:1a:6d:eb:89:20:43:98:90:16:f3:2b:fb:fd:1f:
                    20:53:cd:36:56:44:05:ba:92:37:0e:44:52:3c:61:
                    1c:f8:dc:d8:f4:e0:81:80:1a:c9:d7:14:49:b2:55:
                    dd:35:0a:98:83:cd:ba:9a:d6:fe:b7:01:ab:7f:7c:
                    6b:d9:24:69:fd:1c:df:28:ee:58:09:db:d0:7d:fa:
                    78:cb:77:be:4d:b5:da:a3:a7:4e:eb:da:35:a6:72:
                    7e:0f:62:30:21:6e:ac:e0:f6:78:37:04:f3:34:0e:
                    ea:e8:a4:2d:e7:2b:fa:ec:d5:ef:c4:6d:11:c8:26:
                    0e:e9:65:b6:61:92:32:7b:0d:87:24:8f:1b:0d:03:
                    a0:8f:af:d2:dd:e9:b5:34:bc:c7:ad:0b:64:d5:25:
                    a3:49:8a:92:17:16:bc:37:f4:8a:72:88:f1:06:81:
                    a0:0b:f5:d4:7f:66:43:ce:6d:3e:da:14:e1:02:c1:
                    7d:4b:68:1f:51:af:d3:c7:0e:e8:37:c1:2d:95:86:
                    87:bd:16:c6:97:3d:f3:6e:a3:ee:15:0a:54:46:3f:
                    f8:5d:cf:ed:3b:44:83:51:af:fd:1f:ab:9c:22:1e:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F9:B1:CF:8E:DA:35:5D:7F:61:1A:40:CB:E4:55:26:6F:D6:89:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bf8cf47-a3ec-31c5-9eca-3ec8bd24596d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:54:de:a9:bf:53:08:00:fa:ac:ce:57:5a:87:8d:90:d1:83:
         c7:7c:db:75:6e:4d:00:47:4c:6e:f3:44:59:83:3a:1b:67:6b:
         ea:21:ab:8a:a1:d7:e3:31:2b:7f:32:bb:11:25:18:09:38:c8:
         0f:bf:9e:88:08:2c:eb:62:c1:ab:b8:b5:46:de:70:2a:af:89:
         bf:3f:ff:b3:58:92:a6:89:b9:e8:5a:d0:7c:e8:88:09:12:b5:
         c1:38:6f:1d:1c:9d:04:15:35:36:4c:61:21:05:b1:75:3a:2f:
         93:6d:a4:92:64:dd:02:3c:80:d6:fe:17:25:c1:6e:3a:27:9b:
         32:34:5e:da:55:3a:dc:b4:5d:75:ff:8d:c1:f7:89:f8:7b:bf:
         bd:1f:4e:27:7a:58:d9:c7:d3:2d:9b:69:0a:3d:3d:86:f8:43:
         2e:2f:65:f7:13:26:83:95:b2:a5:be:2a:f3:60:3d:1b:8f:9f:
         4d:90:d7:ae:69:fd:aa:1d:0f:84:05:3b:a5:0f:f0:1a:25:e8:
         7b:23:6d:35:a8:17:2d:d6:0b:27:6c:b0:48:ef:45:af:6b:4a:
         33:4e:3b:3b:23:13:d2:0d:12:70:de:f3:01:b8:1d:0c:a9:06:
         1f:d8:f1:d8:2c:d1:ae:9e:66:ff:6f:c3:10:06:f2:b4:dd:1f:
         44:63:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----