Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/42dbdf93-f4f6-35a9-b7c5-62a8741daf32.roa
File:                     42dbdf93-f4f6-35a9-b7c5-62a8741daf32.roa (raw, json)
Hash identifier:          8Lce4aQe5v11jPcm3wpIhFL2RmzOsW5wRYJusp1O560=
Subject key identifier:   77:11:6F:DE:F5:C5:53:40:F2:2F:EC:96:25:93:98:EE:9A:6B:75:C0
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F432858460314197C3FDB75C60BCE1000
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/42dbdf93-f4f6-35a9-b7c5-62a8741daf32.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        202.130.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 22:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:14:19:7c:3f:db:75:c6:0b:ce:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=4c264154-e3d6-4fc8-8d75-fde6bbc24209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:ba:c0:e8:9e:79:b9:78:4c:cc:4a:2b:ba:
                    14:d2:da:20:4a:8a:d1:e7:13:8b:6f:48:ea:df:1d:
                    3a:50:2b:86:63:9f:2b:e6:08:3e:e8:21:00:74:d2:
                    d5:e7:21:4e:57:84:ff:dd:ec:5b:eb:4d:49:10:4c:
                    0e:5f:10:dd:fd:9a:97:93:fe:2f:67:05:dd:3e:1a:
                    d7:2e:11:7a:9d:e5:fe:83:ae:2b:45:36:52:06:a7:
                    f5:a4:69:83:5c:32:72:d5:7e:97:90:2f:f1:df:b9:
                    71:1a:ce:05:17:78:cf:69:cd:41:8a:34:cf:f9:8e:
                    8d:0d:40:31:66:18:34:bf:fb:fd:e3:c9:bf:2d:39:
                    3d:16:52:11:86:fd:5c:4e:5c:aa:b1:2f:cc:ec:b5:
                    db:0c:b9:bc:47:35:92:ae:4f:11:c3:8b:be:93:5c:
                    61:0a:38:d9:32:57:f4:c8:96:99:62:2c:f7:e5:5a:
                    c0:22:d2:8a:e4:62:62:f1:ab:24:14:b5:83:81:31:
                    b1:6a:ca:3d:9c:67:f6:36:4b:c6:25:c7:21:21:62:
                    b6:47:99:03:3f:06:75:87:86:93:90:b7:48:dd:bd:
                    59:77:93:ef:81:72:43:6b:d7:3c:58:3e:1b:1a:67:
                    39:14:07:5c:b4:12:ba:6d:40:5e:0a:38:39:40:b9:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:11:6F:DE:F5:C5:53:40:F2:2F:EC:96:25:93:98:EE:9A:6B:75:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/42dbdf93-f4f6-35a9-b7c5-62a8741daf32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.130.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ac:01:45:0f:83:04:40:bd:ee:d6:b0:11:20:7e:0e:2a:c7:
         ab:af:f9:57:2a:71:0e:e1:61:2a:bc:e6:84:20:b1:12:04:73:
         45:1f:52:ce:a9:16:f7:e0:de:8e:ed:ee:17:63:18:ed:05:7e:
         b3:08:48:cd:1c:3a:4e:09:7b:78:14:9a:0a:eb:cb:47:29:ca:
         a3:fc:e5:d1:60:b5:88:cb:72:2f:ca:f6:30:88:ca:bd:aa:0a:
         88:e5:a8:90:6a:fe:e1:77:3b:0e:9d:d6:4c:c3:20:40:e1:d7:
         16:18:52:20:27:5f:a7:c9:c3:5b:58:57:79:7f:9b:26:be:5f:
         5d:2d:9d:fb:d0:27:d9:7c:22:a1:71:44:10:01:f6:52:49:c8:
         a9:5a:1a:bb:bc:96:e4:c6:21:d2:3a:e2:e3:b8:f9:8a:e4:27:
         1c:2e:1f:40:55:b0:50:60:59:01:b4:82:b6:0d:45:10:68:5f:
         5f:13:9a:bc:90:9a:26:44:8c:c0:6a:49:97:2b:d5:69:e4:d1:
         68:3c:a5:30:bb:ed:31:1f:fe:1a:10:27:63:12:b7:fd:2a:43:
         d7:05:94:2f:08:2e:d3:89:18:40:a6:ff:a0:82:19:8b:b5:3f:
         b3:e7:be:05:3b:d9:91:9e:f1:83:99:58:45:c7:79:73:09:08:
         b1:36:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----