Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/74e38442-bf24-3783-98a0-40b4ded4f1fd.roa
File:                     74e38442-bf24-3783-98a0-40b4ded4f1fd.roa (raw, json)
Hash identifier:          166qJKxGLO3HGnntG1Uj7dx9TfGkZgImnCZLoBC/+eo=
Subject key identifier:   8F:80:93:AA:8F:3A:61:B1:75:25:6B:E3:9D:CB:1C:64:D0:7A:EC:08
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584633EED6EA64C9D8416851B920
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/74e38442-bf24-3783-98a0-40b4ded4f1fd.roa
Signing time:             Fri 14 Jun 2024 01:00:26 +0000
ROA not before:           Fri 14 Jun 2024 01:00:26 +0000
ROA not after:            Thu 12 Sep 2024 01:00:26 +0000
asID:                     3223
IP address blocks:        172.94.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 07:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:ee:d6:ea:64:c9:d8:41:68:51:b9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 14 01:00:26 2024 GMT
            Not After : Sep 12 01:00:26 2024 GMT
        Subject: CN=b485bce0-e18e-410d-883f-55c743c0fb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:84:23:c7:01:b9:1b:ae:02:07:ab:3b:95:
                    40:48:4e:0c:9e:c1:73:ee:b8:45:12:55:19:1a:f7:
                    37:1a:e6:a2:04:6e:47:99:c2:cb:2a:38:ed:e6:77:
                    6f:98:27:c6:6f:14:10:a0:4f:68:94:5a:b2:82:d3:
                    94:4d:11:f5:11:c6:03:fe:ce:14:35:c8:e4:34:fc:
                    95:55:6f:2b:af:80:0c:0f:fa:ff:13:48:15:4b:fa:
                    80:55:3c:7e:4f:ba:a1:34:20:6d:9a:c4:24:24:46:
                    04:ff:12:d6:f1:7b:db:d2:2c:80:44:02:cd:a6:c1:
                    19:62:c5:7a:1f:66:ae:a1:a9:71:a5:bc:2f:b2:45:
                    5a:a5:c2:e0:62:9d:ca:2e:a7:6e:82:0c:99:c9:bf:
                    04:c2:cf:5f:b4:f5:46:ef:56:a9:e1:d9:e7:d5:8b:
                    0a:5c:a6:28:6c:0c:13:76:26:1f:db:92:6b:c6:ad:
                    c5:ff:8c:80:b9:84:a7:b9:ee:09:e8:5d:46:d3:55:
                    a8:de:b7:51:92:d4:03:2a:d0:30:c7:9b:fd:2c:95:
                    dd:ee:80:8a:06:15:a6:55:c7:ef:01:50:81:60:65:
                    60:e1:c9:df:3a:3c:16:e5:d0:80:56:72:55:4f:65:
                    19:bb:3b:5a:65:5e:de:87:85:84:5b:67:d0:4c:a7:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:80:93:AA:8F:3A:61:B1:75:25:6B:E3:9D:CB:1C:64:D0:7A:EC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/74e38442-bf24-3783-98a0-40b4ded4f1fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c7:96:87:58:3e:4f:9c:9c:91:c6:b6:4f:e3:7c:bb:1f:20:
         05:d1:3f:0b:9d:f4:37:5a:b9:1d:99:50:a9:74:d0:fe:00:de:
         bb:17:3b:26:c7:05:09:83:b8:4c:05:f0:f2:15:7b:97:ed:1e:
         e0:a5:c0:a2:2c:1f:7d:38:d8:01:26:ce:9e:90:16:4d:b1:4e:
         58:b7:4e:43:6a:d0:6c:e6:8c:fd:09:ed:ee:6a:0f:53:3e:08:
         59:1e:c5:54:95:d8:e9:47:db:7b:b9:7e:80:7d:ea:ef:4d:7e:
         bf:db:23:d5:53:2d:46:3b:b0:5d:47:da:17:12:e3:9e:79:76:
         c3:ca:49:6f:21:31:4b:39:6e:ad:74:a1:14:d7:68:04:f0:b1:
         39:3b:1a:12:0c:97:55:75:15:29:e1:43:07:c3:a8:b0:c9:c4:
         69:82:bc:13:85:d6:fc:c0:75:e3:51:a9:35:de:02:9a:51:a7:
         b0:3a:c7:40:a6:c5:17:93:f9:2e:e3:ec:3a:5c:78:ee:f3:af:
         e6:82:5b:b2:92:39:93:07:79:cb:c0:73:ff:b5:ad:42:6d:0e:
         ee:e8:a1:b5:0c:b0:dc:07:ce:46:8c:d1:d4:ef:58:1c:53:9b:
         89:3a:84:12:a1:84:54:c5:02:36:72:79:32:cd:64:73:61:af:
         e7:e3:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----