Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7f36b870-a052-3ddc-a3a6-73a32a33d716.roa
File:                     7f36b870-a052-3ddc-a3a6-73a32a33d716.roa (raw, json)
Hash identifier:          Xy44XDVklNveVMEvabPGFRIMZs0ZC1D530RqPga0wD4=
Subject key identifier:   7F:F1:F6:C0:FA:DB:8E:5F:A2:83:5F:4F:83:AA:98:3A:09:FA:FD:F5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858468B309FB3BB5D84969957F0E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7f36b870-a052-3ddc-a3a6-73a32a33d716.roa
Signing time:             Mon 15 Jul 2024 07:08:21 +0000
ROA not before:           Mon 15 Jul 2024 07:08:21 +0000
ROA not after:            Sun 13 Oct 2024 07:08:21 +0000
asID:                     212238
IP address blocks:        172.111.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 06:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8b:30:9f:b3:bb:5d:84:96:99:57:f0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 15 07:08:21 2024 GMT
            Not After : Oct 13 07:08:21 2024 GMT
        Subject: CN=b95f4b5c-8136-408d-a135-97b09fbcedef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:1d:c7:ce:90:3c:46:ee:7b:23:d5:c1:6b:
                    f6:40:64:e6:46:99:65:d1:e3:88:55:6b:0f:f9:7c:
                    90:e7:a3:51:ca:d0:48:8d:38:8c:c0:12:4c:36:59:
                    ed:74:03:91:4d:0d:1a:b6:cc:c6:f8:6f:7f:b1:fc:
                    b4:39:06:19:23:05:cd:6a:01:76:d1:0d:a8:52:ff:
                    6a:42:c0:22:e7:7d:f5:de:d9:31:39:c5:46:b4:64:
                    d4:13:7d:5b:64:5b:c5:c1:5d:17:d5:50:08:d4:78:
                    c8:6a:33:5f:50:7b:3c:5d:b6:de:e6:6e:73:87:70:
                    df:35:2c:86:87:a7:05:6b:a3:33:73:d3:bc:06:f7:
                    7d:3a:c3:85:d9:c5:0f:73:35:cc:45:ca:74:96:7a:
                    e1:68:c4:73:81:9b:8c:7e:ca:a4:7e:de:25:2e:a2:
                    d6:57:45:fb:48:4c:c0:8c:df:81:6e:91:fc:d4:46:
                    2c:aa:c8:1a:f6:34:0a:11:59:5f:fc:15:46:8c:54:
                    a2:c8:bc:7b:d7:80:c0:d1:7b:bf:d6:61:95:f7:51:
                    c6:47:fd:4e:cd:60:e9:43:5d:e2:1d:54:61:02:79:
                    1a:5d:aa:24:61:a5:94:7b:f6:94:44:25:f0:73:86:
                    c3:a5:82:3e:a2:1c:21:3e:ff:6d:3b:1a:48:d0:6a:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F1:F6:C0:FA:DB:8E:5F:A2:83:5F:4F:83:AA:98:3A:09:FA:FD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7f36b870-a052-3ddc-a3a6-73a32a33d716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:6e:d8:87:57:42:15:83:23:68:f3:df:96:44:93:0c:ee:
         5d:bc:89:e0:eb:e9:98:b2:95:96:64:10:89:c4:a8:3d:13:4a:
         e9:4e:85:06:35:d0:fc:da:55:79:ad:fd:71:15:bf:c7:cd:05:
         2e:2a:e0:f8:14:b5:de:25:1c:5d:d8:77:b6:ba:f9:d5:9a:e9:
         a5:86:84:11:d8:d6:45:97:14:dd:69:52:14:e8:36:f4:b7:b5:
         62:7f:df:e2:99:1c:70:a9:d7:7e:59:fa:7b:16:03:ad:b9:ba:
         c6:05:71:8b:06:1c:47:27:00:1b:cf:8d:f6:e5:3b:5d:ba:91:
         5c:51:ab:59:63:d3:24:3f:de:24:8e:67:6e:02:d9:a0:7f:43:
         d8:0d:4c:ef:96:cd:c0:79:c6:e9:52:10:f6:6e:13:0b:93:fe:
         1b:52:41:24:54:9d:59:32:86:37:e9:12:c8:01:a5:4c:10:28:
         ad:87:b8:cb:f0:44:3f:36:09:da:19:83:92:83:7f:ba:f5:08:
         7f:f4:04:d0:00:4f:8f:38:00:3e:26:88:ca:9b:64:26:81:b9:
         99:34:46:ea:95:62:2c:c4:23:12:50:d0:f9:a5:97:f1:fa:a5:
         f5:aa:e8:72:1f:ed:21:0c:04:bf:dc:5d:72:85:44:ad:90:0f:
         8d:3c:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----