Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/c17ddf75-6abd-3d38-80e0-a8f041eef2c7.roa
File:                     c17ddf75-6abd-3d38-80e0-a8f041eef2c7.roa (raw, json)
Hash identifier:          1jLdSIVwI7WG51oV/7/58HdxYgzXiToayOKkS0q/a48=
Subject key identifier:   57:C1:3F:7E:4E:D9:02:29:EE:74:F4:79:46:5B:C7:59:3F:13:85:A9
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F43285845F00F32631EF1EB70FCB9DC80
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/c17ddf75-6abd-3d38-80e0-a8f041eef2c7.roa
Signing time:             Mon 20 May 2024 17:30:42 +0000
ROA not before:           Mon 20 May 2024 17:30:42 +0000
ROA not after:            Sun 18 Aug 2024 17:30:42 +0000
asID:                     1239
IP address blocks:        165.140.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 17:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f0:0f:32:63:1e:f1:eb:70:fc:b9:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: May 20 17:30:42 2024 GMT
            Not After : Aug 18 17:30:42 2024 GMT
        Subject: CN=d63e4a56-9f32-4900-99ab-bb96cd86dfd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:09:1d:5e:af:74:1a:70:9a:76:b6:a2:ca:
                    85:cb:b8:13:40:25:49:75:f2:67:59:17:d2:a5:2a:
                    41:50:bf:0f:61:70:77:10:98:51:6a:8d:35:f3:c3:
                    a9:b7:04:a1:85:96:30:55:9c:35:79:c6:3d:7a:0e:
                    d5:03:f1:4a:fa:65:5d:90:1b:9a:50:dd:49:49:cf:
                    76:57:5b:97:a6:be:f6:71:1c:68:d0:cc:e1:66:0c:
                    0c:3c:f6:89:f8:8a:c4:c3:f0:de:76:68:37:35:0c:
                    11:0c:8a:7d:3e:fe:11:89:90:ee:76:73:07:4b:e1:
                    ca:be:8a:47:79:26:63:db:31:e1:8a:0a:89:5a:9f:
                    68:13:3c:20:5c:9f:b2:a7:5f:cc:4b:07:45:b6:7f:
                    52:80:e1:10:ba:3f:a5:c0:92:b0:5f:88:f4:56:b0:
                    38:fb:dc:25:50:3b:34:b6:c6:d7:47:e6:32:cf:fb:
                    19:4f:0b:50:d9:7a:98:e0:b0:66:e2:f8:10:2a:78:
                    7c:f5:41:5d:5d:08:b6:05:81:0b:09:7b:03:35:94:
                    4f:4c:5d:56:04:95:4f:95:5c:6d:0b:3f:66:cc:b6:
                    15:e0:6f:95:11:77:5b:f1:fb:6f:37:33:53:3a:a4:
                    b7:9d:ae:52:46:56:e9:e5:e2:48:ba:bd:31:24:5a:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:3F:7E:4E:D9:02:29:EE:74:F4:79:46:5B:C7:59:3F:13:85:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/c17ddf75-6abd-3d38-80e0-a8f041eef2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:28:d0:cf:22:67:85:bf:e2:ee:86:e9:7f:b2:10:cf:92:
         12:05:8f:fa:5a:f6:2b:25:3f:a3:0d:15:d3:50:b1:38:7d:c2:
         d4:db:f8:a8:94:e2:ae:76:ad:1d:6b:93:dc:3f:8c:71:54:a5:
         91:70:21:bc:d2:f9:d0:c8:86:0a:1b:bb:e5:b7:ac:eb:83:a6:
         da:c9:97:a8:1e:69:26:8f:f1:cf:eb:f1:7c:9f:f0:2d:ea:ac:
         e9:9b:98:93:c2:a4:d7:f5:8f:29:c5:bc:85:28:f2:1d:6d:44:
         c3:08:76:11:14:2b:03:9c:7c:b4:b8:61:f4:64:89:5e:29:37:
         28:3c:8f:53:39:ea:06:b8:cf:cd:9c:e0:fa:77:13:65:ae:55:
         04:d6:35:58:e9:3a:4c:1b:4a:c4:e5:ca:8c:9e:9b:d1:e2:f7:
         04:ea:1f:c7:fc:72:09:5c:a6:de:5d:2a:d3:b9:0c:62:cf:56:
         b7:44:eb:b8:5f:c6:c6:8e:0f:c4:2b:41:c4:19:54:ca:37:6b:
         39:30:2a:fe:7a:34:3d:3a:57:a9:74:78:07:7a:28:9a:35:b2:
         9d:2d:14:bf:2a:b8:4e:3a:aa:b3:d3:7e:77:8e:cf:e0:fd:2a:
         54:1d:3d:b8:eb:4a:64:59:d8:0d:46:88:f3:6e:bb:f6:f2:09:
         2f:56:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----