Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/ea2f4155-3fb0-3446-977b-39ef03d2bab9.roa
File:                     ea2f4155-3fb0-3446-977b-39ef03d2bab9.roa (raw, json)
Hash identifier:          aFGmKYXuGM9nsulND3KWFj27SM2l90m46tLF6y1RiPo=
Subject key identifier:   A5:6C:F3:82:1D:E1:78:D5:46:53:93:BE:E5:55:24:96:5E:D7:0C:0E
Certificate issuer:       /CN=a7001425-6965-4c1f-8e35-f578d112295c
Certificate serial:       010D0C9F43285845F32D71AED1502F78470F7940
Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/ea2f4155-3fb0-3446-977b-39ef03d2bab9.roa
Signing time:             Tue 21 May 2024 20:19:04 +0000
ROA not before:           Tue 21 May 2024 20:19:04 +0000
ROA not after:            Mon 19 Aug 2024 20:19:04 +0000
asID:                     16920
IP address blocks:        128.224.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Tue 21 May 2024 22:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f3:2d:71:ae:d1:50:2f:78:47:0f:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c
        Validity
            Not Before: May 21 20:19:04 2024 GMT
            Not After : Aug 19 20:19:04 2024 GMT
        Subject: CN=7b3efbbc-1776-4f2c-9824-291722052ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:bb:52:cd:f9:3e:d1:1b:ad:03:07:68:42:
                    aa:1d:6c:ae:01:88:ed:7f:ff:e8:7e:d1:64:7e:c5:
                    c4:a9:13:42:7a:9c:db:11:86:1e:7d:11:4a:7c:3a:
                    47:ef:32:61:3b:2c:0d:0b:3d:ee:6b:99:2e:85:ad:
                    f8:e6:8e:c6:97:75:83:72:d0:eb:74:78:4e:b6:76:
                    df:5a:b9:4a:eb:a9:a6:53:72:b1:32:70:c3:37:5b:
                    10:08:18:86:54:f8:d3:a2:c8:f1:44:c0:b1:b0:1a:
                    7e:a4:97:fd:57:7d:ac:19:b9:d1:9d:33:b7:64:0b:
                    5f:ce:91:a4:86:c5:c5:66:01:03:82:e6:e2:30:a3:
                    a1:69:a3:20:f3:4e:99:22:ce:25:18:5b:ce:95:92:
                    c0:f2:ad:82:41:cd:4a:a9:42:4a:10:ed:ea:1c:a1:
                    03:67:19:a0:fe:e5:8f:dd:28:4d:22:85:89:83:62:
                    12:83:69:c0:13:9b:05:6b:b9:49:7f:b8:34:fd:19:
                    8b:62:14:8a:4b:bb:74:dd:82:30:94:ac:f7:51:76:
                    53:ee:f3:bb:aa:0f:71:96:c8:2b:fc:c1:92:a5:2a:
                    2f:c4:86:c2:98:dd:98:f6:52:b6:4b:65:61:ce:ae:
                    0c:d8:bf:76:29:f0:2c:4c:89:58:76:f2:df:2a:2d:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6C:F3:82:1D:E1:78:D5:46:53:93:BE:E5:55:24:96:5E:D7:0C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/ea2f4155-3fb0-3446-977b-39ef03d2bab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl

            X509v3 Authority Key Identifier:
                keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.224.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2f:fc:af:57:5e:b5:59:49:35:4c:5a:b9:cf:8e:9e:e4:a4:
         3c:fb:27:53:7c:23:28:37:d6:e1:9a:42:df:df:5e:0e:e3:98:
         9d:2f:8c:42:d1:7a:a4:d3:26:c9:e5:38:44:7c:10:87:c0:c3:
         e0:b8:8a:1f:53:2b:24:31:0b:a8:8b:7e:96:2e:e7:7e:e4:29:
         c4:1d:c0:0f:ef:83:73:91:60:b8:0c:62:28:0a:1a:f4:c1:b7:
         8b:4e:d0:39:1a:4c:b5:24:27:e4:4b:28:2a:c0:8c:a8:c3:7c:
         80:60:a0:8c:51:f7:e3:96:bd:ee:0a:7f:b1:75:72:a8:2b:56:
         d7:89:01:8b:2d:cf:b8:2e:ba:e7:48:46:d0:ef:46:32:10:53:
         d9:dd:89:b0:26:1e:24:a5:4e:03:33:31:c7:1d:ac:46:e2:d5:
         27:33:ca:14:14:7e:0c:4c:02:35:b9:40:3b:a4:f7:d6:e8:76:
         8a:ad:36:16:b0:fe:d6:a0:ca:ae:91:20:eb:4c:ae:d1:30:25:
         e0:d1:cc:a1:8b:5d:7d:ff:05:08:97:52:41:ee:e9:f9:c3:71:
         d5:52:d4:12:f4:ee:af:92:9a:ba:09:21:0e:34:8f:a4:3e:b8:
         a8:39:3a:57:a5:e6:fd:92:b7:8d:e0:9f:8f:17:72:d2:61:de:
         3d:9c:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----