Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2ccecbbd-8c07-3739-bf34-70966c128918.roa
File:                     2ccecbbd-8c07-3739-bf34-70966c128918.roa (raw, json)
Hash identifier:          aBpRZgHmTFClsduOXGVLLDS+TlrNlWCLhAvn7c2tywA=
Subject key identifier:   F1:C6:F8:42:FA:65:2C:9C:F1:5A:18:0A:1B:22:8A:55:B4:C8:AD:22
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F43285846519898253584DD334800AB90
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2ccecbbd-8c07-3739-bf34-70966c128918.roa
Signing time:             Mon 24 Jun 2024 16:00:57 +0000
ROA not before:           Mon 24 Jun 2024 16:00:57 +0000
ROA not after:            Sun 22 Sep 2024 16:00:57 +0000
asID:                     399244
IP address blocks:        204.77.4.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 15:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:51:98:98:25:35:84:dd:33:48:00:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Jun 24 16:00:57 2024 GMT
            Not After : Sep 22 16:00:57 2024 GMT
        Subject: CN=9ff9fc1a-f0b2-45cb-adc3-59a765108492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:ce:d9:73:21:d0:3c:82:b0:bc:96:ca:9a:
                    15:cd:84:f0:ed:9a:b6:86:32:6b:a6:12:9a:27:04:
                    c8:6c:83:5a:4a:de:7d:7f:5c:09:13:c2:4d:d2:06:
                    0a:d7:92:09:92:0f:fa:a5:2e:4e:c8:ba:5b:59:b4:
                    47:fa:03:0e:e8:0d:e9:85:6b:79:d8:fe:95:17:68:
                    82:d9:56:f8:a9:49:bf:ff:90:b5:40:5e:7d:2f:ae:
                    43:73:ed:3a:a7:dd:2a:41:5c:cb:04:26:c2:9e:71:
                    7a:24:0f:9f:e7:fa:2f:96:de:ba:01:e9:dc:0e:a5:
                    fe:d1:91:a6:9e:93:c7:7c:60:20:ab:7a:85:b8:a4:
                    8a:12:3c:4c:eb:92:79:00:32:b6:a4:9e:2a:37:a6:
                    20:8b:74:bc:6e:b2:13:61:01:a8:7d:5b:22:5f:60:
                    1d:79:d4:98:b4:78:33:dd:ee:f3:2f:5d:6f:6c:9a:
                    b5:68:ee:0c:cc:f1:16:09:d2:ce:47:70:de:93:f0:
                    fc:13:48:fc:9f:d1:ff:ea:2c:9f:a7:70:09:8f:c9:
                    4a:f7:bc:24:42:1f:20:47:37:c1:99:0f:1d:92:2f:
                    a7:1b:8a:6c:0e:f8:b6:d4:a7:82:ab:38:a9:e1:b5:
                    00:d0:57:ec:e3:2a:38:2c:b2:68:e0:3a:72:34:99:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C6:F8:42:FA:65:2C:9C:F1:5A:18:0A:1B:22:8A:55:B4:C8:AD:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2ccecbbd-8c07-3739-bf34-70966c128918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:04:b1:1a:c4:e7:89:45:25:22:67:03:79:f3:42:f1:ba:f4:
         28:67:7f:1c:78:a6:5d:4f:85:bf:6e:6d:8d:ca:60:7e:c1:d4:
         98:c0:84:fd:d2:d8:71:9a:5e:80:d3:0c:3a:b9:c0:3d:49:96:
         21:e2:a1:0e:13:de:5a:33:3d:fc:de:29:1c:63:9a:12:63:06:
         de:bd:2f:ec:ca:8c:4e:12:15:3c:c1:e1:0d:a2:64:29:f1:28:
         98:04:61:82:ae:b7:3b:12:93:b0:94:22:58:76:57:5e:3c:1f:
         3d:a8:07:ca:25:e5:bf:79:48:71:13:dd:54:50:f1:da:bb:73:
         12:57:5a:d0:94:0f:19:13:40:28:c9:b3:eb:51:1f:73:ea:d7:
         83:9d:56:e8:fa:8a:dd:ea:e5:37:0a:51:47:c4:68:5c:5c:37:
         c9:72:8e:96:a5:ed:75:09:5f:8e:e2:93:99:38:f9:b5:ea:8d:
         ff:ee:72:35:bf:05:eb:57:1e:ab:94:72:ab:2e:98:79:7a:10:
         5d:32:0a:91:a5:28:da:31:b5:5d:ad:3e:0f:d0:19:8f:be:d8:
         d4:de:35:82:8b:c6:25:31:85:fe:d2:67:df:eb:eb:1c:a7:c6:
         73:ea:57:35:8d:e9:4b:28:d5:a7:d8:43:f0:32:a0:6d:f2:90:
         a9:eb:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----