Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/6f9a5a86-1e24-31eb-a5dd-2700fe6151e6.roa
File:                     6f9a5a86-1e24-31eb-a5dd-2700fe6151e6.roa (raw, json)
Hash identifier:          3GC3PYoGFD0tDQDBDf2GlPttQMAqNzaknRYzOcqcQfA=
Subject key identifier:   74:FC:D9:3B:05:F7:D2:2C:80:7E:3D:B1:6D:F4:77:BA:BF:4F:EB:78
Certificate issuer:       /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial:       010D0C9F43285845FB82F55FF15E2B35CF34AA80
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/6f9a5a86-1e24-31eb-a5dd-2700fe6151e6.roa
Signing time:             Fri 24 May 2024 19:57:50 +0000
ROA not before:           Fri 24 May 2024 19:57:50 +0000
ROA not after:            Thu 22 Aug 2024 19:57:50 +0000
asID:                     197537
IP address blocks:        207.174.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 20:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fb:82:f5:5f:f1:5e:2b:35:cf:34:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Validity
            Not Before: May 24 19:57:50 2024 GMT
            Not After : Aug 22 19:57:50 2024 GMT
        Subject: CN=46240bee-91da-444d-aea7-8eccda453bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:7e:c9:cf:f8:1d:66:d3:9c:fe:0f:69:0e:
                    49:db:de:40:35:3c:7d:62:55:3b:e1:64:59:c3:ae:
                    b0:77:5b:d7:57:97:0b:8a:f2:f8:46:38:4a:82:c4:
                    87:f9:c8:0d:13:d5:fc:d6:09:45:7e:f8:1a:c2:9f:
                    35:e2:5f:57:17:82:97:b1:d6:82:88:36:bf:9a:82:
                    bd:13:ab:55:2a:48:d9:6b:90:4a:b0:d5:a9:12:0d:
                    20:c7:46:32:a6:42:14:85:9a:e5:94:02:25:18:53:
                    47:97:0a:d7:d6:8d:97:0a:4e:ca:ae:96:6d:0d:58:
                    09:f0:bb:96:63:4a:84:ea:58:22:de:0b:8f:a5:21:
                    42:2c:f7:ea:3e:58:98:69:ef:f1:ba:14:61:1e:ea:
                    9b:e1:93:16:78:21:6f:ed:73:29:aa:ab:b8:c5:45:
                    ae:80:16:32:70:04:81:61:09:17:d6:b1:f8:df:07:
                    a0:09:ea:e0:2d:00:cc:f8:c7:eb:07:55:46:10:a7:
                    41:48:fc:79:3a:a9:e9:78:92:ed:f8:f2:f8:ab:53:
                    db:fc:6c:48:c0:c8:80:57:b5:d2:ca:8a:1d:ce:ee:
                    0d:ae:d9:47:92:08:95:b4:f5:2a:58:f0:94:af:ba:
                    25:c6:47:31:dc:94:df:1d:04:40:eb:58:4e:ef:96:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FC:D9:3B:05:F7:D2:2C:80:7E:3D:B1:6D:F4:77:BA:BF:4F:EB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/6f9a5a86-1e24-31eb-a5dd-2700fe6151e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:96:1a:30:b1:70:83:a9:4d:81:a8:a3:61:9d:46:73:2b:4b:
         3f:e0:d0:0f:a1:6c:60:3a:e2:ad:49:b4:bc:3a:be:eb:a3:f7:
         35:d6:c1:4f:74:b7:50:f8:98:da:5f:d6:ca:b5:0b:56:6d:91:
         25:c4:ea:3c:8a:ce:ec:2d:95:a5:b6:6e:d7:41:d4:74:9c:c5:
         d6:2a:1f:a7:c3:52:a5:b3:b0:ca:c1:28:7e:2c:40:d7:53:0f:
         7f:b0:29:0f:63:f1:b5:0f:fe:a7:bd:39:5d:da:f2:03:36:8f:
         8c:f1:5e:ff:0a:e3:3f:46:e1:00:70:c7:c8:f2:26:42:42:a8:
         b9:36:25:5c:df:91:39:15:bb:0e:fb:c5:fe:32:a7:1b:36:1c:
         b9:aa:b3:a6:8b:b6:a1:cb:85:11:d7:f3:0a:16:96:bf:d2:33:
         41:7d:be:35:90:95:3d:4a:34:8e:a9:bd:6c:c2:24:01:ab:5f:
         c7:f0:b6:dd:45:a0:58:25:71:61:b1:a6:77:7e:33:74:bf:99:
         e6:ad:2b:37:63:65:05:7e:b7:7e:10:38:3e:f6:f2:ac:c6:dc:
         d4:5e:76:e4:7a:23:04:b6:2b:bc:41:ae:a7:65:a1:30:96:55:
         de:62:73:d7:a7:f2:a3:b4:4f:2a:73:4a:3c:86:45:b7:41:b4:
         6a:07:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----