Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7e1486ed-d135-3bd1-a312-32930f2c6790.roa
File:                     7e1486ed-d135-3bd1-a312-32930f2c6790.roa (raw, json)
Hash identifier:          mKGqKBWr1aqHoqJrdBVD1J/AYacMuhxqslOq3Qi8cqY=
Subject key identifier:   16:4C:92:DE:CC:A6:B6:1D:3A:6C:41:11:33:B7:83:80:5B:B3:2D:1C
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584453DEE651003E49DB33806B80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7e1486ed-d135-3bd1-a312-32930f2c6790.roa
Signing time:             Mon 25 Dec 2023 02:00:15 +0000
ROA not before:           Mon 25 Dec 2023 02:00:15 +0000
ROA not after:            Sun 24 Mar 2024 01:00:15 +0000
asID:                     109
IP address blocks:        173.39.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 20:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:53:de:e6:51:00:3e:49:db:33:80:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Dec 25 02:00:15 2023 GMT
            Not After : Mar 24 01:00:15 2024 GMT
        Subject: CN=ae76a379-e7df-4d30-8a89-644934f24606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:a1:58:e8:03:a1:31:c3:c0:08:bc:30:16:
                    cb:f6:63:ca:3a:8b:ef:72:a0:59:0c:b5:13:e4:18:
                    01:5d:e5:bd:ca:91:52:75:51:df:8c:2b:10:d3:07:
                    a8:a1:7d:40:01:38:4f:42:58:e6:89:40:98:80:b1:
                    83:74:e4:84:93:67:6c:4c:7d:5c:ff:66:44:5f:e3:
                    b9:bd:a7:e5:86:3e:54:c9:9f:4b:60:a3:f0:57:2b:
                    ca:ca:68:2e:97:b4:66:26:77:0c:0b:e0:22:06:4e:
                    65:e9:ab:09:52:33:b6:52:27:60:00:73:cd:42:c4:
                    1b:96:90:d3:1e:bf:56:9e:66:23:01:fe:66:ce:5a:
                    46:dc:b1:6a:29:27:b0:0c:db:62:00:64:38:4a:47:
                    bf:d3:fa:b1:1d:1b:df:33:81:d9:b9:a3:c9:9a:ee:
                    1d:21:42:03:66:0c:43:de:7a:ae:65:d6:8d:76:84:
                    5e:e4:f1:ec:4b:e1:c3:3c:a2:75:71:b0:26:07:00:
                    fd:1d:c0:48:b8:26:5a:d1:b0:5f:20:71:99:81:c5:
                    1b:1a:2c:b9:78:71:4f:f6:63:bf:23:a2:19:76:47:
                    c6:92:05:a1:4e:b5:23:4a:b8:f3:69:42:56:0c:c2:
                    3c:13:a4:0d:db:7d:d8:8a:34:c0:fb:c6:16:fd:97:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:92:DE:CC:A6:B6:1D:3A:6C:41:11:33:B7:83:80:5B:B3:2D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7e1486ed-d135-3bd1-a312-32930f2c6790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.39.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:d0:c7:e8:b5:38:5b:32:17:9b:94:c5:4d:73:0f:d4:29:
         f9:57:bc:bc:3d:0e:2f:93:65:f3:b8:5e:5e:cf:6f:c0:0c:42:
         38:4a:47:60:68:dc:3c:f5:94:2a:7c:0a:07:db:ce:d7:5e:85:
         b9:1e:34:2a:8e:4d:36:c7:21:a6:20:b7:51:26:e5:9d:d5:cb:
         d5:07:07:5c:d8:46:e2:0c:e9:be:74:82:90:4d:9b:ae:db:7c:
         59:6b:5c:ab:4b:f5:4c:ff:7b:e3:a7:f7:48:3c:e0:be:07:4a:
         10:a4:c7:99:ab:8b:73:fe:fb:e0:18:c6:e0:3d:18:ff:08:f5:
         65:d9:8b:93:20:68:3f:54:1a:97:18:39:14:a9:43:4d:38:00:
         8e:39:6f:c8:21:fc:99:72:2e:de:d8:3f:31:3e:63:5e:c9:ce:
         05:79:36:cb:f9:3e:ee:fc:73:57:11:94:6b:ab:7b:71:78:10:
         e1:96:0b:73:60:96:99:ad:48:a5:27:a0:06:d4:b3:cf:9e:e8:
         b5:19:12:f2:35:87:f4:3a:d4:0f:7d:0f:24:63:b5:e8:ab:1c:
         30:7d:f0:23:32:94:cf:c4:db:4f:5d:e7:4e:ca:d7:a4:40:e5:
         b1:52:9e:7f:43:97:ef:1a:47:57:d9:ab:2b:b7:66:fa:9e:ff:
         ba:5a:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----