Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/b83dd96b-c993-3506-901c-5b1ff450f609.roa
File:                     b83dd96b-c993-3506-901c-5b1ff450f609.roa (raw, json)
Hash identifier:          e5CXLNRWCwXwU2Ti72h7L+CC8VR5g9DdKj3AX4mRb9U=
Subject key identifier:   A8:C1:B6:6F:B0:A9:55:A2:35:2B:0C:8C:FE:C1:19:7B:E9:15:75:F5
Certificate issuer:       /CN=618659a6-e7a9-4c1f-9818-42770f2b224e
Certificate serial:       010D0C9F43285847A567596B72739256A2149480
Authority key identifier: A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/b83dd96b-c993-3506-901c-5b1ff450f609.roa
Signing time:             Thu 24 Oct 2024 09:16:34 +0000
ROA not before:           Thu 24 Oct 2024 09:16:34 +0000
ROA not after:            Wed 22 Jan 2025 10:16:34 +0000
asID:                     33622
IP address blocks:        140.235.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 17:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:67:59:6b:72:73:92:56:a2:14:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618659a6-e7a9-4c1f-9818-42770f2b224e
        Validity
            Not Before: Oct 24 09:16:34 2024 GMT
            Not After : Jan 22 10:16:34 2025 GMT
        Subject: CN=0ff42d51-2c62-46dc-aad3-e3dffd3bcd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:72:8e:be:de:09:02:72:39:34:f2:d9:53:3e:
                    df:c4:e6:f7:94:15:16:df:64:d7:e0:a9:02:5d:62:
                    44:e0:7c:f6:5a:64:d6:85:62:06:58:54:09:e9:bd:
                    d4:cf:a8:8b:ef:ad:d3:28:fe:ec:8a:83:91:bd:68:
                    d0:98:28:4e:18:36:ee:20:11:90:60:f4:b7:f7:f1:
                    fb:24:8c:16:67:e2:ff:71:fe:d3:3d:be:66:94:eb:
                    ef:2c:1f:2c:e5:25:e4:5a:ea:87:54:f6:85:46:db:
                    fa:31:74:80:fd:7b:05:79:6f:7c:29:b8:62:d0:e2:
                    77:af:0b:fe:a9:8d:8a:34:c4:56:90:6d:3c:ea:ab:
                    0a:93:ec:1a:29:c3:69:f8:c2:78:ec:38:3e:e6:2c:
                    fc:8d:26:eb:17:70:ef:b2:21:75:0d:27:05:60:9a:
                    6b:a3:41:53:34:4a:24:8b:61:e5:2d:14:8b:90:e7:
                    06:fd:c9:61:60:2c:ba:f8:97:77:31:92:0d:bb:f0:
                    5a:6d:21:1d:f2:7c:6d:27:00:19:1f:59:60:3b:5b:
                    b7:c7:42:a8:5a:16:d0:3e:48:ce:eb:07:63:96:88:
                    18:13:02:68:41:2e:87:a6:a0:95:27:c1:54:ad:c0:
                    41:22:bc:51:fb:36:0c:11:68:6d:fd:9a:02:a5:eb:
                    fb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:B6:6F:B0:A9:55:A2:35:2B:0C:8C:FE:C1:19:7B:E9:15:75:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/b83dd96b-c993-3506-901c-5b1ff450f609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/618659a6-e7a9-4c1f-9818-42770f2b224e.crl

            X509v3 Authority Key Identifier:
                keyid:A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:2d:9d:66:db:88:49:1c:d6:60:07:f3:c3:ef:b6:78:0b:
         08:d2:ba:6f:da:a1:75:72:7d:2c:cb:0e:a9:73:e5:ee:96:2c:
         c6:21:1c:8b:ea:f1:e7:ed:a8:3a:f6:ae:cb:8b:0a:cb:82:18:
         da:d0:41:c7:a0:9c:61:02:17:9d:5a:60:75:dc:40:2f:94:1b:
         c8:1a:30:fd:48:01:f9:ff:26:47:5b:c6:74:93:cc:b4:b8:44:
         b1:59:40:73:0e:e6:f7:df:46:10:75:00:bf:11:98:30:7f:74:
         31:23:ef:c7:8f:be:82:50:b8:62:97:4a:1e:c3:c7:1e:b8:39:
         d8:40:9b:b6:94:fb:5e:3b:32:f4:6e:02:56:55:26:d9:27:c6:
         44:22:95:8e:ae:8d:be:07:2f:6e:45:9c:ae:37:5e:dc:83:c3:
         b7:3e:f8:43:e7:41:ce:e6:4b:03:86:fe:de:0c:3b:4b:57:3e:
         78:42:2f:5f:c5:92:f6:40:b6:b7:79:8b:44:55:19:bc:fc:61:
         c6:26:26:10:ba:11:45:5f:bd:66:2c:11:5d:35:35:ea:53:8c:
         bb:3f:c9:ed:6b:95:62:86:45:44:7f:44:9e:6e:92:3a:ff:e8:
         50:af:1b:f8:6c:56:3e:93:e9:7b:cb:86:78:cf:61:f2:e0:50:
         a4:1b:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----