Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/173cc2d1-0e8f-39b2-b15f-76d326f6e5f9.roa
File:                     173cc2d1-0e8f-39b2-b15f-76d326f6e5f9.roa (raw, json)
Hash identifier:          59XkIRUS92bODmMXbWVNzRQ39bbKIVtuBetqWYpl3es=
Subject key identifier:   91:B6:00:2A:5E:00:01:F6:F5:A1:DE:86:EF:19:9D:E2:7C:6D:BD:DF
Certificate issuer:       /CN=53047e29-2570-4585-9e69-b23797196c26
Certificate serial:       010D0C9F43285845D3DF3DAA07D079CCE6C772C0
Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/173cc2d1-0e8f-39b2-b15f-76d326f6e5f9.roa
Signing time:             Fri 10 May 2024 15:11:26 +0000
ROA not before:           Fri 10 May 2024 15:11:26 +0000
ROA not after:            Thu 08 Aug 2024 15:11:26 +0000
asID:                     139211
IP address blocks:        158.116.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:df:3d:aa:07:d0:79:cc:e6:c7:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53047e29-2570-4585-9e69-b23797196c26
        Validity
            Not Before: May 10 15:11:26 2024 GMT
            Not After : Aug  8 15:11:26 2024 GMT
        Subject: CN=ce28ad36-e419-4b34-9cd5-1f29ce04c305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:9f:15:93:65:7f:70:89:00:56:03:01:ec:
                    e9:4d:fc:46:09:6c:7a:e0:f6:7a:f7:2a:88:b8:2f:
                    14:64:f3:e5:a4:80:af:a2:a5:0e:a7:0a:d9:06:2c:
                    cd:cb:23:08:39:52:7c:2a:f1:5e:4b:f1:ad:1f:13:
                    8c:e2:28:f7:2c:5f:0b:2c:0b:df:a3:9d:c8:43:b5:
                    5d:51:e7:8c:c0:2c:45:1e:96:78:d6:d6:9c:05:7f:
                    bf:d7:e5:94:b0:4d:0f:00:9e:8e:ef:37:1b:b8:8f:
                    1a:b6:1d:d8:63:b3:ca:98:e9:71:35:e5:d3:d3:a9:
                    2c:2f:a7:fc:36:c6:7f:b9:bd:84:d8:4a:0b:51:7e:
                    b7:be:69:2d:fa:0e:8c:5c:ce:c3:e1:71:06:c6:1e:
                    0e:ef:55:ae:7e:e4:b9:30:23:ee:46:95:14:06:07:
                    3a:5e:fd:18:a3:b2:23:92:2c:40:d1:0e:91:e1:24:
                    d6:5e:23:e5:de:ef:15:41:2b:f4:53:18:5e:25:19:
                    88:79:b2:b0:4d:3c:b5:00:3c:31:5b:73:db:e4:df:
                    8f:a8:cb:37:bc:1b:b2:19:d8:04:c8:fa:c2:20:f0:
                    c0:2d:8d:6f:bc:f5:07:96:03:6c:4e:7f:2d:1b:ad:
                    b0:8e:82:fe:7e:86:d1:f2:d4:75:00:3b:ff:77:c9:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:00:2A:5E:00:01:F6:F5:A1:DE:86:EF:19:9D:E2:7C:6D:BD:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/173cc2d1-0e8f-39b2-b15f-76d326f6e5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl

            X509v3 Authority Key Identifier:
                keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.116.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:69:71:fe:90:f6:d1:88:2f:b3:bc:ba:3c:1f:fd:fb:6a:
         d4:0f:dc:8f:ac:4b:83:05:b5:9f:b3:1f:72:94:a3:3c:52:ac:
         f6:d4:6f:79:de:1a:41:43:af:92:31:f5:28:44:61:ed:64:78:
         a0:11:3e:52:b0:41:d3:e4:d8:57:4a:4c:5f:36:6f:65:ce:e9:
         5a:2b:ab:c6:fd:88:1f:ea:98:a5:6f:28:6d:c1:51:39:0d:65:
         e5:ee:97:39:a1:13:7b:4b:94:83:4f:cb:50:cc:e9:31:17:98:
         22:3e:ed:01:3b:5d:a1:b6:26:d5:30:ff:8f:55:84:97:0f:5b:
         26:d0:f3:e8:8f:30:d2:d1:70:8d:5e:b4:68:43:0f:73:64:c8:
         cf:1b:e8:2e:20:77:11:5c:b6:8d:b8:67:4d:f1:db:bb:66:73:
         44:a8:d9:c3:1d:95:a8:7d:f1:b9:77:56:2c:cc:f2:e0:2c:a4:
         f4:73:fa:82:0c:8e:b3:bd:e4:c9:b4:21:d5:03:54:6a:73:90:
         33:54:3a:9d:42:e8:ed:61:f5:91:10:e8:a9:26:92:64:14:a9:
         f8:9f:ce:e7:f0:13:d1:fb:0c:12:a7:82:44:80:f4:3b:33:3d:
         bf:62:ff:5c:a0:3d:1a:26:88:18:71:04:2a:e3:63:65:6d:0b:
         b6:0b:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----