Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/05d68c89-edf4-35df-8fba-10068e1f36cb.roa
File:                     05d68c89-edf4-35df-8fba-10068e1f36cb.roa (raw, json)
Hash identifier:          EqmDC8zuw71U02SYw6HDsCWaZC1oHlLXm8rBItpsntw=
Subject key identifier:   12:26:41:EB:2F:7A:AE:38:4D:4E:43:9A:03:43:93:7E:4E:C4:2A:BF
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F43285846B305DA1AC5D8246A843DC980
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/05d68c89-edf4-35df-8fba-10068e1f36cb.roa
Signing time:             Mon 29 Jul 2024 13:34:30 +0000
ROA not before:           Mon 29 Jul 2024 13:34:30 +0000
ROA not after:            Sun 27 Oct 2024 13:34:30 +0000
asID:                     15171
IP address blocks:        144.86.128.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 20:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b3:05:da:1a:c5:d8:24:6a:84:3d:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jul 29 13:34:30 2024 GMT
            Not After : Oct 27 13:34:30 2024 GMT
        Subject: CN=6b59c310-71ef-424b-8253-b6271b2e73bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:bf:e8:02:f1:03:34:dd:4a:3e:9a:2b:1e:
                    fa:30:d5:5e:12:7e:5f:f0:f3:ec:07:04:f4:f3:4d:
                    db:68:a5:26:4a:26:b9:16:fd:39:56:9a:c6:82:e3:
                    ef:a4:94:12:11:e8:bd:f9:34:75:b6:78:41:95:ae:
                    79:d6:59:4f:cc:b8:3a:00:de:84:d9:6a:b9:bd:a6:
                    58:bb:cb:2c:40:a4:be:28:89:52:9b:bb:52:3b:2e:
                    cd:d2:e1:d3:a5:c6:2c:5e:5c:db:93:b3:b9:a2:e8:
                    43:b3:ce:1d:69:7c:04:b9:27:2a:cb:ab:a3:73:c2:
                    50:9b:9d:1e:26:13:28:69:cd:a4:71:82:d0:8e:d0:
                    ed:b4:eb:de:75:2d:1c:09:40:3f:3c:ac:80:f4:a1:
                    40:8b:ed:ff:36:fb:f5:3e:ab:1d:df:b7:3c:dd:4c:
                    e6:65:a6:25:b0:87:c7:2c:0a:d0:9c:b6:cc:65:8a:
                    ba:79:a0:de:6b:3a:b1:9e:1a:1b:65:fa:44:d7:4f:
                    4d:7f:72:7d:02:35:00:d9:fe:8e:81:0d:5f:f5:f3:
                    88:58:a3:78:61:b8:6f:06:4d:00:3c:91:3e:9d:75:
                    a3:cc:12:89:2e:75:33:f8:ac:fa:fe:60:c0:cb:31:
                    35:69:09:71:1f:58:e2:75:57:15:77:b5:f4:5e:64:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:41:EB:2F:7A:AE:38:4D:4E:43:9A:03:43:93:7E:4E:C4:2A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/05d68c89-edf4-35df-8fba-10068e1f36cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:50:82:3f:ae:cb:58:54:65:18:06:62:b7:0c:21:0a:75:eb:
         60:c9:33:f9:a9:72:a8:d4:ee:3c:23:35:8b:8c:17:ba:d7:ef:
         b8:80:60:b3:98:f4:45:94:23:3a:9d:65:11:1e:da:91:11:bd:
         a8:6a:d8:56:50:f6:01:2e:37:65:ac:95:1f:7c:8f:d4:eb:19:
         c1:6f:4f:20:00:1c:ae:6e:6a:e0:9e:c5:8a:b5:7e:04:09:bf:
         e7:e7:89:b9:fa:8c:c4:97:41:ee:87:38:56:86:2a:a0:fc:ce:
         76:b2:2d:3b:7a:f1:70:c0:75:c9:52:df:51:bd:97:c3:b1:37:
         1d:c4:f9:e3:70:89:e1:53:6f:16:d1:af:23:cc:42:88:13:65:
         be:33:88:95:4f:9b:5d:57:48:1b:b8:79:2b:36:76:63:08:df:
         19:a6:9b:be:86:51:f3:9b:f5:2b:2b:3a:0f:4e:91:44:ea:75:
         7e:65:ce:71:1e:b3:1e:85:a1:51:e7:e8:c4:15:5d:71:cc:92:
         77:0b:3e:5e:9b:1f:a6:21:8c:8a:d4:9e:3a:3b:3e:5b:b9:e5:
         18:3c:e7:f2:ec:40:6a:37:76:99:67:4b:9f:dc:e9:a4:33:9f:
         85:43:38:f0:42:c5:fe:35:19:63:dc:9c:ec:6d:55:7f:03:61:
         7d:83:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----