Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/e1ea8491-fe06-3fd4-ad98-c288572825c2.roa
File:                     e1ea8491-fe06-3fd4-ad98-c288572825c2.roa (raw, json)
Hash identifier:          MdlKYS7aX2zEtG9GAPEos7zBTpVrBdy88cqer4w8ykE=
Subject key identifier:   CF:46:0B:62:6F:89:B6:C7:7E:0A:49:19:08:D1:83:07:F9:11:24:9C
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F43285846B30564635AC50A9B3BE11D40
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/e1ea8491-fe06-3fd4-ad98-c288572825c2.roa
Signing time:             Mon 29 Jul 2024 13:33:34 +0000
ROA not before:           Mon 29 Jul 2024 13:33:34 +0000
ROA not after:            Sun 27 Oct 2024 13:33:34 +0000
asID:                     15171
IP address blocks:        64.203.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 20:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b3:05:64:63:5a:c5:0a:9b:3b:e1:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jul 29 13:33:34 2024 GMT
            Not After : Oct 27 13:33:34 2024 GMT
        Subject: CN=20f8dd46-053d-4e3f-b25a-d9e295e93ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:9c:70:42:03:e0:4b:98:92:aa:1f:1d:5a:
                    d8:8f:b2:a4:f6:1f:88:79:a1:7a:72:0b:29:90:08:
                    74:9e:e4:a1:9e:9b:f9:c7:65:40:01:75:3f:d8:b5:
                    ff:92:23:6f:71:c3:b8:2f:d0:b2:1f:e2:36:14:a0:
                    ae:bb:c2:56:2b:99:65:00:44:96:3a:54:04:1e:7f:
                    64:52:8a:98:d5:52:07:c0:ee:79:e4:dc:74:6f:e0:
                    a3:eb:21:33:56:b9:d1:d4:17:8f:e9:50:b9:86:8a:
                    b3:86:3f:99:28:f0:62:dd:9c:bc:ec:17:d4:8a:df:
                    43:19:ea:d4:a7:a7:e5:1a:50:e2:62:cc:2e:e9:ab:
                    66:7c:0c:ff:58:1f:85:09:5d:28:1a:61:b8:b5:57:
                    f7:ab:bd:ae:4f:02:55:12:7f:41:46:54:75:3b:75:
                    4e:21:8e:d6:4d:13:f7:af:13:4c:fc:0e:e5:6a:d5:
                    58:9a:d0:e0:81:8a:bb:7e:df:b4:6e:26:2f:8a:c6:
                    fe:d0:55:8f:92:77:07:e1:2a:be:c6:92:a1:03:05:
                    79:23:3a:dc:a8:ea:6c:2d:f1:6e:44:54:ba:c5:1a:
                    92:64:84:4c:7b:43:a4:ba:a8:97:2f:cb:83:66:01:
                    6a:43:9c:7b:f3:1e:46:78:1c:4b:7b:e4:5a:09:7d:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:46:0B:62:6F:89:B6:C7:7E:0A:49:19:08:D1:83:07:F9:11:24:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/e1ea8491-fe06-3fd4-ad98-c288572825c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.203.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:53:f3:13:da:2b:1b:60:cd:ff:4a:3a:70:36:2c:0f:43:
         75:7f:64:bf:de:d7:3c:3d:7f:6e:57:4b:3c:f1:f0:2c:37:92:
         5c:03:3a:8e:cf:f8:52:8b:57:3f:80:d5:47:fa:8a:f0:ff:80:
         58:92:95:bb:35:0a:b8:ca:a3:3a:c5:9a:ae:36:11:bf:3f:e4:
         b1:4f:35:46:6e:7b:1e:21:54:15:6a:38:53:4e:a2:0e:40:8c:
         fe:55:41:42:8c:4f:2b:96:a5:ab:4b:69:c7:51:d7:45:79:34:
         b3:81:ae:3e:08:7c:4d:e0:21:24:84:ee:62:83:0b:f4:5c:d6:
         6d:e0:7a:5a:36:0d:05:75:57:02:2f:e7:a6:c2:5f:67:b7:70:
         b1:94:54:e3:04:b3:77:d4:ff:05:ad:f6:fa:a3:2d:a5:cf:69:
         8f:40:8a:44:ad:82:b3:1e:63:e3:f5:e8:37:03:dc:49:65:5b:
         f0:17:0a:f1:f6:a8:92:62:35:8e:38:38:45:0f:10:a6:bd:96:
         f6:ae:cc:86:b5:3c:b2:fa:75:2d:1c:75:f4:87:92:b4:0d:52:
         33:ba:67:a0:5c:b8:c2:1f:84:39:85:61:30:10:83:3a:37:58:
         4c:50:75:13:7e:db:1a:b5:b6:5b:60:0b:d2:ab:01:6e:61:a7:
         21:ec:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----