Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a3e1226a-ecd9-3fe8-9bf7-500c96aee56e.roa
File:                     a3e1226a-ecd9-3fe8-9bf7-500c96aee56e.roa (raw, json)
Hash identifier:          9wOR3KNMmiIe7sqeqdHkCv7GjRLpsleAaWETH7Vuz2Q=
Subject key identifier:   B3:EA:90:E0:4C:FE:9E:07:AC:90:94:89:1F:4D:90:0A:7A:F8:F2:AB
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F43285846A29FD5579DB54992A88548C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a3e1226a-ecd9-3fe8-9bf7-500c96aee56e.roa
Signing time:             Tue 23 Jul 2024 16:36:01 +0000
ROA not before:           Tue 23 Jul 2024 16:36:01 +0000
ROA not after:            Mon 21 Oct 2024 16:36:01 +0000
asID:                     4922
IP address blocks:        76.77.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 19:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:9f:d5:57:9d:b5:49:92:a8:85:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 23 16:36:01 2024 GMT
            Not After : Oct 21 16:36:01 2024 GMT
        Subject: CN=4a8c0814-cf2a-4169-b7bd-4ce86e2177d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:d3:ab:11:56:c5:49:3a:82:06:fa:c0:5b:
                    d9:60:8a:52:e0:82:c1:03:3e:47:c1:95:a0:96:e9:
                    b6:f9:ab:db:46:74:91:07:f8:5a:87:c1:1f:5b:7f:
                    1d:0c:43:22:24:61:6e:9a:a1:a9:3e:5e:6d:e8:b0:
                    a7:24:cc:d6:7b:55:c7:84:b8:6c:cf:76:f6:95:3d:
                    d1:a8:d6:58:93:3d:e9:02:fb:44:9a:b1:e3:01:b3:
                    ad:6d:b5:5a:54:61:11:85:a9:5e:de:da:33:b2:a9:
                    6e:ab:49:49:71:0b:00:0b:f4:48:2c:fe:a9:d5:d2:
                    de:9f:8e:de:c8:4f:4a:c2:49:6c:ca:77:9b:f4:ed:
                    41:51:a4:32:0e:fb:40:70:2d:1b:af:bb:ba:be:14:
                    7a:9b:a7:cd:0d:c3:58:91:e6:29:9c:8e:6d:b7:96:
                    dd:df:ba:80:49:00:71:a6:3f:58:23:b9:82:a9:b0:
                    22:db:42:38:19:59:26:5e:da:2a:bf:42:99:61:bb:
                    57:39:4e:66:18:e4:4e:8c:80:0e:c8:15:08:99:f9:
                    f4:b2:6c:a1:e4:5a:68:3b:7b:d1:a9:54:3f:93:67:
                    a0:7c:48:31:90:74:5b:6d:19:12:40:25:e8:cf:54:
                    93:4f:9c:1f:d7:35:22:05:3c:6d:3c:04:e4:a4:f0:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:90:E0:4C:FE:9E:07:AC:90:94:89:1F:4D:90:0A:7A:F8:F2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a3e1226a-ecd9-3fe8-9bf7-500c96aee56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:a4:ff:7a:4e:65:92:cc:0b:2e:11:31:a5:b1:64:a6:36:
         81:7b:8f:7d:16:06:ca:68:d2:41:52:f6:59:1b:49:b1:90:de:
         68:a1:e5:2b:09:ee:a5:50:fa:45:61:2c:71:a4:88:7e:61:ff:
         78:cd:47:e4:cb:ca:93:9a:c7:fc:04:1c:ee:44:d2:e2:d9:cb:
         0d:35:2a:ce:3e:75:db:4e:7e:08:19:9f:f0:0f:b7:92:84:55:
         99:ce:6e:4b:bc:01:ad:e4:47:18:2b:0a:7d:0d:c1:57:b9:e4:
         bb:53:79:4e:e5:b4:98:e3:d6:fa:84:b7:31:0e:f0:9e:4a:43:
         24:72:9b:bd:1f:c9:2d:e6:8c:2c:a2:ae:72:dc:4f:34:fe:01:
         1d:31:10:08:d3:b7:1a:fa:20:67:da:85:6c:d7:fb:39:9e:16:
         c7:c7:94:24:7f:f0:a0:c5:60:4a:25:85:6d:34:8e:58:2b:0e:
         9e:a0:f7:27:0b:92:32:53:1a:94:90:a8:54:ca:8e:a8:06:67:
         73:e7:56:bb:84:cd:30:fa:1f:a6:a0:ba:99:c3:b9:ad:97:53:
         8e:37:f9:66:6b:67:80:d8:3a:47:ce:a0:a6:9f:3d:05:f0:83:
         85:b6:85:7d:ac:fa:5e:a9:bf:e4:e8:86:fc:38:8b:ee:0c:d9:
         ca:99:cc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----