Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/dd5dc660-ac45-367e-8fd1-68814cf5f217.roa
File:                     dd5dc660-ac45-367e-8fd1-68814cf5f217.roa (raw, json)
Hash identifier:          +Q02ivWfd9irVB9chDgEEcrWCQT8IqflNhZVUQtutgk=
Subject key identifier:   8D:09:A3:7E:25:CC:A0:2F:0E:2A:49:30:05:2D:B0:07:E0:B3:DE:4C
Certificate issuer:       /CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
Certificate serial:       010D0C9F43285846793A83CBDC6CD70E4DC788C0
Authority key identifier: ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/dd5dc660-ac45-367e-8fd1-68814cf5f217.roa
Signing time:             Mon 08 Jul 2024 20:43:43 +0000
ROA not before:           Mon 08 Jul 2024 20:43:43 +0000
ROA not after:            Sun 06 Oct 2024 20:43:43 +0000
asID:                     16509
IP address blocks:        204.16.216.0/21 maxlen: 22

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 22:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:79:3a:83:cb:dc:6c:d7:0e:4d:c7:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
        Validity
            Not Before: Jul  8 20:43:43 2024 GMT
            Not After : Oct  6 20:43:43 2024 GMT
        Subject: CN=d169506a-1d32-4f22-9c4d-1d57afc71bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:91:7b:65:64:f8:2a:23:6e:dd:56:2d:9b:
                    bd:08:bc:a2:d6:2f:cc:d9:d3:d4:75:33:e8:b5:54:
                    17:df:a2:83:09:c1:2a:60:09:a0:38:43:71:0d:67:
                    5e:cb:6a:79:a9:9d:63:fd:42:45:cd:fe:ff:26:73:
                    55:a4:ba:51:dd:a8:3d:c4:88:95:5b:80:d8:03:c2:
                    c6:a5:6a:f3:37:2c:c4:46:9c:58:71:d9:5e:66:d7:
                    95:0c:81:4f:42:93:e4:27:53:d3:f5:23:f2:59:66:
                    64:18:65:f5:cf:e6:70:f6:6b:c1:81:d7:3f:76:2a:
                    7e:c2:c5:64:cc:45:e1:97:1f:b2:5c:e0:5a:9f:ad:
                    ce:cc:29:8e:32:87:21:d6:e9:13:b3:3d:7f:a4:20:
                    0a:a4:ab:25:e2:6e:66:20:c1:d1:4a:e5:9b:c7:53:
                    3e:00:b4:d7:d3:5a:67:8d:76:f6:45:bf:ff:09:ee:
                    d2:d6:10:24:f2:8c:64:e0:e8:e1:c9:9e:01:55:ec:
                    ad:28:e1:3c:c4:4a:3a:f0:55:00:bd:9d:98:31:fd:
                    42:88:f4:89:47:01:92:c9:72:02:b2:c9:0f:2b:cd:
                    63:34:5f:ad:27:92:6d:22:cd:26:5a:f9:aa:b5:95:
                    b2:e1:d4:e8:64:fe:be:99:bf:c4:62:cf:54:d3:1a:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:09:A3:7E:25:CC:A0:2F:0E:2A:49:30:05:2D:B0:07:E0:B3:DE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/dd5dc660-ac45-367e-8fd1-68814cf5f217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl

            X509v3 Authority Key Identifier:
                keyid:ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:76:bc:e1:2a:11:84:60:9f:e7:92:db:41:19:0e:a1:06:40:
         b1:e7:c1:82:56:88:96:85:56:6a:e8:6d:cd:6e:d1:da:65:ea:
         1c:68:fc:14:e4:53:58:c2:4a:7b:1a:7b:ba:bb:2d:ca:d9:dd:
         c7:f0:49:de:ee:d3:10:b7:18:40:28:d7:de:0a:c0:ac:39:86:
         41:d8:d5:1e:f9:18:59:63:66:44:db:61:44:cd:ce:7f:39:36:
         69:36:e6:de:2c:56:42:8c:02:89:41:56:d7:c6:ac:16:9b:67:
         3d:a8:75:93:36:2c:79:a0:30:37:e2:22:10:60:1a:4d:e3:1f:
         6a:0b:27:a2:b4:f1:7c:ad:f6:da:73:68:26:ff:d7:59:bd:6d:
         1d:f3:e2:46:ec:25:2e:ba:d8:3f:cc:53:2e:7f:b3:83:3d:c7:
         bc:06:82:3e:87:b0:6b:6a:db:07:84:f8:2e:23:f4:7c:6c:36:
         e0:8c:38:58:62:d0:b0:10:df:65:31:0f:56:14:a6:b4:08:61:
         34:06:8a:76:4f:1b:b5:4f:c1:b8:68:41:69:13:da:d0:ad:60:
         fd:51:da:67:7a:22:a2:6b:8d:91:45:cb:b6:f0:41:11:d4:04:
         5d:6f:86:a1:88:b5:8b:cc:d1:98:91:76:3f:9f:63:31:a6:24:
         5e:94:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----