Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d5721e5-628e-37a4-ac19-d426cc348c02.roa
File:                     3d5721e5-628e-37a4-ac19-d426cc348c02.roa (raw, json)
Hash identifier:          8jVjWHW6qfxSA8u6Ho7Fb2qHEv2Dq+3g3vSfvm9xFxE=
Subject key identifier:   85:A1:84:F7:85:B7:32:16:8E:66:EF:C4:E3:34:95:6E:C8:87:90:CA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845873332103B5699BDA801A778
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d5721e5-628e-37a4-ac19-d426cc348c02.roa
Signing time:             Sat 13 Apr 2024 04:03:21 +0000
ROA not before:           Sat 13 Apr 2024 04:03:21 +0000
ROA not after:            Fri 12 Jul 2024 04:03:21 +0000
asID:                     3257
IP address blocks:        50.118.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 09:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:87:33:32:10:3b:56:99:bd:a8:01:a7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 04:03:21 2024 GMT
            Not After : Jul 12 04:03:21 2024 GMT
        Subject: CN=894c5b3b-191f-4267-9d8d-1b4478611351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:03:48:cd:10:0a:b0:06:75:db:01:ca:53:
                    f6:fa:55:48:e8:cd:74:b8:10:3d:2e:a7:9f:fd:f9:
                    9f:36:77:ca:39:4c:45:c4:38:f7:10:ab:94:e0:93:
                    9d:2a:ce:b8:12:ed:89:77:35:13:2b:8a:51:58:f9:
                    fe:2d:42:17:73:b2:3e:6d:ba:2d:5d:6b:4c:b1:c8:
                    8c:ff:7b:9c:cd:72:44:99:2b:ce:4f:20:3d:f6:31:
                    dd:65:0e:c1:5e:d1:30:62:06:5a:19:26:29:56:b5:
                    ce:12:57:07:df:67:3b:57:77:0d:ab:34:df:90:65:
                    6d:70:54:bd:13:07:4b:c7:5b:f5:8c:78:28:d1:4e:
                    f8:2b:f4:15:47:1b:6b:fe:b2:50:4d:65:21:6e:07:
                    06:d0:94:07:0c:b6:52:32:d9:c7:b8:57:c3:2c:75:
                    fa:c9:35:10:55:a7:90:2a:ee:2e:4c:54:52:b5:55:
                    a9:49:24:ce:63:47:b9:23:61:b8:08:9c:4b:19:0d:
                    51:b0:1b:00:e8:4c:ca:f2:bc:d4:40:db:d3:19:13:
                    2c:4d:af:bb:b0:87:7e:2d:e3:25:40:43:23:eb:f5:
                    0e:89:bb:f9:b9:a5:9d:f7:cf:ba:5f:11:82:74:3f:
                    1f:30:e7:fe:1a:83:ad:b5:a9:59:87:63:1b:98:bb:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A1:84:F7:85:B7:32:16:8E:66:EF:C4:E3:34:95:6E:C8:87:90:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d5721e5-628e-37a4-ac19-d426cc348c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:fe:97:41:56:77:eb:91:d0:9c:da:fe:6b:ba:8c:7d:de:
         d7:f4:3d:07:3d:07:5a:a4:0c:48:da:35:82:76:53:5d:d8:5c:
         ba:39:2f:ff:7b:d8:20:8e:13:bf:7c:e2:05:d7:0c:9d:50:23:
         95:bb:a8:ff:e9:66:72:6b:f2:ad:89:a6:12:c9:a8:42:48:f5:
         c3:6b:f9:f4:43:64:5a:b0:28:b4:69:a6:df:f8:28:4b:df:d9:
         26:49:e8:38:75:97:f7:a6:dc:41:76:2d:5f:f7:15:20:b7:50:
         93:24:ae:c6:75:c6:db:11:44:b1:1d:bd:ac:0f:31:aa:e1:2f:
         b0:3e:e7:a9:47:fd:56:02:7d:e2:82:67:ee:ff:c8:65:9e:8b:
         03:8c:df:03:9c:d6:ca:e5:12:ed:96:c9:d0:97:f8:3f:41:ce:
         16:45:bf:1a:af:e2:2d:71:f2:cf:96:58:9d:13:c4:69:58:6e:
         9f:dd:f2:ae:40:1a:bf:09:89:22:ac:23:12:79:26:3a:88:c6:
         5a:f1:74:8c:60:99:4e:6b:80:ca:fa:24:45:16:f7:aa:ae:db:
         9f:b4:1f:f5:a8:f9:aa:01:a2:ba:5d:b0:c8:89:2a:8b:2f:5a:
         9e:a3:4e:fb:93:ee:05:56:57:93:08:b1:74:66:81:25:a9:0f:
         39:c7:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----