Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7486aade-9f4a-3dbf-8599-20c9700b61f6.roa
File:                     7486aade-9f4a-3dbf-8599-20c9700b61f6.roa (raw, json)
Hash identifier:          SCP19ctTYjywKrXT5YVSFqoJfAuTq7R7tdXKMKlvxHE=
Subject key identifier:   F9:8E:AB:37:0D:F4:55:A6:CA:EB:2C:DD:AB:98:55:65:8F:AE:70:67
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61D9523092039FD437E4440
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7486aade-9f4a-3dbf-8599-20c9700b61f6.roa
Signing time:             Sat 24 May 2025 16:42:17 +0000
ROA not before:           Sat 24 May 2025 16:42:17 +0000
ROA not after:            Fri 22 Aug 2025 16:42:17 +0000
asID:                     213238
IP address blocks:        172.120.40.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1d:95:23:09:20:39:fd:43:7e:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:42:17 2025 GMT
            Not After : Aug 22 16:42:17 2025 GMT
        Subject: CN=fe02a522-d874-4157-b12d-fa7662613ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:2d:57:8a:f9:bd:1a:13:5e:19:89:00:f2:
                    5d:40:99:1f:4c:e1:bc:32:23:80:c1:67:17:e6:e8:
                    77:df:2f:86:2b:e8:fb:cc:35:e1:c4:6f:7f:ad:e5:
                    c9:5d:41:f5:16:26:74:27:ef:a7:fa:c2:73:d0:30:
                    dd:be:63:52:8f:f1:37:49:9f:d1:cb:51:0e:6c:a6:
                    e6:eb:71:c2:2b:1d:6a:cd:5d:18:08:71:13:8a:37:
                    cf:f8:b0:a9:8c:41:16:1a:73:75:3f:2e:59:0a:fd:
                    ef:bb:d4:77:8f:46:df:d5:f4:21:96:5a:9b:78:8c:
                    d1:74:44:55:8a:47:59:66:4f:8d:85:62:c4:31:bf:
                    b5:0f:c2:06:15:54:94:e1:27:db:92:73:74:ef:88:
                    75:5e:a3:25:f4:51:a5:60:e7:4d:c5:b9:ca:d2:af:
                    0c:4a:31:74:db:06:a4:52:7d:aa:c8:68:a4:6b:35:
                    26:b8:81:ca:63:6d:e3:3d:40:bd:53:56:a0:b3:25:
                    92:e5:4f:de:50:4e:f5:1a:9e:87:cf:26:78:db:1a:
                    fd:a7:b3:cf:42:de:71:4c:13:a4:dc:c7:ce:52:65:
                    a1:36:bc:e9:9b:6f:8f:ea:a1:70:4f:c1:b7:bd:51:
                    19:ea:f0:c4:d5:09:af:ae:71:42:5c:b5:9c:e1:fc:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:AB:37:0D:F4:55:A6:CA:EB:2C:DD:AB:98:55:65:8F:AE:70:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7486aade-9f4a-3dbf-8599-20c9700b61f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:1a:c3:87:bf:11:92:67:2b:c4:a6:cc:81:c3:30:04:cc:
         ad:7a:96:65:88:55:73:77:10:7a:42:47:0c:81:2c:1e:c6:f9:
         9a:3c:aa:48:c6:bc:f6:f0:b9:5a:63:71:bf:a3:f0:9d:07:c5:
         8c:e5:bd:6c:52:46:72:a3:06:af:c6:93:63:ee:1a:dc:4b:54:
         94:1d:55:aa:b2:62:95:0e:41:9a:09:7e:41:a8:73:e2:d5:cd:
         8a:71:04:93:92:a7:fe:a3:50:62:a7:3e:26:05:b4:46:30:ac:
         79:7c:d8:e1:a9:92:8f:57:e1:90:bb:b5:1b:9c:c3:5e:f1:c9:
         bd:0b:86:3f:bb:83:e4:13:b6:66:92:14:b1:31:b2:b6:7d:e4:
         4b:ce:c1:d6:19:c5:84:12:7d:ee:46:7c:92:96:31:2b:d6:92:
         86:fc:2a:20:4e:12:77:ef:fa:02:84:a8:84:93:a2:9f:8c:49:
         e9:2c:17:e9:de:f9:4a:b0:2d:ef:3b:d5:e7:06:eb:ef:6f:7a:
         16:0c:25:29:8e:6b:da:cc:01:a6:77:49:9f:f3:26:33:68:ed:
         c8:1d:08:38:0d:bb:44:06:2d:9a:5e:cd:33:26:bd:5b:d8:5e:
         b5:cc:d6:3a:3a:2e:d3:f1:b2:0e:a8:e5:0a:60:ea:a1:10:33:
         a8:ca:dd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----