Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/886e7263-b544-3321-bae4-38d6add61856.roa
File:                     886e7263-b544-3321-bae4-38d6add61856.roa (raw, json)
Hash identifier:          QSbDTBmqxjQTaQ9aIbl4Uo+/R86SG2T7aJb6q2A5Cgs=
Subject key identifier:   54:58:07:E2:56:A0:00:E9:B6:C0:ED:0C:3C:E0:7F:3B:A3:F4:FB:A8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584613D41AA3F849A0F64E3BE440
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/886e7263-b544-3321-bae4-38d6add61856.roa
Signing time:             Sun 02 Jun 2024 13:00:36 +0000
ROA not before:           Sun 02 Jun 2024 13:00:36 +0000
ROA not after:            Sat 31 Aug 2024 13:00:36 +0000
asID:                     22773
IP address blocks:        104.253.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 04:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:13:d4:1a:a3:f8:49:a0:f6:4e:3b:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 13:00:36 2024 GMT
            Not After : Aug 31 13:00:36 2024 GMT
        Subject: CN=6f46b31c-7616-4863-a558-52acbb0c19ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:b3:14:f7:6e:9c:c9:7f:bf:fd:91:e0:f4:
                    d0:1c:c3:58:8d:f0:46:3e:b3:f8:40:4f:dc:5f:41:
                    d9:fa:89:a2:b5:a2:55:d1:f4:74:76:17:a3:ec:7e:
                    4f:79:fe:78:1c:11:10:f8:de:17:88:45:d5:fb:53:
                    c1:66:ac:24:7e:a9:98:3c:7f:cb:a5:5c:36:fd:37:
                    78:37:3b:7d:2d:ed:51:8e:4b:5d:82:c9:a2:12:79:
                    9f:87:67:37:0b:61:30:1e:8e:d8:39:bd:14:71:63:
                    16:db:cd:ed:43:ca:bc:69:df:38:d6:97:b2:91:f6:
                    ed:85:a3:89:bd:94:8e:68:91:41:b5:c3:dc:cb:d5:
                    54:c4:0e:56:42:7d:26:98:9a:b0:cb:3c:0a:f3:0a:
                    ec:9b:f8:53:ac:9d:63:b8:6f:6a:05:1c:89:44:9c:
                    5a:29:ba:df:1e:0d:32:4f:d9:65:88:61:ea:d6:0f:
                    2e:6e:ac:0b:10:25:8d:c6:48:aa:41:cb:07:b6:63:
                    7f:c8:6d:2f:78:78:ee:a1:76:0c:ac:2d:f4:9f:e9:
                    cf:a1:bd:23:49:a0:ca:24:10:3b:fb:51:8b:51:42:
                    73:33:8f:4d:19:46:57:f7:4f:c7:02:40:c1:38:71:
                    4d:46:b9:b6:06:ae:b9:bf:80:f6:07:b7:f6:68:30:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:07:E2:56:A0:00:E9:B6:C0:ED:0C:3C:E0:7F:3B:A3:F4:FB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/886e7263-b544-3321-bae4-38d6add61856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:61:bb:de:91:68:0d:3a:8b:41:dd:81:1d:53:58:95:3b:
         ae:06:bf:9d:ab:59:12:a2:98:e7:4e:df:dd:51:bd:21:c1:7a:
         9b:d4:34:5e:4e:3c:04:04:08:be:4d:fa:6d:6c:19:52:3c:fb:
         4b:67:c1:4f:03:f5:a8:14:15:ce:fb:ee:d3:92:58:10:1e:36:
         b6:75:3b:84:74:b4:eb:c3:7c:41:b2:c2:71:d8:8c:97:39:bc:
         26:ee:4e:62:55:4d:8d:49:14:59:a1:0e:a8:ef:7d:c0:b1:65:
         21:fc:ee:2f:9f:6e:b4:fb:cd:ef:5f:6c:1e:26:81:25:8f:c1:
         99:63:3c:40:63:cc:95:a4:e0:d7:2e:44:17:be:97:40:59:3b:
         44:b3:76:6a:64:f5:56:4e:85:e6:a0:57:5d:a5:63:a7:74:4f:
         9e:0f:fa:87:e4:98:72:08:22:fe:aa:96:f1:ae:17:8a:dd:14:
         df:e9:d5:bf:39:dc:cd:8f:25:74:cf:64:8b:c7:2f:03:94:e4:
         72:04:99:da:aa:39:65:6f:83:3f:64:74:2d:6e:20:18:c8:81:
         b6:08:37:d6:0b:f4:c7:65:8a:7e:ea:ca:6b:8b:d0:04:f8:6e:
         e9:8d:cf:6c:32:0f:2d:b6:9a:d9:6c:71:87:37:e8:3d:27:00:
         0f:c8:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----