Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bbe12c34-4655-32cc-a352-3780a48eac74.roa
File:                     bbe12c34-4655-32cc-a352-3780a48eac74.roa (raw, json)
Hash identifier:          K9S07VTQOCSh4rzhZjc06365NxebyeXkzkRCuQZ2uAE=
Subject key identifier:   CE:0E:84:E9:7D:F5:44:E3:82:FD:3A:71:12:C1:22:3A:76:BA:68:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858468D44D46FEAEB15ED5EC1F300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bbe12c34-4655-32cc-a352-3780a48eac74.roa
Signing time:             Tue 16 Jul 2024 01:00:24 +0000
ROA not before:           Tue 16 Jul 2024 01:00:24 +0000
ROA not after:            Mon 14 Oct 2024 01:00:24 +0000
asID:                     209854
IP address blocks:        50.117.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 05:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8d:44:d4:6f:ea:eb:15:ed:5e:c1:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 16 01:00:24 2024 GMT
            Not After : Oct 14 01:00:24 2024 GMT
        Subject: CN=0b68571f-ae72-4d8c-a590-4257b913479b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:88:62:b5:ec:85:fa:8f:c2:91:3b:46:0b:
                    da:12:10:c1:5b:82:fa:7e:03:14:91:ba:59:71:c9:
                    5c:0f:d4:25:a9:50:51:07:73:ea:2e:af:37:61:30:
                    e0:7f:f5:8b:4c:40:86:f6:d2:d1:14:02:da:7f:ae:
                    bf:2a:d4:4a:49:01:7c:01:7c:36:20:18:35:21:fc:
                    79:7f:09:b1:ea:d2:a0:2b:bc:bf:65:d2:4e:5e:25:
                    8d:64:b1:df:7f:a1:f6:25:ad:4c:7d:07:50:3c:5a:
                    5f:e8:bd:9a:65:d8:0e:1d:c0:aa:e7:ac:46:56:1f:
                    b2:34:97:d3:74:b5:08:b8:89:85:1c:b8:c8:5d:85:
                    35:be:d7:cf:78:2a:86:62:0e:a0:0e:24:cd:70:27:
                    a5:c6:da:36:b7:1b:94:cf:8e:f7:95:05:69:6a:f9:
                    b9:43:7f:44:0e:53:8d:75:cc:f3:b2:5f:cd:fa:0b:
                    3e:89:6f:0d:8d:60:30:4d:bb:75:12:21:c0:e4:d9:
                    46:0f:8b:c7:2d:8d:2d:d6:0f:30:0b:e9:fa:26:cf:
                    55:9b:bd:96:3b:ea:4d:4a:a0:6f:be:21:57:6d:ba:
                    be:21:89:5c:73:ce:6d:30:0e:4e:d6:2e:38:c2:2e:
                    42:5d:3b:cb:dc:fc:40:23:01:20:3c:f0:5f:55:60:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:84:E9:7D:F5:44:E3:82:FD:3A:71:12:C1:22:3A:76:BA:68:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bbe12c34-4655-32cc-a352-3780a48eac74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cf:36:d2:ba:53:d6:78:c3:af:d5:87:a5:3d:2d:2d:e7:30:
         ff:c0:69:46:96:d3:80:52:5a:f0:fe:1c:80:5f:8b:59:cc:09:
         b3:42:0a:28:bd:ca:fb:9c:0a:b1:be:8c:db:86:b0:cc:8b:8f:
         d2:09:88:de:3c:d3:a2:bd:29:53:c1:c9:0d:3c:de:72:5c:63:
         50:3f:89:fe:fb:f1:c1:2c:c5:cb:12:40:b3:53:6a:e9:5c:af:
         5c:cb:c5:b6:48:57:fd:4e:8f:78:88:7c:fb:d4:34:23:7d:69:
         20:ef:a8:28:a6:22:a8:fd:a2:b6:56:e7:20:bb:45:a0:92:d2:
         9c:ca:4b:bb:f6:43:d0:cd:fb:e0:18:01:60:3e:f2:42:57:a7:
         84:14:b7:01:3f:ae:5e:99:c1:46:63:4b:bf:a4:47:f3:cb:d1:
         ea:28:01:d0:b1:c9:48:7a:31:b7:4a:51:1b:20:6b:e8:53:9d:
         a6:fa:3f:5e:66:ac:6e:de:c9:11:0b:5a:e3:16:b9:af:51:a5:
         fd:63:66:ee:82:e0:5a:ee:09:10:29:5b:36:fe:f1:42:16:c0:
         79:39:f2:09:8b:07:15:b3:04:51:24:5e:5d:c4:09:56:fd:0e:
         13:fd:28:77:08:26:aa:bd:46:bd:2a:fd:ea:00:ca:30:ad:e4:
         29:54:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----