Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/ac2bfb54-8796-3392-bb62-4e23d3927044.roa
File:                     ac2bfb54-8796-3392-bb62-4e23d3927044.roa (raw, json)
Hash identifier:          2YVUzXW1qnPyl15GzoBtA2ctqDQKHkw/tkTQ3uTlhGI=
Subject key identifier:   87:55:77:5D:F7:0F:9E:8D:67:72:AE:39:FC:64:4E:18:5B:40:98:87
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F4328584606446C73CE9E7EF85F1B29C0
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/ac2bfb54-8796-3392-bb62-4e23d3927044.roa
Signing time:             Tue 28 May 2024 16:25:44 +0000
ROA not before:           Tue 28 May 2024 16:25:44 +0000
ROA not after:            Mon 26 Aug 2024 16:25:44 +0000
asID:                     24994
IP address blocks:        208.70.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 15:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:06:44:6c:73:ce:9e:7e:f8:5f:1b:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: May 28 16:25:44 2024 GMT
            Not After : Aug 26 16:25:44 2024 GMT
        Subject: CN=5c07fff6-5389-4f62-97c2-7dcd95d97a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:6a:7b:b1:ab:d0:73:5c:2e:b6:66:9d:7e:
                    b5:d5:3d:34:d2:ee:2c:a6:21:02:5c:e5:48:48:a2:
                    84:6f:ea:86:73:a2:32:96:e3:7e:9a:48:43:61:b4:
                    6f:81:64:7e:6b:14:14:4f:ef:12:ce:40:72:9d:db:
                    a7:5f:f2:5e:f4:02:33:9d:8a:2b:90:60:fb:52:d9:
                    db:45:ac:9b:8e:04:0e:5d:36:9e:ee:0f:a7:28:df:
                    b2:14:c4:dc:04:65:91:a4:9a:37:f1:2c:0a:07:a2:
                    b6:52:8e:70:7f:b8:41:7e:06:8d:3c:2f:1b:c5:b4:
                    b5:78:39:8f:21:c5:fe:4a:02:4d:ad:9c:a8:b7:9e:
                    3a:de:ee:2b:30:5d:d7:f8:a3:65:c9:af:d4:c4:cf:
                    b1:c8:57:d1:63:bc:2d:40:8e:c1:87:0b:89:a9:78:
                    41:a6:9f:77:13:87:5e:95:c4:33:f3:3b:85:26:78:
                    92:51:7a:67:ab:d7:56:9b:60:fc:73:33:35:a3:18:
                    fa:ba:a1:93:ef:bd:81:15:8a:40:5a:ce:09:cc:be:
                    14:ef:d2:1b:8f:9e:b8:d9:c0:e8:11:86:f7:f1:7e:
                    44:d6:9d:41:f0:97:8e:3b:02:d8:08:24:3e:ec:66:
                    7d:36:76:81:35:96:e8:81:5e:e8:07:fe:c6:69:c7:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:55:77:5D:F7:0F:9E:8D:67:72:AE:39:FC:64:4E:18:5B:40:98:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/ac2bfb54-8796-3392-bb62-4e23d3927044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:05:43:cd:c4:c3:5a:4e:de:4e:5b:96:14:05:a6:78:a9:dd:
         11:28:71:18:52:7c:6f:43:1d:08:9a:35:8c:ed:85:f1:2d:3b:
         1b:8c:55:73:7e:5e:56:70:13:49:52:bf:94:f5:24:f9:0b:65:
         c9:b6:a9:17:a4:3d:dc:ce:bd:32:2a:fd:78:70:02:17:57:40:
         15:b0:6a:a7:d8:e2:eb:e1:5b:06:48:e7:2b:0d:df:9d:2c:e9:
         1f:0d:4e:48:ca:00:7a:b4:dd:8a:1c:c0:6c:9e:2f:44:74:18:
         da:29:52:af:7d:26:40:3f:97:77:13:f6:f3:22:ce:cf:91:e6:
         83:e7:5a:a9:db:ce:56:6a:06:9c:da:4a:c1:75:ea:18:77:e2:
         5e:39:bc:69:e8:6c:17:92:73:01:8b:89:09:ac:e7:7e:1d:8a:
         e0:d1:3c:d2:2b:fd:fd:7a:27:f6:cc:97:4c:b6:f4:b8:83:34:
         9f:8e:a4:6f:57:7b:02:09:9f:75:e4:6f:1b:67:84:3b:08:b5:
         99:70:bc:e7:4d:61:d0:08:ed:f5:8e:6d:e2:d1:02:29:ea:17:
         0f:52:24:85:e7:35:89:7e:83:0c:1e:b0:48:7d:55:c5:8e:b1:
         40:d8:d1:7f:28:7d:57:f8:b9:dc:22:2c:b0:f4:74:75:6b:ab:
         60:c3:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----