Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/11f31110-402c-3a69-b9ea-9d92764398ee.roa
File:                     11f31110-402c-3a69-b9ea-9d92764398ee.roa (raw, json)
Hash identifier:          OEjU/TnFY4UtjqxzNxpzIlF/UkU9siqIR7BT97kHK6c=
Subject key identifier:   AD:39:CF:9C:76:B0:DA:D6:96:A4:0E:86:2C:86:DA:85:4B:33:0F:70
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285844FBC8AEB205186CE63EF59F60
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/11f31110-402c-3a69-b9ea-9d92764398ee.roa
Signing time:             Fri 23 Feb 2024 05:31:23 +0000
ROA not before:           Fri 23 Feb 2024 05:31:23 +0000
ROA not after:            Thu 23 May 2024 04:31:23 +0000
asID:                     22142
IP address blocks:        216.66.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 23:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:c8:ae:b2:05:18:6c:e6:3e:f5:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Feb 23 05:31:23 2024 GMT
            Not After : May 23 04:31:23 2024 GMT
        Subject: CN=4ec038c9-e50e-4082-818f-f1e8b1dcbd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:78:ef:dd:24:12:5d:5a:4e:62:32:59:b4:
                    45:09:93:9f:8a:73:3d:84:5d:e5:20:9f:27:3b:2e:
                    a6:db:f4:8c:fe:f8:33:da:0e:c4:1c:d1:e4:4c:3b:
                    96:df:29:72:2d:c5:33:72:e0:78:37:09:b5:9e:18:
                    3d:55:73:de:96:2a:f8:f1:32:aa:69:13:f2:bd:5f:
                    c8:22:37:b1:e6:20:10:53:0c:a1:2e:f9:ee:97:bc:
                    8d:67:df:c5:aa:f5:65:38:f8:6a:94:aa:4a:6b:5c:
                    4f:4f:14:24:34:ca:b6:3d:e7:8e:f3:9f:34:0b:22:
                    be:2d:66:9f:3a:d6:64:7b:99:84:6a:ef:be:5d:b0:
                    73:0d:4e:00:eb:4d:5d:b0:44:f6:2c:08:0f:ab:68:
                    b0:62:a0:f4:15:59:1a:86:c8:29:e7:f9:6a:56:3b:
                    ef:1c:30:22:4c:e3:47:eb:7c:69:37:ae:94:2b:4a:
                    49:2b:c1:87:6f:ed:54:27:b8:0d:ce:a6:97:c7:5f:
                    1b:f1:3f:60:aa:60:4c:b7:3d:04:18:69:0d:e6:3c:
                    9c:ab:af:f3:35:bb:82:86:8a:c8:cb:1c:5c:f8:fb:
                    73:c6:7a:74:5c:0e:0b:8d:c6:a6:7b:93:dc:55:ed:
                    9a:78:ca:3c:e3:57:a4:e8:12:4c:b6:b5:59:24:d1:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:CF:9C:76:B0:DA:D6:96:A4:0E:86:2C:86:DA:85:4B:33:0F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/11f31110-402c-3a69-b9ea-9d92764398ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:c7:a3:90:64:0b:0c:e4:4a:10:c1:03:9d:a1:17:00:b8:
         7b:2f:8a:68:83:88:57:2f:0b:c9:2c:cf:f3:11:d7:08:e2:25:
         6a:0e:46:15:94:77:a0:e6:21:ac:3f:46:bd:4b:e3:b0:c1:ef:
         ae:ee:6c:db:9e:05:35:73:60:61:b8:98:ee:cd:24:88:47:cc:
         eb:f5:10:87:5c:80:6e:95:37:b7:df:8f:f0:db:66:ee:48:30:
         8b:e2:e1:1d:e8:db:92:35:76:96:3d:2f:8f:26:42:12:a5:6d:
         99:45:4a:17:a7:10:e2:39:98:bc:d7:14:0e:29:12:0c:b1:95:
         a8:37:76:f4:9f:39:a6:b4:ae:82:eb:95:ee:11:ac:c8:6f:05:
         8b:7d:42:dd:95:dd:82:fc:e1:49:01:d5:fb:87:9e:74:e0:f3:
         73:6f:3b:88:48:79:b3:d2:5b:86:33:3f:10:99:40:c5:5f:16:
         13:20:49:b3:6b:27:40:5f:f5:b7:74:49:fc:68:b1:8c:39:f9:
         2d:5b:63:7a:4f:dc:a6:28:19:27:7f:9d:9a:a3:c3:0f:4b:9b:
         49:23:24:80:85:8c:35:ce:92:f9:06:63:7d:03:2e:e9:b3:54:
         43:f0:59:cc:4a:3e:13:14:5b:c8:9d:8a:9f:ba:db:7c:2e:f3:
         3b:a6:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----