Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/bd72c2e1-6559-337b-9221-5d92474944a6.roa
File:                     bd72c2e1-6559-337b-9221-5d92474944a6.roa (raw, json)
Hash identifier:          OwjexRQm2H+Qt7kXaU+YMctuPpkL2MXRIHXBh1y9omA=
Subject key identifier:   E1:B1:5D:2B:F2:5C:72:AA:A5:BD:CD:CE:44:32:07:71:6A:D2:77:6A
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584582A895262B5D889894E39800
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/bd72c2e1-6559-337b-9221-5d92474944a6.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     1239
IP address blocks:        134.202.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 16:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:95:26:2b:5d:88:98:94:e3:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=42c4ec1b-6d8f-45c2-beb1-9db2a7264cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:8b:a5:af:31:22:f9:9a:16:99:e6:5f:33:
                    5a:63:a9:b1:6d:d3:cd:9f:36:d6:e4:ed:00:29:b4:
                    5a:a3:2e:8a:9b:47:e2:81:d6:56:a5:43:e8:94:e0:
                    e2:33:c8:21:68:eb:ae:b9:f0:3d:b9:d7:b8:58:3d:
                    13:2e:dd:d9:34:a9:a5:27:c7:fb:7c:bc:c2:e7:8c:
                    43:87:d9:83:7f:24:be:5d:6f:2a:eb:92:57:a0:56:
                    88:4c:98:01:38:0f:a8:29:6b:6c:af:0c:e7:ab:93:
                    8a:3d:7c:5d:ec:e0:d0:96:eb:88:4a:df:63:4e:15:
                    58:c6:21:5e:a3:75:44:64:76:4e:d0:2c:71:6e:2c:
                    0f:49:d1:06:91:39:7d:89:cd:9c:f6:6c:fd:38:89:
                    50:7b:11:53:b4:3b:d1:a6:ee:79:07:3e:dd:7a:fd:
                    42:c8:4a:80:19:49:e6:75:ff:58:90:12:63:c4:d8:
                    0c:88:4e:60:9f:5c:72:6c:76:30:61:14:87:c1:50:
                    a7:a6:d2:1f:65:a6:6a:2d:07:0a:16:c3:59:b8:3d:
                    7e:c2:29:65:63:ee:70:10:3e:e0:4a:5c:c6:22:d6:
                    e7:57:05:c6:82:6f:22:78:91:5a:b9:df:97:e0:1d:
                    ef:8b:94:0e:ba:68:8f:34:d9:25:13:6c:46:45:5b:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B1:5D:2B:F2:5C:72:AA:A5:BD:CD:CE:44:32:07:71:6A:D2:77:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/bd72c2e1-6559-337b-9221-5d92474944a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:04:ae:90:c4:94:62:49:09:db:f2:40:81:8e:3a:96:06:d1:
         01:c8:4f:f2:b1:aa:e9:a5:c8:7b:68:ab:d6:a5:d6:a6:7a:8b:
         23:30:35:9d:82:4f:38:88:53:46:31:6f:b1:40:fd:f1:eb:50:
         d4:30:31:42:38:3f:f2:51:c5:f3:27:12:ec:c7:d4:25:e5:fb:
         15:af:27:28:d2:b6:4e:a7:e3:ba:a9:35:55:c1:51:03:44:13:
         fa:cc:7e:92:2f:fa:e8:cf:26:27:e5:38:7e:ec:eb:5f:2a:cc:
         e3:88:b3:3d:d4:dd:b3:ce:69:e5:57:cf:a3:12:46:98:7f:e8:
         80:06:d2:73:0b:68:e2:d2:a8:c0:cb:cf:92:a7:88:4d:67:3e:
         c3:83:2f:de:50:a2:87:ee:68:38:c0:81:74:20:f8:0f:13:be:
         b6:91:d4:c0:32:e1:83:2b:4c:a5:36:90:e1:33:e8:25:19:09:
         0a:e5:0f:83:a6:da:01:43:08:7e:b8:34:de:c0:32:3b:07:f2:
         c8:67:f0:47:22:35:ac:d1:67:d7:3c:d6:bd:b3:40:6b:bf:65:
         7c:1e:e4:d6:ce:6c:f2:33:e6:57:47:24:b4:c6:56:ae:36:5b:
         3c:ac:1d:29:b7:9b:6a:1f:9f:d5:01:90:8b:23:34:07:33:8e:
         d8:e1:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----