Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/35a38427-81a5-3139-98de-73a36dba268f.roa
File:                     35a38427-81a5-3139-98de-73a36dba268f.roa (raw, json)
Hash identifier:          rsyIaeAb96VkeDtHed4Lw8L7KzRQbj1eIZ5aoNKSKpM=
Subject key identifier:   44:E2:21:61:2E:91:FA:BD:05:F7:35:92:63:19:56:58:C7:AD:3D:98
Certificate issuer:       /CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
Certificate serial:       010D0C9F43285846B45A5599A1355B17EB769200
Authority key identifier: 69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/35a38427-81a5-3139-98de-73a36dba268f.roa
Signing time:             Tue 30 Jul 2024 01:00:28 +0000
ROA not before:           Tue 30 Jul 2024 01:00:28 +0000
ROA not after:            Mon 28 Oct 2024 01:00:28 +0000
asID:                     10466
IP address blocks:        216.27.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b4:5a:55:99:a1:35:5b:17:eb:76:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
        Validity
            Not Before: Jul 30 01:00:28 2024 GMT
            Not After : Oct 28 01:00:28 2024 GMT
        Subject: CN=d4e706d3-6c29-47fe-bafe-ac88d0d038aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:d6:6c:19:0e:7e:c3:ee:c5:3b:af:4f:fd:
                    df:fb:01:13:4e:a0:c8:4c:2d:28:33:45:1e:6c:73:
                    cc:8c:18:12:17:9f:58:b1:eb:6d:a6:b4:a8:c3:c5:
                    37:f0:b8:9a:18:0a:b7:b9:8d:75:c3:8a:0b:7f:06:
                    df:85:4d:78:b0:ee:e3:fa:a7:91:68:62:67:52:fb:
                    da:fa:1d:c7:9c:fb:99:3b:99:f9:f8:e0:69:9a:f8:
                    0d:84:0e:f5:73:9a:b2:df:54:37:ad:ed:13:46:ac:
                    06:98:d2:3c:7a:5e:d8:08:82:37:e5:5e:72:d9:f6:
                    b1:ab:4d:75:3b:5c:3f:e3:00:d2:17:ff:ca:f7:4d:
                    83:36:87:91:9c:c3:ec:ea:31:03:76:f6:6d:3d:db:
                    c2:4e:da:a1:d2:d0:86:d7:3b:8d:5a:7d:2d:64:69:
                    cb:79:5d:ae:32:aa:04:02:66:d7:d7:68:8e:38:5e:
                    eb:6b:a7:1c:55:9b:d0:b5:63:ce:0f:ae:c7:36:f2:
                    68:cb:f2:be:f2:cd:cd:28:c2:60:3e:54:fd:37:ee:
                    76:31:15:2f:dd:13:57:93:33:f2:a2:9e:93:22:9a:
                    29:97:d1:88:f6:f4:6b:29:fc:04:38:55:0f:57:5b:
                    5f:00:d5:c8:1f:81:6e:c9:82:47:3c:21:8d:20:e9:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E2:21:61:2E:91:FA:BD:05:F7:35:92:63:19:56:58:C7:AD:3D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/35a38427-81a5-3139-98de-73a36dba268f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl

            X509v3 Authority Key Identifier:
                keyid:69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:81:b2:c8:d7:84:a8:b3:19:af:8e:89:e5:08:e5:ed:1c:
         1e:87:66:aa:5a:36:7f:f3:80:7e:3b:27:5f:94:f9:5d:76:4c:
         bc:1c:62:e9:eb:b7:fd:1d:14:d4:96:7f:09:f5:5f:d7:00:25:
         d4:45:ce:3a:11:2d:72:80:df:04:c1:cf:e3:6f:3f:a3:9a:2d:
         f5:55:de:13:2a:9d:b6:1b:f1:70:68:8f:94:aa:ca:de:05:0e:
         1c:f1:e9:aa:a2:f9:73:7e:4d:c2:6c:03:54:77:b5:6b:c1:21:
         87:36:d5:2f:6d:de:61:5c:8f:0e:6e:1e:f6:c4:2b:fb:48:cb:
         72:83:d9:da:04:1d:45:01:13:d4:fe:43:08:aa:2b:5b:8e:9c:
         db:39:8c:db:9f:97:57:62:3e:75:59:91:02:44:1f:80:9e:a4:
         99:15:95:cb:3e:67:17:06:7b:79:b7:2a:39:d6:df:d7:4a:04:
         be:c8:46:29:86:59:6f:7d:06:3c:31:75:18:df:7d:3f:93:83:
         a4:80:4a:89:1d:e7:e9:6a:fb:ac:15:e9:ce:0a:8c:38:19:1c:
         5e:36:31:38:a9:cf:47:ff:df:f5:ee:72:40:2f:86:02:d8:ed:
         85:ff:bb:39:1c:38:46:14:a5:44:4f:20:ec:ce:7d:ee:7b:45:
         a0:9c:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----