Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/622fba5a-faa9-3db5-8070-7f458a1b77ec.roa
File:                     622fba5a-faa9-3db5-8070-7f458a1b77ec.roa (raw, json)
Hash identifier:          w0QD4IqRQVmuk/28/2eEwXS6K8SpnaWqx0VVM9FTOME=
Subject key identifier:   FE:77:22:1F:82:58:02:6F:11:67:D1:85:9D:4E:5F:0F:F2:AE:96:EE
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858460E3ECD129B5412476BF17300
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/622fba5a-faa9-3db5-8070-7f458a1b77ec.roa
Signing time:             Fri 31 May 2024 13:00:36 +0000
ROA not before:           Fri 31 May 2024 13:00:36 +0000
ROA not after:            Thu 29 Aug 2024 13:00:36 +0000
asID:                     203470
IP address blocks:        134.195.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 16:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0e:3e:cd:12:9b:54:12:47:6b:f1:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: May 31 13:00:36 2024 GMT
            Not After : Aug 29 13:00:36 2024 GMT
        Subject: CN=65488ebc-4220-492b-9b7d-e430c64e9e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c9:db:d3:3e:09:fa:f3:6d:69:ec:4b:13:d0:
                    b4:8c:89:6c:09:fd:38:7f:dd:97:43:1a:54:54:32:
                    d0:72:2b:07:fa:2e:c5:06:1f:5a:0a:5c:5a:85:e0:
                    15:70:60:22:f1:89:fc:9b:46:0b:07:49:d7:e7:3e:
                    32:cb:1c:1a:38:c7:f6:89:a9:ea:d9:14:3b:15:23:
                    d8:10:f9:e8:47:5d:06:7d:a3:fe:1d:ab:83:13:bc:
                    7e:b2:9d:46:d2:eb:74:8e:e6:d0:ee:f9:41:83:6b:
                    55:3f:08:87:c7:7d:f8:c9:01:09:43:3a:a7:cb:95:
                    2d:2e:66:04:7f:dd:3e:89:00:96:84:43:54:12:1e:
                    05:d3:f2:46:f8:c2:be:29:94:21:32:1e:8b:a6:41:
                    e7:5e:b6:23:e4:6e:38:a8:18:9a:62:b7:45:fc:f0:
                    02:83:cf:d2:03:d1:b6:71:1c:e7:c9:8d:8b:8a:8c:
                    05:22:9b:e3:f0:58:e5:67:b5:0d:5f:98:6b:f8:72:
                    e6:46:1e:28:e3:7b:ef:5c:3c:28:a5:88:5c:1f:76:
                    f5:44:50:cd:0d:61:37:1a:7a:52:a1:2b:45:ce:6f:
                    96:15:cf:e9:08:4a:43:16:56:fe:d6:a4:20:c4:f6:
                    70:01:31:ed:4b:07:c1:6c:de:8d:fc:83:24:b3:12:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:22:1F:82:58:02:6F:11:67:D1:85:9D:4E:5F:0F:F2:AE:96:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/622fba5a-faa9-3db5-8070-7f458a1b77ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:37:e2:9c:bc:d5:a0:df:08:28:82:96:2a:f8:0c:3a:29:
         42:d2:2d:99:87:72:9f:2a:c7:07:ed:0a:fd:19:ee:0a:59:56:
         77:76:3e:c3:3e:b0:c6:a3:34:5d:4a:99:35:de:90:2e:46:68:
         86:e7:a5:91:05:07:d4:ff:7f:b1:ae:ee:74:0f:07:9b:24:52:
         ca:a1:1c:33:bf:e3:fc:78:29:98:8c:2f:cc:e0:e5:85:43:e5:
         8d:2e:4c:75:ea:34:9a:11:6b:ec:a3:ef:b9:db:a9:76:06:52:
         a2:e4:30:8d:49:f4:07:03:64:da:b5:96:d9:b0:75:b2:8f:e4:
         af:3b:10:24:2f:18:fc:a7:9f:81:f6:65:3a:ec:61:0b:40:20:
         2c:97:a7:32:99:d1:a4:0f:a3:ff:88:6b:44:47:ca:f0:ae:f0:
         14:ac:68:90:8e:93:ed:2f:47:4f:fc:bc:5d:3e:2a:8e:d5:98:
         2d:51:1d:a8:6e:c3:b2:4e:6d:70:58:5b:25:d4:72:29:ed:61:
         f2:f6:33:68:4c:76:7e:05:db:0b:91:a6:92:d1:f7:ee:1e:43:
         f3:09:89:4b:cc:bb:80:d8:f1:6b:a4:a7:28:42:1e:38:e4:b5:
         2d:aa:c0:4b:3c:5a:a1:eb:d8:c2:8b:e1:a4:03:0b:17:07:fe:
         93:9c:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----