Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/294e32e8-c543-3e6f-a57a-732e44513f68.roa
File:                     294e32e8-c543-3e6f-a57a-732e44513f68.roa (raw, json)
Hash identifier:          SDM9Az/d8WfadtLOLeF5cECXUI1HqLlA05vih9bOYno=
Subject key identifier:   AC:89:C6:CA:BC:BD:74:A7:00:00:92:F3:E8:AB:C2:8E:66:75:37:55
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845DEC942B2952679B7B3E576E0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/294e32e8-c543-3e6f-a57a-732e44513f68.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     13213
IP address blocks:        69.4.238.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 14:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:42:b2:95:26:79:b7:b3:e5:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=da344b6b-262a-4ba6-a3f3-8ad77a28496a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:a4:e4:08:73:15:49:3a:5b:e8:3b:09:a5:
                    0d:4a:e9:06:8b:e1:b6:65:6a:2f:26:02:b4:84:91:
                    01:d5:a6:5f:34:1a:b9:a7:7a:01:46:ef:95:e5:1a:
                    f9:f1:18:bb:50:32:7e:08:65:87:0f:5a:fa:33:19:
                    fc:27:73:40:a3:b3:35:2d:fb:94:8c:44:b9:0e:b9:
                    91:8e:12:7a:d7:ad:e2:0e:3c:a9:0b:8e:f3:99:d8:
                    00:61:e7:c4:19:6d:f3:95:91:93:2c:05:67:0b:92:
                    16:43:a6:04:06:d3:ab:d7:8b:a8:35:ad:4b:c0:b1:
                    fa:45:01:53:b8:1a:a9:34:36:48:dc:79:78:38:8f:
                    96:56:21:cd:b0:b4:3f:56:91:df:9d:33:bb:33:8b:
                    5a:68:85:31:cd:36:7e:ad:dc:1f:3f:05:95:a1:d5:
                    4d:ae:83:fd:54:8b:3f:78:46:62:e4:6a:87:9f:e5:
                    9e:61:6b:ad:c8:2a:27:9f:d0:f6:ae:fd:14:49:ec:
                    f6:d4:1a:4f:fc:b0:e8:9f:de:4c:75:6e:86:15:a7:
                    55:9d:7f:3e:85:88:42:b6:7e:75:b8:9f:05:6c:56:
                    8d:51:9a:0c:82:3d:68:08:dd:7c:09:69:d0:bc:a7:
                    2c:fc:44:32:94:44:28:22:ca:0f:d4:28:11:81:15:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:89:C6:CA:BC:BD:74:A7:00:00:92:F3:E8:AB:C2:8E:66:75:37:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/294e32e8-c543-3e6f-a57a-732e44513f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2f:36:4d:09:0e:48:f9:9c:fd:9e:b5:16:eb:0e:6c:52:3c:
         02:d4:7a:9b:e7:45:06:08:71:6b:b0:79:bd:f8:ea:cd:00:89:
         04:3e:c3:63:26:1f:bd:31:a3:fd:5d:b8:4f:8e:66:b0:fe:fe:
         e7:8d:a3:ae:37:af:d7:2b:7d:c1:ed:28:73:8d:3a:86:71:e7:
         4d:af:d0:25:f1:1b:5a:43:2d:ed:2e:c3:5d:5f:4c:66:d1:e6:
         4d:6e:5a:18:97:aa:a9:f4:ca:df:da:e2:c8:a6:61:20:e4:bc:
         05:71:67:ab:a3:d0:f1:78:63:0c:4d:39:ed:38:dd:38:d6:ff:
         5f:cc:3d:fb:b7:df:73:7a:b9:50:8e:fe:8a:6c:7b:43:56:e6:
         c2:99:55:94:45:57:10:59:4b:96:08:67:5d:77:5d:e8:25:8d:
         07:c9:cb:22:c1:77:9e:98:39:04:3c:3c:67:2d:45:2e:4b:d2:
         6f:dd:db:73:43:b2:b6:d3:2e:98:7d:46:4a:84:0e:60:90:00:
         48:27:ea:b1:f7:d8:be:52:65:43:78:6c:2e:35:ee:a6:1f:08:
         97:e2:ca:7c:23:22:f8:84:60:5e:fb:c0:ea:a2:22:21:1e:ee:
         f6:41:47:a0:c9:3d:b7:77:96:a5:a8:54:b2:7c:c2:af:9b:c9:
         f1:64:5d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----