Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d2a5ca2-d857-39d7-8bc8-47052b31840f.roa
File:                     8d2a5ca2-d857-39d7-8bc8-47052b31840f.roa (raw, json)
Hash identifier:          TFxpjlGEEWJcyzcywAX4TQuRC2gtpCJpCjM7DlbIqDY=
Subject key identifier:   F9:A0:45:0E:B5:FA:80:EC:13:FA:CA:6D:61:77:76:F9:46:9D:F5:34
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845B4E8D1161CC4049E1D642CF0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d2a5ca2-d857-39d7-8bc8-47052b31840f.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     13213
IP address blocks:        173.244.206.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 08:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d1:16:1c:c4:04:9e:1d:64:2c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=82f596c7-0171-4657-afba-aceffa8114ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:99:27:c5:f6:c4:17:83:3f:f3:8f:af:cd:
                    bc:54:9e:4d:f6:d3:2f:5f:0e:3c:3c:12:fc:41:13:
                    5b:0d:71:16:10:31:69:f9:bf:2a:d4:24:4a:0d:29:
                    28:17:e3:c4:96:2f:2b:53:73:0b:dc:6d:71:a8:f3:
                    6c:1c:f3:96:52:1e:b0:ab:f7:c5:98:9a:d4:cc:1e:
                    e6:b5:aa:ee:0a:38:c1:7f:54:0e:ee:20:47:39:98:
                    1b:f0:8c:58:59:ad:1c:25:6c:4d:54:1c:20:06:75:
                    9a:02:e3:15:4d:c2:3b:68:a4:38:10:31:eb:5e:6c:
                    ef:75:18:da:1b:0f:d4:3a:ef:eb:0d:1d:52:7f:c5:
                    77:bf:f4:16:ae:31:55:33:83:c7:e1:e8:1b:d2:85:
                    b6:f9:60:0d:df:bb:32:2d:22:e7:30:2c:24:0c:44:
                    b8:36:e1:81:7c:25:44:c2:37:8b:70:a5:5d:f2:b4:
                    60:e8:a4:0c:4f:a0:11:88:65:25:22:cc:ae:cb:2d:
                    80:7d:c1:e3:d4:a8:03:89:df:46:03:e1:56:d7:0c:
                    4f:24:3f:28:66:c6:af:01:64:33:fc:fd:c2:b5:27:
                    0e:16:8b:8a:ce:09:95:b1:f9:fc:4c:3c:28:b3:a7:
                    3c:b1:38:2f:07:ee:7b:9c:0d:5b:55:07:53:c7:1b:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A0:45:0E:B5:FA:80:EC:13:FA:CA:6D:61:77:76:F9:46:9D:F5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d2a5ca2-d857-39d7-8bc8-47052b31840f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:1e:8d:ee:90:9b:b6:18:bd:33:35:ee:d1:72:ad:89:d8:16:
         1f:3f:7b:ee:76:4f:10:ba:bb:b0:e4:cb:eb:c3:20:d6:3f:7a:
         fd:71:7d:f4:1d:6c:f6:7f:20:53:f5:fd:ec:57:0b:c5:a1:4e:
         29:b8:57:9a:d0:95:b3:27:3b:49:89:cb:01:49:73:75:6a:c4:
         2a:d8:f9:01:75:7d:fe:4e:c2:82:07:ca:2b:4f:3d:f0:9f:7e:
         59:03:91:34:d9:cb:e7:57:10:cd:f3:bb:c0:08:5a:bf:46:6b:
         c7:6d:b1:1a:09:87:86:98:82:4a:46:ca:7e:0b:6e:39:1d:55:
         12:ff:4d:5d:df:e3:e3:b8:83:c1:72:f0:ce:77:07:4e:37:58:
         ca:75:ff:3d:c9:c2:e3:54:9a:d5:e3:5e:54:68:e8:af:73:a8:
         43:bc:7d:4b:9b:24:e6:e6:93:70:59:66:30:de:f7:4e:ce:a6:
         6b:13:99:de:c0:0a:9c:78:97:f9:ed:e9:e6:85:cc:ea:23:ce:
         b4:e5:5e:c7:40:e3:b9:cc:18:35:0b:ca:80:cc:7f:92:cc:51:
         60:cc:6d:49:76:db:c1:58:21:fb:aa:0f:c9:a2:92:18:b5:8b:
         db:63:74:73:27:44:92:b0:21:0d:db:b8:6a:05:23:92:58:34:
         66:5c:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----