Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/9a3e110b-adee-37a9-a373-d4341338986c.roa
File:                     9a3e110b-adee-37a9-a373-d4341338986c.roa (raw, json)
Hash identifier:          aSDrasEksvjwRbKWv/oMXn2aoqlp5046C9GpcXGSem4=
Subject key identifier:   A8:13:81:E2:AF:D8:C9:D4:B4:11:A3:72:63:BC:62:4A:17:9A:38:AD
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285846556F0762183C6C2038119F00
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/9a3e110b-adee-37a9-a373-d4341338986c.roa
Signing time:             Wed 26 Jun 2024 01:00:24 +0000
ROA not before:           Wed 26 Jun 2024 01:00:24 +0000
ROA not after:            Tue 24 Sep 2024 01:00:24 +0000
asID:                     29854
IP address blocks:        199.195.192.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 07:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:55:6f:07:62:18:3c:6c:20:38:11:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jun 26 01:00:24 2024 GMT
            Not After : Sep 24 01:00:24 2024 GMT
        Subject: CN=15f71126-19f9-4405-a2a3-ee89467dc692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:91:85:7a:f5:7c:49:f4:da:4b:ad:77:72:
                    ef:ac:b7:74:37:83:52:cf:42:e1:0f:b1:cc:57:09:
                    95:60:50:f2:34:fc:27:72:fe:1a:36:e5:0d:e7:8a:
                    87:4a:91:6a:9d:d1:29:b7:ff:26:c3:13:62:00:d4:
                    4f:92:5e:ab:73:de:65:70:c1:ba:18:36:a3:8b:86:
                    8c:c2:a4:e1:00:81:05:6a:fc:b2:59:6b:29:02:2a:
                    4d:78:6c:0a:ed:b3:c0:1a:ce:2c:c6:5d:38:c3:81:
                    69:80:ca:04:61:54:97:a3:11:8c:54:e4:3a:52:7c:
                    a6:b8:91:0a:a7:f9:b8:6d:42:52:97:7e:9e:6d:9d:
                    03:5f:56:06:92:5d:39:56:23:8d:38:c1:c8:c5:8f:
                    f6:63:ea:bd:51:48:9c:1a:0f:16:46:96:bd:d0:71:
                    18:64:3b:c2:eb:cd:af:b1:e2:8d:8e:07:34:f6:2a:
                    7a:f2:3a:26:63:32:66:aa:1f:5d:24:8a:f1:d1:fe:
                    0e:1b:21:35:5f:14:9f:a9:f1:e3:24:0f:55:17:10:
                    7e:f7:c6:5d:17:17:ff:4e:e0:7c:e8:e9:c0:77:03:
                    e9:15:ba:95:3f:e1:99:f4:f8:1e:60:54:cb:6d:0c:
                    48:80:17:0f:4c:67:82:a4:28:7f:4e:28:1d:b1:6d:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:13:81:E2:AF:D8:C9:D4:B4:11:A3:72:63:BC:62:4A:17:9A:38:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/9a3e110b-adee-37a9-a373-d4341338986c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:14:e4:18:f9:8f:97:35:9c:4f:02:02:e2:38:19:dc:8d:fc:
         6f:2b:f6:5d:21:9d:14:ad:f8:a1:25:47:cd:7c:8d:eb:25:38:
         1a:77:6e:da:f0:e7:35:3d:24:c5:06:dc:a1:38:6c:03:21:9e:
         8d:3a:40:de:e4:a8:4c:57:f6:8e:ee:fe:02:04:97:a0:15:c9:
         b7:08:f8:2e:d9:84:b5:48:7f:14:29:e4:87:ed:08:62:97:96:
         d6:4d:a4:30:7d:2b:0c:4c:99:b8:f0:bb:76:fa:71:b8:97:85:
         a4:5f:17:57:5f:9a:df:6f:1d:57:77:ab:06:9c:0b:3f:be:ca:
         2a:5b:3e:67:d5:ec:e3:04:d1:0b:0c:89:33:f2:70:26:84:19:
         bd:ae:6a:77:6e:de:cf:db:f4:fe:5f:6d:b5:fa:f4:c2:eb:88:
         51:05:7d:a0:56:78:98:a1:ec:d7:8a:3b:f5:9d:a1:d8:30:04:
         d5:64:af:6a:45:3b:81:79:de:fe:d8:fb:43:fb:07:98:99:63:
         10:a8:fb:34:f5:e7:ad:65:8a:52:fd:80:ef:16:0b:c9:ad:67:
         32:5f:76:05:67:95:41:bf:37:ca:10:de:c6:85:48:65:35:8c:
         9f:67:85:9c:85:64:9d:c9:45:42:8c:05:fb:b8:51:40:f8:e7:
         78:e7:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----